Manuals / Draytek / Computer Equipment / Network Router

Draytek 5500 Series manual Web Content Filter

Models: 5500 Series

1 250

Download 250 pages 57.62 Kb

Page 80

3.5.6 Web Content Filter

Click Firewall and click Web Content Filter to open the setup page.

For this section, please refer to Web Content Filter user’s guide.

72	VigorPro5500 Series User’s Guide

Image 80

Draytek 5500 Series manual Web Content Filter

Contents

VigorPro 5500 Series Unified Security Firewall User’s Guide Safety Instructions and Approval InstructionsEuropean Community Declarations Regulatory InformationTable of Contents 100 171 211Trouble Shooting 235 Page Web Configuration Buttons Explanation LED Indicators and ConnectorsFor VigorPro LEDFor VigorPro 5500G WlanIsdn For VigorPro 5500Gi Interface Description Hardware Installation InternetVigorPro5500 Series User’s Guide Configuring Basic Settings Changing PasswordNow, the Main Screen will pop up Quick Start Wizard PPPoE VigorPro5500 Series User’s Guide Pptp Static IP Dhcp Online Status Displays the IP address of the default gateway Online status for DhcpSaving Configuration This page is left blank WAN Basics of Internet Protocol IP NetworkWhat are Public IP Address and Private IP Address Get Your Public IP Address from ISPGeneral Setup EnablePhysical Mode Display NameLoad Balance Mode Active ModePhysical Type Negotiation for determined by the systemInternet Access Access ModeIndex DetailsDetails Page for PPPoE Details Page for Static or Dynamic IP Settings Dhcp ClientKeep WAN ConnectionDNS Server IP AddressPptp Setup PPP SetupDetails Page for Pptp AssignmentLoad-Balance Policy MAC address for the routerProtocol WANDest Port End Binding WANInterface Src IP Start LAN Basics of LANWhat are Virtual LANs and Rate Control What is Routing Information Protocol RIPWhat is Static Route 1st IP Address 1st Subnet Mask For IP Routing Usage SubnetRelay Agent 1st subnet/2nd subnet Specify which subnet that ConfigurationDhcp Server Static Route DNS ServerAdd Static Routes to Private and Public Networks VigorPro5500 Series User’s Guide Vlan Disable Bind IP to MACStrict Bind ARP TableNAT Port Redirection Private IP Service NamePublic Port Private Port ActiveDMZ Host True…Choose PC Open Ports CommentWAN Interface Local IP AddressEnable Open Ports Local ComputerStart Port End PortIP Object Objects SettingsSet to Factory Default Clear all profiles Allowed Interface Choose a proper interface WAN, LAN or AnyAddress Type Start IP AddressSelected IP Objects IP GroupAvailable IP Objects Service Type Object Service Type Group Name Available Service Type Objects Selected Service Type CSM ProfileProfile Name Firewall Facilities FirewallBasics for Firewall IP Filters Stateful Packet Inspection SPIContent Filtering Content Security Management CSMDenial of Service DoS Defense Web Filtering Anti-Virus and Anti-IntrusionContent Security Call FilterData Filter FilterFilter Setup Filter RuleMove Up/Down Next Filter SetCheck to enable Filter Rule CommentsDirection Source/Destination IPService Type Example VigorPro5500 Series User’s Guide DoS Defense Block IP options Block LandBlock Smurf Block trace routerVigorPro5500 Series User’s Guide URL Content Filter ControlWhite List pass those Matching keywordZip, rar, .arj, .ace, .cab, .sit Exe, .com, .scr, .pif, .bas, .bat, .inf, .regInside to outside world to protect the local users privacy Files downloading from web pages. Accordingly, files withWeb Content Filter Anti-Intrusion Basic SetupService Advanced Setup Here and enable the SysLog Access Setup from System Maintenance Syslog/Mail AlertType links SeverityAction Profile Setting Anti-VirusSyslog/Mail Alert Enable Virus ScanEnable Log Virus List File Pattern List Detailed View for Anti-VirusDefault Action Enable Syslog/Mail AlertDestroy the file if the file Name is over lengthFor Default Action For default action Message Service ActivationAnti-Spam Timeout or Network ProblemChoose Protocol to Scan SpamCancel Bandwidth ManagementActivating Anti-Spam ClearSessions Limit Default TX limit Default RX limitBandwidth Limit Set in that webRX limit Quality of ServiceTX limit General Setup for WAN Interface Enable UDP Bandwidth Reserved Bandwidth RatioReserved bandwidth to upstream speed and reserved Bandwidth to downstream speedManagementQuality of Service Edit the Class Rule for QoSDiffServ CodePoint Local AddressRemote Address Edit the Service Type for Class Rule Port Configuration Enable the Function and Add a Dynamic DNS Account ApplicationsDynamic DNS Index WAN InterfaceForce Update Enable DynamicService Provider Login NameDisable the Function and Clear all Dynamic DNS Accounts Set to Factory DefaultSchedule Delete a Dynamic DNS AccountEnable Schedule Setup Idle TimeoutStart Date yyyy-mm-dd Start Time hhmmRadius