Basic Settings: You can configure basic firewall settings in this router.

LAN-to-WAN Access Rules: You can define LAN-to-WAN network access rules which evaluate the network traffic's source IP address, destination IP address, and communication port to decide if it's allowed to pass through the firewall.

WAN-to-LAN Access Rules: You can define WAN-to-LAN network access rules which evaluate the network traffic's source IP address, destination IP address, and communication port to decide if it's allowed to pass through the firewall.

LAN to WAN Access Rules

This pages allows you to define LAN-to-WAN network access rules which evaluate the network traffic's source IP address, destination IP address, and communication port to decide if it's allowed to pass through the firewall.

By default, the stateful packet inspection module of this router allows all communications to the Internet that originates from the LAN. The behavior is defined by the default stateful packet inspection enabled in the router:

Forward all sessions originating from the LAN to the Internet.

Discard all sessions originating from the Internet to the LAN (Pleaes refer to the “WAN-to-LAN Access Rules” at System Setup Firewall WAN-to-LAN Access Rules).

Additional access rules may be defined to extend or overwrite the default rules.

Note

The ability to define network access rules is a very powerful management tool. Using a custom rule, it's possible to disable all firewall protection, creating holes in the firewall, or block all access to the Internet. Use with extreme caution when creating or deleting network access rules.

Network access rules will not disable protection from Denial of Service (DoS) attacks, such as SYN Flood, Ping of Death, Port Scan, etc. However, it's possible to create vulnerabilities to attacks that exploit vulnerabilities in applications.

31