User manual E-TECH FIREWALL

[. . . ] Firewall Configuration A firewall is a method of implementing common as well as user defined security policies in an effort to keep intruders out. Firewalls work by analyzing and filtering out IP packets that violate a set of rules defined by the firewall administrator. The firewall is located at the point of entry for the network. All data inbound and outbound must pass through the firewall for inspection. [. . . ] Act. : Short for action, this field specifies two possible actions: allow or deny. Filtering: Optional Filtering field specifies the time period to which the policy applies. Up: Clicking this button will move the corresponding policy up one space in the table. Dn: Short for down, clicking this button will move the corresponding policy down one space in the table. Note: The Inbound Policy works in a Top-Down fashion according to the Inbound Policy Table. This means that the firewall will apply the policies in order from the top of the table to the bottom. It is critical for both security and user accessibility to the WAN to have inbound policies in the correct order. See Section 1. 9. 1 for an example of this. Edit: Clicking this button will display a table similar to the add table (see below) to the bottom of the policy table that will allow you to modify the corresponding policy. Delete: This will delete the corresponding policy. Add Inbound Policy: Clicking this button will bring up a table with all the add configurations as shown below: Src IP: This specifies the Source IP for the Inbound Policy. This is the external (WAN side, outside of the firewall) IP address or addresses and Subnet Masks that will be affected by the policy. In this field there are two IP Address entry fields and a dropdown menu. The dropdown menu has four options: · Any IP: Selecting this will cause all IPs to be affected by the policy. When this is selected, you will be unable to enter any information into the IP Address entry fields. · Single IP: Selecting this will cause only one IP Address to be affected by the policy. This IP Address will need to be specified by the user in the first IP Address entry field. · IP Range: Selecting this will enable you to select a range of IP Addresses to which the policy will apply. The first IP Address in the range must be entered into the first IP Address entry field and the last IP Address in the range must be entered into the second IP Address entry field. · Mask Range: Selecting this will enable you to select a range of Subnet Masks to which the policy will apply. The first Subnet Mask in the range must be entered into the first IP Address entry field and the last Subnet Mask in the range must be entered into the second IP Address entry field. Dest IP: This specifies the Destination IP for the Inbound Policy. This is the internal (LAN side, behind the firewall) IP address or addresses and Subnet Mask(s) that will be affected by the policy. [. . . ] The following protocol options are available: All, TCP, UDP, ICMP, AH, ESP, and GRE. Filtering Action: This specifies what action the policy takes: · Allow: Selecting this will cause the policy to allow packet transfer from the Src IP through the Src Port to travel through the Dest Port to the Dest IP. All of these are specified above and must be configured by the user. · Deny: Selecting this will cause the policy to deny packet transfer from the Src IP through the Src Port to travel through the Dest Port to the Dest IP. [. . . ]