D-Link DIR-815 Product Manual - Page 60

Firewall Settings

Page 60 highlights

Section 3 - Configuration Firewall Settings A firewall protects your network from the outside world. The DIR-815 offers a firewall type functionality. The SPI feature helps prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications. If you choose to expose a computer, you can enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the chosen computer completely to the outside world. Firewall Settings: Check the Enable SPI box to enable the SPI (Stateful Packet Inspection, also known as dynamic packet filtering) feature. Enabling SPI helps to prevent cyber attacks by tracking more state per session. It validates that the traffic passing through the session conforms to the protocol. DMZ Host: If an application has trouble working from behind the router, you can expose one computer to the Internet and run the application on that computer. Carry out the following to create a DMZ host: 1. Check the Enable DMZ box. 2. Specify the IP address of the computer on the LAN that you want to have unrestricted Internet communication in the DMZ IP address field. To specify an existing DHCP client, use the Computer Name drop-down to select the computer that you want to make a DMZ host. If selecting a computer that is a DHCP client, be sure to make a static reservation in the Setup > Network Settings page so that the IP address of the DMZ machine does not change. 3. Click the Save Settings button to add the new DMZ host. Note: Placing a computer in the DMZ may expose that computer to a variety of security risks. Use of this option is only recommended as a last resort. D-Link DIR-815 User Manual 55

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136

55
D-Link DIR-815 User Manual
Section 3 - Configuration
Check the
Enable SPI
box to enable the SPI (Stateful
Packet Inspection, also known as dynamic packet filtering)
feature. Enabling SPI helps to prevent cyber attacks by
tracking more state per session. It validates that the traffic
passing through the session conforms to the protocol.
If an application has trouble working from behind the
router, you can expose one computer to the Internet and
run the application on that computer.
Carry out the following to create a DMZ host:
Note:
Placing a computer in the DMZ may expose that computer to a variety of security risks. Use of this option is only recommended as
a last resort.
Firewall Settings:
DMZ Host:
Firewall Settings
A firewall protects your network from the outside world. The DIR-815 offers a firewall type functionality. The SPI feature helps
prevent cyber attacks. Sometimes you may want a computer exposed to the outside world for certain types of applications.
If you choose to expose a computer, you can enable DMZ. DMZ is short for Demilitarized Zone. This option will expose the
chosen computer completely to the outside world.
1. Check the
Enable DMZ
box.
2. Specify the IP address of the computer on the
LAN that you want to have unrestricted Internet
communication in the DMZ IP address field. To
specify an existing DHCP client, use the
Computer
Name
drop-down
to select the
computer that
you want to make a DMZ host. If selecting a
computer that is a DHCP client, be sure to make
a static reservation in the
Setup > Network
Settings
page so that the IP address of the DMZ
machine does not change.
3. Click the
Save Settings
button to add the new
DMZ host.