SMC Networks SMCWHSG44-G manual Network Security

•Virtual server - Exposing servers on the intranet to the Internet.

•PPTP, IPSec, and L2TP pass-through - Passing VPN (Virtual Private Network) packets through the intranet-Internet boundary. PPTP means Point-to-Point Tunneling Protocol, IPSec means IP Security, and L2TP means Layer 2 Tunneling Protocol.

•DMZ (DeMilitarized Zone) - All unrecognized IP packets from the Internet can be forwarded to a specific computer on the intranet.

•MSN Messenger support - Supporting Microsoft MSN Messenger for chat, file transfer, and real-time communication applications.

•Session monitoring. Latest 50 incoming sessions and 50 outgoing sessions are shown for monitoring user traffic.

•DSL/Cable Modem Support - Supporting dynamic IP address assignment by PPPoE (Point-to-Point Protocol over Ethernet) or DHCP and static IP address assignment.

•Multiple DSL/Cable connections support - Supporting up to 4 DSL/cable- based In-ternet connections. All outgoing traffic load from the internal network is shared among the multiple Internet connections, so that total outgoing throughput is increased.

•Load Balancing - The SMCWHSG44-G provides multiple WAN port Load Balancing mechanism for balancing the incoming data traffic between every enabled WAN port. The balancing mechanism can also be defined by Port or IP range policy.

•Zero Client Reconfiguration - The SMCWHSG44-G provides 'Zero Client Reconfiguration' function to allow wireless clients that associate to the SMCWHSG44-G the ability to not have to change any network setting.

•Network Security

•Packet address and port filtering - Filtering outgoing packets based on IP address and port number. (Incoming packet filtering is performed by NAT.)

•URL filtering - Preventing client users from accessing defined Web sites. The HTTP (Hyper Text Transfer Protocol) traffic to the specified Web sites identified by URLs (Universal Resource Locators) is blocked.

•WAN ICMP request blocking - Some DoS (Denial of Service) attacks are based on ICMP requests with large payloads. Such kind of attacks can be blocked.

•Stateful Packet Inspection (SPI) - Analyzing incoming and outgoing packets based on a set of criteria for abnormal content. Therefore, SPI can detect hacker attacks, and can summarily reject an attack if the packet fits a suspicious profile.

•Wireless-to-Ethernet-LAN traffic blocking capability - Traffic between the wireless interface and the Ethernet LAN interface can be blocked.

•Configurable MAC Address of the Ethernet WAN Interface - Some ADSL modems work only with Ethernet cards provided by the ISP. If SMCWHSG44-G is used in such an environment, the MAC address of the WAN interface of the Router has to be changed to the MAC address of the ISP-provided Ethernet network card.

20