Billion Electric Company BIPAC 8500 - Manual (Page 55)

Billion BIPAC-8500 / 8520 SHDSL VPN Firewall Bridge / Router
Chapter 4: Configuration
Firewall and Access Control
Your router includes a full SPI (Stateful Packet Inspection) firewall for controlling Internet
access from your LAN, as well as helping to prevent attacks from hackers. In addition to this,
when using NAT (Network Address Translation. Please see the WAN configuration section for
more details on NAT) the router acts as a “natural” Internet firewall, as all PCs on your LAN will
use private IP addresses that cannot be directly accessed from the Internet.
Firewall
: Prevents access from outside your network. The router provides three levels of
security support:
NAT natural firewall
: This masks LAN users’ IP addresses which are invisible to outside users
on the Internet, making it much more difficult for a hacker to target a machine on your network.
This natural firewall is on when NAT function is enabled.
51
When using Virtual Servers your PCs will be exposed to the degree
specified in your Virtual Server settings provided the ports specified are
opened in your firewall packet filter settings.
Firewall Security and Policy (General Settings) : Inbound direction of Packet Filter rules to
prevent unauthorized computers or applications accessing your local network from the Internet.
Intrusion Detection
: Enable Intrusion Detection to detect, prevent and log malicious attacks.
Access Control : Prevents access from PCs on your local network:
Firewall Security and Policy (General Settings)
: Outbound direction of Packet Filter rules to
prevent unauthorized computers or applications accessing the Internet.
MAC Filter rules : To prevent unauthorized computers accessing the Internet.