Home » ZyXEL Manuals » Networking » ZyXEL FSG2200HNU » Manual Viewer

ZyXEL FSG2200HNU User Guide - Page 174

Firewall Technical Reference, 12.3.1 Guidelines For Enhancing Security With Your Firewall

Get ZyXEL FSG2200HNU PDF manuals and user guides

Add to My Manuals
Save this manual to your list of manuals

Page 174 highlights

Chapter 12 Firewall Table 53 Security > Firewall > Services LABEL DESCRIPTION Add Click this to add the selected service in Available Services to the Blocked Services list. Note that the service is blocked immediately after clicking this. Delete Select a service in the Blocked Services, and click this to remove the service from the list. Clear All Click this to remove all the services in the Blocked Services list. Apply Click this to enable LAN-to-WAN services blocking. Reset Click this to set every field in this screen to its last-saved value. 12.3 Firewall Technical Reference This section provides some technical background information about the topics covered in this chapter. 12.3.1 Guidelines For Enhancing Security With Your Firewall 1 Change the default password using the web configurator. 2 Think about access control before you connect to the network in any way. 3 Limit who can access your ZyXEL Device by making sure only authorized persons know the login credentials. 4 Don't enable any local service (such as telnet or FTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the ZyXEL Device or the network. 5 Keep the ZyXEL Device in a secured (locked) room. 12.3.2 Security Considerations Note: Incorrectly configuring the firewall may block valid access or introduce security risks to the ZyXEL Device and your protected network. Use caution when creating or deleting firewall rules and test your rules after you configure them. Consider these security ramifications before creating a rule: 1 Does this rule stop LAN users from accessing critical resources on the Internet? For example, if IRC is blocked, are there users that require this service? 174 FSG2200HNU User's Guide

