beautypg.com

4 anti-probing – ZyXEL Communications Centralized Network Management Vantage CNM User Manual

Page 116

background image

Chapter 6 Device Security Settings

Vantage CNM User’s Guide

116

6.1.4 Anti-Probing

Click Device Operation in the menu bar and then click Device Configuration > Security >
Firewall > Anti-Probing in the navigation panel to open the following screen. Configure this
screen to help keep the device hidden from probing attempts. You can specify which of the
device’s interfaces will respond to Ping requests and whether or not the device is to respond to
probing for unused ports.

Figure 53 Device Operation > Device Configuration > Security > Firewall > Anti-Probing

Action for
Matched Packets

Use the drop-down list box to select what the firewall is to do with packets that
match this rule.
Select Drop to silently discard the packets without sending a TCP reset packet or
an ICMP destination-unreachable message to the sender.
Select Reject to deny the packets and send a TCP reset packet (for a TCP packet)
or an ICMP destination-unreachable message (for a UDP packet) to the sender.
Select Permit to allow the passage of the packets.

Note: You also need to configure NAT port forwarding (or full

featured NAT address mapping rules) if you want to allow
computers on the WAN to access devices on the LAN.

Note: You may also need to configure the remote management

settings if you want to allow a WAN computer to manage the
device or restrict management from the LAN.

Apply

Click Apply to save your customized settings and exit this screen.

Cancel

Click Cancel to exit this screen without saving.

Table 42 Device Operation > Device Configuration > Security > Firewall > Rule Summary >

Add/Edit (continued)

LABEL

DESCRIPTION