Server IP AddressDestination Port Shared SecretUPnP Cant work with Firewall Software Wake On LAN Wake byMAC Address Wake UpVPN and Remote Access Remote Access ControlPPP General Setup IPSec General Setup IPSec Peer Identity IPSec Security Method107 Remote Dial-in User UserSpecify Remote Node Enable this accountIPSec Tunnel Medium -Authentication Header AH means data will be Check to enable Callback function -Enables the callbackCheck to enable callback budget control -By default, User NameLAN to LAN Call Direction Enable this profileVPN Connection Through Enable Ping to keep alive Enable Ping to Keep Alive is used to handle abnormalPPP Authentication Ping to the IPIKE Authentication VPN and Remote Access IPSec Peer IdentityMedium AH Authentication Header means data will be 3DES without Authentication -Use triple DES encryptionProvide Isdn Number to Remote- In the case that Perfect Forward Secret PFS- The IKE Phase 1 key will beFor i models only Allowed Dial-In Type Profiles set in the VPN and Remote Access IPSec Peer Check to enable Callback function-Enables the callbackSpecify Clid or Remote VPN GatewayChange default route to this VPN tunnel From first subnet to remote network, you have to doRefresh Seconds Connection ManagementDial Generate Certificate ManagementLocal Certificate Import ViewTrusted CA Certificate Basic Concept Certificate BackupIsdn General Settings PPP/MP Setup Dial to Single/Dual ISPsRequire ISP Callback Cbcp If your ISP supports Call ControlCommon Settings Method IpcpCheck Yes and enter the IP address in the field of Fixed IP Function. Require ISP Callback Cbcp If your ISPPrimary ISP Setup ISP Name Enter your ISP name Password Enter the password provided by your ISPSecondary ISP Setup ISP Name Enter the secondary ISP name Your ISPVirtual TA Virtual TA User Profiles Install a Virtual TA ClientVirtual TA Server User Profile Configure a Virtual TA Client/ ServerMSN Configuration Call Control Setup Call ControlBasic Setup Security Overview Wireless LANBasic Concepts Example Enable Wireless LAN Mixed 11b+11g+SuperG The radio can supportLong Preamble ChannelHide Ssid Security Access Control Enable Access ControlClear All MAC Address FilterAttribute 14.5 WDS Choose the mode for WDS setting. Disable mode will not AP Discovery Into Access Control Station ListStation Rate Control Wired VlanVlan VLAN0-3 Wireless VlanP1 P4 Login ID WvlanHow can you wireless client access into Internet? Vlan Cross Setup WVLAN0-15 Download Rate Wireless Rate ControlUpload Rate System Maintenance System StatusAdministrator Password Default GatewayOld Password New PasswordConfiguration Backup Backup the ConfigurationRestore Configuration Syslog/Mail AlertReturn-Path AuthenticationMail To Time and Date Management Reboot System Trap TimeoutManager Host IP Trap CommunityFirmware Upgrade Signature Upgrade LicenseSignature Authentication/downlOad message Upgrade Manually Automatically Diagnostics Dial-out TriggerDecoded Format Address, the protocol and length of the packageRouting Table ARP Cache TableLeased Time Dhcp TableNAT Sessions Table Wireless Vlan Online Station Table Ping to Ping DiagnosisPing through Data Flow Monitor Order byTraffic Graph TX rate kbpsRX rate kbps SessionsTrace Route Trace throughRegistration for the Router Creating and Activating an Account from VigorPro Website172 173 174 175 176 177 178 179 From System Maintenance Signature Upgrade Registering Your Vigor Router181 182 From Anti-SpamProfile Setting 184 Activating Anti-Virus/Anti-Intrusion/Anti-Spam Service For Anti-Virus and Anti-Intrusion Service186 187 Back RenameTransfer 189 For Anti-Spam Service Getting 30 Days of Free Charge191 192 193 Upgrade License for Anti-Spam 195 196 197 Applying a New License for Anti-Intrusion/Anti-Virus 199 200 201 202 Add License 204 Backup and Upgrade Signature for Anti-Intrusion/Anti-Virus Switching between DT-DT and DT-KL Time for BackupTime for Download Time for Import207 208 Enabling Anti-Virus/Anti-Intrusion/Anti-Spam 210 Application and Examples 212 213 214 215 216 217 Settings in VPN Router in the enterprise office 219 Settings in the remote host 221 QoS Setting Example Go to Bandwidth ManagementQuality of Service223 224 LAN Created by Using NAT 226 Upgrade Firmware for Your Router 228 Request a certificate from a CA server on Windows CA Server Go to Certificate Management and choose Local Certificate 231 232 233 Time and Date to reset current time of the router first Trouble Shooting Checking If the Hardware Status Is OK or NotFor Windows For MacOs Pinging the Router from Your Computer For MacOs TerminalChecking If the ISP Settings are OK or Not For PPPoE UsersFor Static/Dynamic IP Users For Pptp Users Backing to Factory Default Setting If NecessarySoftware Reset Hardware Reset Contacting Your Dealer