3 filter setup – Draytek 2910 User Manual

Page 74

Vigor2910 Series User’s Guide

Call Filter

Check Enable to activate the Call Filter function. Assign a start
filter set for the Call Filter.

Data Filter

Check Enable to activate the Data Filter function. Assign a start
filter set for the Data Filter.

Filter

Default rule is applied in this page.
Pass – All the packets are allowed to pass through the router
without considering settings configured in Firewall>>Filter Setup.
Block - All the packets are not allowed to pass through the router
without considering settings configured in Firewall>>Filter Setup.

For troubleshooting needs, you can specify to record Filter
information by checking the Log box. It will be sent to Syslog
server. Please refer to section 3.14.4 Syslog/Mail Alert for more
detailed information.

Content Security
Management

Select one of the CSM profiles (configured in Objects and
Groups>>CSM Profiles) for global IM/P2P application
blocking. All the hosts in LAN must follow the standard
configured in the CSM profile selected here.

For troubleshooting needs, you can specify to record CSM
information by checking the Log box. It will be sent to Syslog
server. Please refer to section 3.14.4 Syslog/Mail Alert for more
detailed information.

Some on-line games (for example: Half Life) will use lots of fragmented UDP packets to
transfer game data. Instinctively as a secure firewall, Vigor router will reject these
fragmented packets to prevent attack unless you enable “Accept large incoming
fragmented UDP or ICMP Packets”. By checking this box, you can play these kinds of
on-line games. If security concern is in higher priority, you cannot enable “Accept large
incoming fragmented UDP or ICMP Packets”.

Click Firewall and click Filter Setup to open the setup page.

To edit or add a filter, click on the set number to edit the individual set. The following page
will be shown. Each filter set contains up to 7 rules. Click on the rule number button to edit
each rule. Check Active to enable the rule.