SMC Networks SMC7008ABR manual Intrusion Detection, Stateful Packet Inspection

Page 27

7008ABR – Manual

Intrusion Detection

The Intrusion Detection feature of the Barricade limits the access of the incoming traffic from the WAN port. When the SPI feature is turned on, all the incoming packets will be blocked unless certain types of traffic types are checked by the users. When the user checks certain types of traffic, only the particular type of traffic initiated from the Internal LAN will be allowed. For example, if the user only checks “FTP service” from the Stateful Packet Inspection page, all the incoming traffic will be blocked except the FTP connection initiated from the local LAN.

oStateful Packet Inspection

This option allows you to select different application types that are using dynamic port numbers. If you need to use the Stateful Packet Inspection (SPI) for blocking packets, click on the “Yes” radio button in the “Enable SPI and Anti-DoS firewall protection” field and then check the inspection type that you need, such as Packet Fragmentation, TCP Connection, UDP Session, FTP Service, H.323 Service and TFTP Service.

oHacker Prevention Feature

The Barricade firewall inspects packets at the application layer, and maintains TCP and UDP session information, including timeouts and number of active sessions, provides the ability to detect and prevent certain types of network attacks such as DoS attacks. Network attacks that deny access to a network device are called denial- of-service (DoS) attacks. Denials of Service (DoS) attacks are aimed at devices and networks with a connection to the Internet. Their goal is not to steal information, but to disable a device or network so users no longer have access to the network resource.

By using the above inspected information and timeout/threshold criteria, the Barricade provides the following DoS attack preventions: Ping of Death (Ping flood) attack, SYN flood attack, IP fragment attack (Teardrop Attack), Brute-force attack, Land Attack, IP Spoofing attack, IP with zero length, TCP null scan (Port Scan Attack), UDP port loopback, Snork Attack etc.

NOTE: The firewall does not significantly affect system performance, so we advise enabling the prevention features to protect your network users.

27

Image 27
Contents Cable/DSL Broadband Router Compliances FCC Class BEC Conformance Declaration Class B Safety Compliance Industry Canada Class BJapan Vcci Class B Operating Voltage Cord Set Specifications Setting up the Print Server …………………………………………… Configuring your Computer …………………………………………Configuring the Barricade …………………………………………… Navigating the Web-based Administration ………………………Minimum Requirements Features and BenefitsPackage Contents IntroductionLINK/ACT LED OFF Flashing PowerGetting to know the Barricade WANConnect the WAN Basic Installation Procedure Connect the LANPower on Getting ConnectedConfiguring Windows 95/98/Me Configuring your ComputerConfiguring Windows Configuring Windows XP Configuring a Macintosh Computer Internet Explorer 5 or above Configuring the BarricadeBrowser Configuration Disable Proxy ConnectionAccessing the Barricade Management Making Configuration Changes Navigating the Web-based AdministrationCable Modem Setup WizardStep One Time Zone Step Two Broadband TypeStep Three Finish Configuration Time Zone Advanced SetupPassword Settings SystemDynamic IP WANPptp Static IP Address DNSDial-up LAN LAN IPIP Address Pool NAT Address MappingVirtual Server Firewall Special ApplicationsMAC Filtering Access ControlURL Blocking Schedule Rule Hacker Prevention Feature Intrusion DetectionStateful Packet Inspection Ddns Dynamic DNS Email NotificationConnection Policy DMZ Demilitarized ZoneTools Configuration Tools o BackupFirmware Upgrade Reset UPnPInternet GatewayInformation 7008ABR Manual Install the Printer Port Monitor Setting up the Print ServerConfigure the Print Server Configure LPR port on Windows 2000/XP 7008ABR Manual 7008ABR Manual 7008ABR Manual 7008ABR Manual Confirm printer Connection Appendix a Troubleshooting Verify you are connected to the Barricade RouterAm getting an IP Address that starts with Have another IP Address displayed Have a Dynamic IP connection and I can’t get online Appendix B Technical Specifications Compliances TemperatureInternet Standards HumidityTechnical Support Phone For Literature or Advertising RESPONSE, Call

SMC7008ABR specifications

The SMC7008ABR is a versatile and robust broadband router offered by SMC Networks, a well-known name in the networking industry. Designed to cater to the needs of small to medium-sized businesses, as well as home users requiring reliable connectivity, this device provides a blend of performance and affordability.

One of the key features of the SMC7008ABR is its ability to support both ADSL and cable modem connections. This versatility makes it suitable for a wide array of internet setups, allowing users to choose the best option for their specific requirements. The router comes equipped with eight Ethernet ports, enabling wired connections for multiple devices simultaneously. This is particularly beneficial in environments where high-speed internet is crucial, such as offices with several computers or multimedia setups.

The SMC7008ABR is built using robust hardware, ensuring high performance and reliability. It supports a wide range of operating systems, which provides flexibility in integrating it into various network environments. With its plug-and-play design, users can easily set up the router without needing advanced technical knowledge. The intuitive web-based interface simplifies configuration and management, allowing users to monitor their network and adjust settings quickly.

In terms of security, the SMC7008ABR is equipped with multiple features to protect sensitive data. It supports firewall capabilities that help prevent unauthorized access, while its encryption features ensure secure communications over the network. The router also includes Network Address Translation (NAT), which adds an additional layer of security by allowing multiple users to share a single IP address.

Furthermore, the SMC7008ABR is designed with scalability in mind. As businesses grow and network demands increase, this router can adapt by integrating with additional hardware or expanding connectivity through its available ports. Its reliable performance and user-friendly features make it an excellent choice for a variety of networking environments.

Overall, the SMC7008ABR is an excellent broadband router that combines essential features, robust security, and ease of use. Whether for home or small office use, it provides a powerful solution for anyone looking to establish a reliable internet connection.