Configuring Firewall Security Enhancements 83
HomePortal 3801HGV Gateway User Guide Configuring Firewall Settings
Configuring Firewall Security Enhancements
Objective
To configure firewall security enhancements. This allows you to configure the firewall rules to allow
traffic on the UDP and TCP ports.
Steps
1. Navigate to Settings > Firewall > Advanced Configuration. The Advanced configuration
page to configure the security enchancements appears.
2. Enable or disable stealth mode by selecting or clearing the Stealth Mode check box.
When you enable stealth mode, the gateway firewall does not return any information in
response to network queries; that is, it will appear to the intruder that your network does
not exist. This discourages intruders from accessing your network, because it appears as
though there is no active network to access.
3. Enable or disable the execution of external ping request by selecting or clearing the Block
Ping check box.
When you disable Block Ping, intruders can use ping to launch an attack against your
network, because ping can determine the IP address of the network (for example,
105.246.172.72) from the domain name (for example, www.mynetwork.com). If you enable
Block Ping, your network will block all ping requests.
4. Enable or disable the restricted transmission of packets by selecting or clearing the Strict
UDP Session Control check box.
When you enable restricted UDP session, security is enhanced and the gateway does not
accept packets sent from an unknown source over an existing connection.
5. Enter the duration in seconds in the UDP Session Timeout text box. The gateway
terminates the UDP connection request after that duration.
6. Enter the duration in seconds in the TCP Session Timeout text box. The gateway
terminates the TCP connection request after that duration.
7. Click Save. This saves the configuration changes done to firewall security enhancements.
Configuring Application Layer Gateway
Objective
To configure Application Layer Gateway (ALG) on the firewall of the gateway.