Section	Page
FSG2200HNU	1
About This User's Guide	3
Document Conventions	5
Safety Warnings	7
Contents Overview	9
Table of Contents	11
User’s Guide	19
Introducing the ZyXEL Device	21
1.1 Overview	21
1.2 Applications for the ZyXEL Device	21
1.2.1 Internet Access	21
1.2.2 VoIP Features	22
1.2.3 ZyXEL Device’s USB Support	23
1.2.4 FTU2000 Support	23
1.3 Ways to Manage the ZyXEL Device	24
1.4 Good Habits for Managing the ZyXEL Device	25
1.5 LEDs (Lights)	25
1.6 The RESET Button	27
1.7 The WPS/WLAN Button	27
Introducing the Web Configurator	29
2.1 Overview	29
2.1.1 Accessing the Web Configurator	29
2.2 Web Configurator Main Screen	31
2.2.1 Title Bar	31
2.2.2 Navigation Panel	32
2.2.3 Main Window	36
2.2.4 Status Bar	36
Tutorial	37
3.1 Overview	37
3.2 Configuring the WAN Screens	37
3.2.1 Egress Queue Setup	39
3.2.2 Wide Area Network (WAN) Service Setup	40
3.2.3 Setting the Default Gateway	44
3.2.4 Checking the WAN Configuration	45
3.3 How to Set up a Wireless Network	46
3.3.1 Example Parameters	46
3.3.2 Configuring the AP	46
3.3.3 Configuring the Wireless Client	48
3.4 How to Make a VoIP Call	54
3.4.1 VoIP Calls With a Registered SIP Account	54
3.5 Using the File Sharing Feature	55
3.5.1 Set Up File Sharing	55
3.5.2 Access Your Shared Files From a Computer	57
3.6 Configuring the Policy Route Screens	58
Technical Reference	61
Status Screens	63
4.1 Overview	63
4.2 DHCP Client List	67
4.3 WLAN Client List	68
4.4 Packet Statistics	68
4.5 VoIP Statistics	70
WAN Setup	73
5.1 Overview	73
5.1.1 What You Can Do in this Chapter	73
5.1.2 What You Need to Know	74
5.1.3 Before You Begin	75
5.2 Internet Connection Screen	76
5.2.1 WAN Connection Configuration	77
5.2.2 Egress Queue Information Edit Screen	86
5.3 Default Gateway Screen	88
5.4 Multicast Screen	88
5.5 Technical Reference	89
LAN Setup	93
6.1 Overview	93
6.1.1 What You Can Do in this Chapter	93
6.1.2 What You Need To Know	94
6.1.3 Before You Begin	94
6.2 The IP Screen	95
6.3 DHCP Server Screen	95
6.4 The Client List Screen	96
6.5 IP Alias Screen	98
6.6 Technical Reference	98
Wireless LAN	103
7.1 Overview	103
7.1.1 What You Can Do in this Chapter	103
7.1.2 What You Need to Know	104
7.1.3 Before You Begin	107
7.2 The Wireless LAN General Screen	107
7.3 The Security Screens	110
7.3.1 No Security	111
7.3.2 Static WEP/Shared WEP Encryption	111
7.3.3 WPA-PSK/WPA2-PSK Authentication	113
7.3.4 WPA/WPA2 Authentication	114
7.4 The QoS Screen	116
7.5 WPS	117
7.6 WPS Station	119
7.7 Scheduling Screen	120
7.8 Association List Screen	121
7.9 Wireless LAN Technical Reference	121
Network Address Translation (NAT)	123
8.1 Overview	123
8.1.1 What You Can Do in this Chapter	123
8.1.2 What You Need To Know	123
8.2 Port Forwarding	124
8.2.1 Configuring the Port Forwarding Screen	125
8.2.2 The Port Forwarding Edit Screen	127
8.3 NAT Technical Reference	128
8.3.1 NAT Definitions	128
8.3.2 What NAT Does	129
8.3.3 How NAT Works	129
8.3.4 NAT Application	131
Voice	133
9.1 Overview	133
9.1.1 What You Can Do in this Chapter	133
9.1.2 What You Need to Know	134
9.1.3 Before You Begin	135
9.2 The SIP Service Provider Screen	135
9.2.1 Dial Plan Rules	138
9.3 The SIP Account Screen	139
9.4 The Analog Phone Screen	144
9.5 The Phone Region Screen	145
9.6 The Speed Dial Screen	145
9.7 SIP Technical Reference	147
9.7.1 VoIP	147
9.7.2 SIP	147
9.7.3 Quality of Service (QoS)	153
9.7.4 Phone Services Overview	154
File Sharing	159
10.1 Overview	159
10.1.1 What You Can Do in this Chapter	159
10.1.2 What You Need to Know	160
10.1.3 Before You Begin	160
10.2 The Share Configuration Screen	161
10.2.1 Share Configuration Add Screen	163
10.2.2 Share Configuration Edit Screen	165
10.3 The Account Management Screen	166
10.3.1 Account Management Add or Edit Screen	167
MAC Filter	169
11.1 Overview	169
11.1.1 What You Can Do in this Chapter	169
11.1.2 What You Need to Know	169
11.2 MAC Filter Screen	170
Firewall	171
12.1 Overview	171
12.1.1 What You Can Do in the Firewall Screens	171
12.1.2 What You Need to Know About Firewall	171
12.2 The Firewall Screen	172
12.3 Firewall Technical Reference	174
12.3.1 Guidelines For Enhancing Security With Your Firewall	174
12.3.2 Security Considerations	174
Certificates	177
13.1 Overview	177
13.1.1 What You Can Do in this Chapter	177
13.1.2 What You Need to Know	177
13.1.3 Verifying a Certificate	179
13.2 My Certificates	180
13.3 Trusted CAs	182
13.4 Trusted CA Import	183
13.5 Trusted CA Details	184
Static Route	187
14.1 Overview	187
14.1.1 What You Can Do in this Chapter	187
14.2 Configuring Static Route	188
14.3 Static Route Add/Edit	189
Policy Route	191
15.1 Overview	191
15.1.1 What You Can Do in this Chapter	191
15.1.2 What You Need to Know	191
15.2 The Rule Setup Screen	192
15.3 Rule Setup Add/Edit	193
Dynamic DNS Setup	197
16.1 Overview	197
16.1.1 What You Can Do in the DDNS Screen	197
16.2 Configuring Dynamic DNS	197
Service Control	199
17.1 Overview	199
17.1.1 What You Can Do in this Chapter	199
17.1.2 What You Need to Know	199
17.2 The Service Control Screen	200
TR-069	203
18.1 Overview	203
18.1.1 What You Can Do in this Chapter	203
18.1.2 What You Need to Know	204
18.2 The TR-069 Screen	204
System	207
19.1 Overview	207
19.1.1 What You Can Do in this Chapter	207
19.1.2 What You Need to Know	207
19.2 The System General Screen	208
19.3 The Time Setting Screen	209
Logs	211
20.1 Overview	211
20.1.1 What You Can Do in this Chapter	211
20.1.2 What You Need To Know	211
20.2 The View Log Screen	212
20.3 The Log Settings Screen	213
20.4 Log Descriptions	214
Tools	217
21.1 Overview	217
21.1.1 What You Can Do in this Chapter	217
21.1.2 What You Need To Know	217
21.1.3 Before You Begin	219
21.2 Firmware Upgrade Screen	219
21.3 The Configuration Screen	221
21.3.1 Reset to Factory Defaults	223
21.4 Restart	223
21.5 Technical Reference	224
21.5.1 Tool Examples	224
Diagnostic	231
22.1 Overview	231
22.1.1 What You Can Do in the Diagnostic Screens	231
22.2 The General Diagnostic Screen	231
Account	233
23.1 Overview	233
23.2 Admin/Account Screen	233
Troubleshooting	235
24.1 Overview	235
24.2 Power, Hardware Connections, and LEDs	235
24.3 ZyXEL Device Access and Login	236
24.4 Internet Access	238
24.5 Phone Calls and VoIP	239
24.6 Multiple SIP Accounts	240
24.6.1 Outgoing Calls	240
24.6.2 Incoming Calls	241
24.7 USB Device Connection	242
Product Specifications	243
IP Addresses and Subnetting	255
Setting Up Your Computer’s IP Address	267
Pop-up Windows, JavaScripts and Java Permissions	297
Wireless LANs	307
Common Services	331
Open Software Announcements	335
Legal Information	341