HP Firewall manual IP/Wildcard

Page 32

Figure 27 Basic configuration wizard: 5/6 (NAT configuration)

Table 11 NAT configuration items

ItemDescription

Interface

Select an interface on which the NAT configuration will be applied. Generally, it is

the outgoing interface of the device.

 

 

 

 

Specify whether to enable dynamic NAT on the interface.

Dynamic NAT

If dynamic NAT is enabled, the IP address of the interface will be used as the IP

address of a matched packet after the translation.

 

 

By default, dynamic NAT is disabled.

 

 

Source IP/Wildcard

If dynamic NAT is enabled, set the source IP address and wildcard for packets.

 

 

Destination

If dynamic NAT is enabled, set the destination IP address and wildcard for packets.

IP/Wildcard

 

 

 

Protocol Type

If dynamic NAT is enabled, select the protocol type carried over the IP protocol,

including TCP, UDP, and IP (indicating all protocols carried by the IP protocol).

 

 

 

 

Specify whether to enable the internal server.

 

You can configure an internal server on the NAT device by mapping a public IP

 

address and port number to the private IP address and port number of the internal

 

server.

Internal Server

By default, the internal server is disabled.

 

IMPORTANT:

 

Configuration of the internal server may result in disconnection with the device (for

 

example, specify an external IP address as the IP address of the local host or as the IP

 

address of the current access interface). Perform the operation with caution.

External IP: Port

When the internal server is enabled, set the valid IP address and service port number

for the external access.

 

 

 

 

28

Image 32
Contents HP A-F1000-A-EI/A-F1000-S-EI VPN Firewall Page Contents Page Product overview Front panel viewRear panel view This chapter includes these sectionsDescription of the Open Book mark Operation ReferencePreparing for installation Safety recommendationsSafety symbols General safety recommendationsTemperature and humidity Examining the installation siteSafety with laser Cooling system CleannessAltitude ESD prevention Use an ESD-preventive wrist strapRack-mounting Installation toolsLightning protection Requirements Result Accessories supplied by the firewallChecklist before installation Take effective measures to protect the power system from Installing the firewall in a 19-inch rack Installing the firewallInstallation flow Install cage nuts Grounding the firewall Fix the firewall to the rackInstalling an interface module Connect the grounding cableConnecting an optical fiber Connecting Ethernet cablesConnecting a copper Ethernet cable Install the transceiver module Connecting an AC power cord Installing the power supply and connecting the power cordInstalling a power supply Connecting the DC power cable Connect an AC power cordLogging in to the firewall and configuring basic settings Logging in to the firewall through the console portSetting terminal parameters Connection description of the HyperTerminalSet the serial port used by the HyperTerminal connection Checking after power-on Powering on the firewallChecking before power-on Logging in to the firewall through Telnet Logging to the firewall through a web browserPerforming basic settings for the firewall Launching the basic configuration wizardConfiguring the system name and user password Basic configuration wizard 1/6Description Configuring service managementBasic information configuration items Configuring the IP address for an interface Configuring NAT ItemDescriptionIP/Wildcard Completing the configuration wizard Basic configuration wizard 6/6Hardware management and maintenance Displaying detailed information about the firewallDisplaying the electrical label information of the firewall Displaying the operational status of a power supply Displaying the CPU usage of the firewallDisplaying the memory usage of the firewall Displaying the operational status of the fansField Description Displaying the temperature information of the firewallDisplaying operational statistics of the firewall To reboot a firewall, use one of the following methods Saving the running configuration of the firewallRebooting the firewall Page Fan failure TroubleshootingPower supply system failure Configuration terminal problems Password lossUser password loss No terminal displaySuper password loss Cooling system failure Interface module failureAppendix a Technical specifications Dimensions and weightPower consumption range StoragesPower input Power input specificationsTechnical specifications for the console port Console portTechnical specifications for fiber Ethernet ports Technical specifications for 1000 Mbps fiber Ethernet portsStatus Meaning Appendix B LEDsFront panel LEDs PWR2 OFF Description of the LED on the front panel of NSQ1XS2U0 Interface specifications of NSQ1XS2U0Appendix C Interface module Connecting the interface cable 10A AC power cables used in different countries or regions 10A AC power cables used in different countries or regionsLength Connector outline Power cable outline Countries or regions 16A AC power cables used in different countries or regions 16A AC power cables used in different countries or regionsCountries or regions Page Related information Support and other resourcesContacting HP Convention Description ConventionsConvention Description Network topology icons Index D E F G I L N P R S
Related manuals
Manual 119 pages 45.15 Kb Manual 3 pages 40.21 Kb

Firewall specifications

HP Firewall, often positioned as a key component in enterprise network security, is designed to protect sensitive data and maintain secure communications across various environments. The primary role of a firewall is to monitor incoming and outgoing network traffic and make decisions based on a set of security rules. HP Firewalls utilize a combination of hardware and software to create a robust security framework that helps organizations manage their network perimeter effectively.

One of the main features of HP Firewall is its advanced security protocols that provide deep packet inspection. This technology scrutinizes packet contents beyond the header information, analyzing data flows for signs of malicious activity. By employing Stateful Inspection, HP Firewalls maintain a state table that logs active connections, allowing the firewall to evaluate packets in the context of established sessions. This helps optimize resource usage while delivering high-performance security.

Another characteristic of HP Firewall is its integration with HP's broader security ecosystem. By working seamlessly with other HP security products, such as HP Secure Access and HP Advanced Malware Protection, organizations can deploy a multi-layered security strategy. This integration enables centralized management, streamlining security policies and improving response times against threats.

HP Firewalls also feature next-generation capabilities. This includes intrusion prevention systems (IPS) that actively monitor network traffic for suspected threats and automatically take action to block potential breaches. Additionally, these firewalls come with application awareness features, allowing organizations to enforce policies based on specific applications rather than simply based on port or protocol. This granularity enhances control over minimal use of bandwidth while simultaneously mitigating risks from unwanted applications.

Furthermore, HP Firewall models are equipped with user identity management, allowing organizations to apply security policies based on user roles and the specific needs of the business. This significantly improves the overall security posture as it adds another layer of control.

Scalability is a notable characteristic of HP Firewalls, making them suitable for both small businesses and large enterprises. Organizations can expand their security infrastructure as needed while maintaining efficiency.

In summary, HP Firewalls deliver advanced security features, scalability, and seamless integration within the HP security ecosystem. Their emphasis on deep packet inspection, real-time monitoring, and user identity management make them a powerful asset in the defense against cyber threats, ensuring that organizations can protect their critical data and maintain the integrity of their network environments.