Motorola SBG941UE, 570280-001-a, SBG941E manual Firewall Pages

Page 49

B

8

Firewall Pages

 

The SBG941 Firewall Pages allow you to configure the SBG941 firewall filters and firewall alert notifications. The SBG941 firewall protects the SBG941 LAN from undesired attacks and other intrusions from the Internet. It provides an advanced, integrated stateful-inspection firewall supporting intrusion detection, session tracking, and denial-of-service attack prevention. The firewall:

Maintains state data for every TCP/IP session on the OSI network and transport layers.

Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for improper packets and intrusion attempts.

Provides comprehensive logging for all:

User authentications

Rejected internal and external connection requests

Session creation and termination

Outside attacks (intrusion detection)

You can configure the firewall filters to set rules for port usage. For information about choosing a predefined firewall policy template, see the Firewall Pages.

You can click any Firewall submenu option to view or change the firewall configuration information for that option.

For information about how the firewall can affect gaming, see Gaming Configuration Guidelines.

The predefined policies provide outbound Internet access for computers on the SBG941 LAN. The SBG941 firewall uses stateful-inspection to allow inbound responses when there already is an outbound session running that corresponds to the data flow. For example, if you use a web browser, outbound HTTP connections are permitted on port

80.Inbound responses from the Internet are allowed because an outbound session is established.

When required, you can configure the SBG941 firewall to allow inbound packets without first establishing an outbound session. You also need to configure a port forwarding entry on the Advanced Port Forwarding Page or a DMZ client on the Advanced DMZ Host Page.

Firewall Pages • Advanced Routing Information Protocol Setup Page

Motorola SURFboard SBG941 Series Wireless Cable Modem Gateways • User Guide

41

570280-001-a

Image 49
Contents Motorola SURFboard Read This Before You Begin Safety and Regulatory InformationWireless LAN Information FCC Statements FCC Interference Statement Recycling your Motorola Equipment Caring for the Environment by RecyclingContents Status Pages Wireless PagesBasic Pages Advanced PagesSoftware License & Warranty TroubleshootingInside the Box Contact Information Minimum System RequirementsFront Panel Overview Product OverviewRear Panel Overview WirelessUSB MAC Label OverviewCabling the SBG941 Cabling the SBG941SBG941 LED Activity During Startup Cabling the SBG941UConfiguring TCP/IP in Windows XP Connecting to the InternetOpen the Control Panel Configuring TCP/IP in Windows Vista Verifying the IP Address in Windows XP Click All Programs Click AccessoriesVerifying the IP Address in Windows Vista Wall Mounting the Modem Setting Up a Wi-Fi NetworkRenewing Your IP Address in Windows XP or Windows Vista Wall Mounting Template 10.20 cm 00 10.20 cm Starting the SBG941 Configuration Manager Cmgr Basic ConfigurationChanging the SBG941 Default Password SBG941 Menu Options Bar Configuration Manager Menu Options BarGetting Help Configuring the Firewall for Gaming Gaming Configuration GuidelinesConfiguring Port Triggers Configuring a Gaming DMZ HostExiting the SBG941 Configuration Manager Status Software Status PagesStatus Connection Startup ProcedureField Descriptions for the Status Connection Downstream ChannelField Descriptions for the Status Security Status SecurityPing Utility Status DiagnosticsTraceroute Utility Status Event Log Status ConfigurationField Descriptions for the Basic Setup Basic SetupNapt mode MAC Address IP AddressDuration ExpiresField Descriptions for the Basic Dhcp Basic DhcpField Descriptions for Basic Ddns Basic DdnsRestoring Your SBG941 Configuration Basic BackupBacking Up Your SBG941 Configuration Advanced Options Advanced PagesField Descriptions for the Advanced Options Http//WanIPAddress8080/ to access the SBG941Advanced IP Filtering EnabledField Descriptions for the Advanced IP Filtering Start AddressAdvanced MAC Filtering Setting a MAC Address FilterField Descriptions for the Advanced MAC Filtering Click Add MAC AddressField Descriptions for the Advanced Port Filtering Advanced Port FilteringStart Port End PortAdvanced Port Forwarding Field Descriptions for the Advanced Port Triggers Advanced Port TriggersEnable Setting Up the DMZ HostAdvanced DMZ Host Target Range Start PortField Descriptions for the Advanced RIP Setup Advanced Routing Information Protocol SetupRIP Enable RIP AuthenticationRIP Authentication Key ID RIP Authentication KeyRIP Reporting Interval RIP Destination IP AddressFirewall Pages Firewall Web Content Filter Field Descriptions for the Firewall Local Log Firewall Local LogContact Email Address Smtp Server NameField Description for the Firewall Remote Log Firewall Remote LogParental Control Pages Parental Control User SetupField Descriptions for the Parental Control User Setup Parental Control Basic Setup Parental Control Time of Day Access Policy Parental Control Event Log Field Descriptions for the Wireless 802.11 Radio Wireless 802.11 RadioField Descriptions for the Wireless 802.11 Primary Network Wireless 802.11 Primary NetworkPrimary Network Network Name SsidWPA/WPA2 Encryption Shared Key AuthenticationWPA Pre-Shared Key Show KeyNetwork Key 1 802.1x AuthenticationCurrent Network Key PassPhraseWireless 802.11 Guest Network Field Descriptions for the Wireless 802.11 Guest Network Field Descriptions for the Wireless 802.11 Advanced Wireless 802.11 Advanced54g Mode Basic Rate SetXPress Technology 54g ProtectionAfterburner Technology RateField Descriptions for the Wireless 802.11 Access Control Wireless 802.11 Access ControlMAC Restrict Mode Connected ClientsField Descriptions for the Wireless 802.11 Wi-Fi Multimedia Wireless 802.11 Wi-Fi MultimediaWireless Pages Wireless 802.11 Wi-Fi Multimedia Field Descriptions for the Wireless 802.11 Bridging Wireless 802.11 BridgingWireless Bridging Remote BridgesEncrypting Wireless LAN Transmissions Setting Up Your Wireless LANEncrypting Wireless LAN Transmissions Motorola recommends configuringConfiguring a Wireless Client for WPA Installing Wireless ClientsInstalling Wireless Clients Configuring a Wireless Client with the Network Name Ssid Configuring a Wireless Client for WEPTroubleshooting Solutions SolutionsPower light is off Cannot send orFront Panel LEDs and Error Conditions Front Panel LEDs and Error ConditionsWPA enabled Change the WPA Encryption to AES You may Software LicenseYou may not Warranty InformationSoftware License & Warranty Warranty Information Motorola, Inc Tournament Drive Horsham, PA 19044 U.S.A