Philips SNB6500 - Manual (Page 25)

EN
25
Security
Firewall
The Wireless Router’s firewall inspects packets at the application layer, maintains
TCP and UDP session information including time-outs and the number of active
sessions, and provides the ability to detect and prevent certain types of network
attacks.
Network attacks that deny access to a network device are called Denial-of-Service
(DoS) attacks. DoS attacks are aimed at devices and networks with a connection to
the Internet. Their goal is not to steal information, but to disable a device or network
so users no longer have access to network resources.
The Wireless Router firewall function protects against the following DoS attacks: IP
Spoofing, Land Attack, Ping of Death, IP with zero length, Smurf Attack, UDP port
loopback, Snork Attack, TCP null scan, and TCP SYN flooding.
The firewall does not significantly affect system performance, so we advise leaving it
enabled to protect your network. Select Enable and click the ‘SAVE SETTINGS’
button to open the Firewall submenus.
Access Control
Access Control allows users to define the outgoing traffic permitted or not-permitted
through the WAN interface. The default is to permit all outgoing traffic.
To add the PC to the filtering table:
1 Click ‘Add PC’ on the Access Control screen.
2 Define the appropriate settings for client PC services.
3 Click ‘OK’ and then click ‘SAVE SETTINGS’ to save your settings.
MAC Filter
The Wireless Router can also limit the network access based on the MAC address.
The MAC Filtering Table allows the Wireless Router to enter up to 32 MAC
addresses that are not allowed access to the WAN port.
1 Click Yes to enable, or No to disable this function.
2 Enter the MAC address in the space provided and click ‘Save Settings’ to confirm.
URL Blocking
The Wireless Router allows the user to block access to web sites by entering either
a full URL address or just a keyword. This feature can be used to protect children
from accessing violent or pornographic web sites.
You can define up to 30 sites here.