P-2302R Series User’s Guide

LAN-to-LAN/Prestige means the LAN to the Prestige LAN interface. This is always allowed, as this is how you manage the Prestige from your local computer.

14.3.2 WAN-to-LAN rules

WAN-to-LANrules are Internet to your local network firewall rules. The default is to block all traffic from the Internet to your local network.

How can you forward certain WAN to LAN traffic? You may allow traffic originating from the WAN to be forwarded to the LAN by:

•Configuring NAT port forwarding rules in the web configurator SUA Server screen or SMT NAT menus.

•Configuring One-to-Oneand Many-One-to-OneNAT mapping rules in the web configurator Address Mapping screen or SMT NAT menus.

•Configuring WAN or LAN & WAN access for services in the Remote Management screens or SMT menus. When you allow remote management from the WAN, you are actually configuring WAN-to-WAN/Prestige firewall rules. WAN-to-WAN/Prestige firewall rules are Internet to the Prestige WAN interface firewall rules. The default is to block all such traffic. When you decide what WAN-to-LAN packets to log, you are in fact deciding what WAN-to-LANand WAN-to-WAN/Prestige packets to log.

Forwarded WAN-to-LANpackets are not considered alerts.

14.4 Services

Click on the Services tab. The screen appears as shown next. Use this screen to enable service blocking, enter/delete/modify the services you want to block and the date/time you want to block them.

Chapter 14 Firewall

150