Home » ZyXEL Manuals » Bridges & Routers » ZyXEL ARMOR G5 » Manual Viewer

ZyXEL ARMOR G5 User Guide - Page 127

IPv4 Firewall Screen, About the NBG7815 Firewall

Add to My Manuals
Save this manual to your list of manuals

Page 127 highlights

Chapter 12 Security About the NBG7815 Firewall The NBG7815's firewall feature physically separates the LAN and the WAN and acts as a secure gateway for all data passing between the networks. It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when activated (click the IPv4 Firewall or IPv6 Firewall tab under Security and then click the Enable Firewall check box). The NBG7815's purpose is to allow a private Local Area Network (LAN) to be securely connected to the Internet. The NBG7815 can be used to prevent theft, destruction and modification of data, as well as log events, which may be important to the security of your network. The NBG7815 is installed between the LAN and a broadband modem connecting to the Internet. This allows it to act as a secure gateway for all data passing between the Internet and the LAN. The NBG7815 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband (cable or DSL) modem to the Internet. The LAN (Local Area Network) port attaches to a network of computers, which needs security from the outside world. These computers will have access to Internet services such as e-mail, FTP and the World Wide Web. However, "inbound access" is not allowed (by default) unless the remote host is authorized to use a specific service. Guidelines For Enhancing Security With Your Firewall 1 Change the default password via Web Configurator. 2 Think about access control before you connect to the network in any way, including attaching a modem to the port. 3 Limit who can access your router. 4 Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a potential security risk. A determined hacker might be able to find creative ways to misuse the enabled services to access the firewall or the network. 5 For local services that are enabled, protect against misuse. Protect by configuring the services to communicate only with specific peers, and protect by configuring rules to block packets for the services at specific interfaces. 6 Protect against IP spoofing by making sure the firewall is active. 7 Keep the firewall in a secured (locked) room. 12.2 IPv4 Firewall Screen Use this screen to enable or disable the NBG7815's IPv4 firewall. Click Settings > Firewall > IPv4 Firewall to show the following screen. NBG7815 User's Guide 127

Section	Page
ARMOR G5	1
Document Conventions	3
Contents Overview	4
Table of Contents	5
User’s Guide	10
Introduction	11
1.1 Overview	11
1.1.1 Multi-Gigabit	11
1.2 Applications	11
1.3 Ways to Manage the NBG7815	12
1.4 Good Habits for Managing the NBG7815	13
1.5 Resetting the NBG7815	13
1.5.1 How to Use the RESET Button	13
1.6 The WPS Button	13
1.7 LEDs	14
1.8 Desk Mounting	15
1.9 Wall Mounting	15
Wizard	17
2.1 Overview	17
2.2 Accessing the Wizard	17
The Web Configurator	27
3.1 Overview	27
3.2 Accessing the Web Configurator	27
3.3 Navigation Panel	30
3.3.1 Standard Mode Navigation Panel	31
3.3.2 Bridge Mode Navigation Panel	33
NBG7815 Modes	35
4.1 Overview	35
4.2 Modes	35
Standard Mode	37
5.1 Overview	37
5.2 What You Can Do	37
5.3 Standard Mode Status Screen	37
Bridge Mode	40
6.1 Overview	40
6.2 What You Can Do	40
6.3 Setting your NBG7815 to Bridge Mode	40
6.3.1 Accessing the Web Configurator in Bridge Mode	41
6.4 Bridge Mode Status Screen	42
Tutorials	43
7.1 Overview	43
7.2 Run a Speed Test	43
7.3 Configure the NBG7815’s WiFi Networks	44
7.4 Enable or Disable a WiFi Network	47
7.5 Add Clients to a Profile	48
7.6 Set a Profile’s WiFi Schedule	49
7.7 Pause or Resume Internet Access on a Profile	51
7.8 Turn on or off the NBG7815’s LED (Light)	51
7.9 Change Your NBG7815 Operating Mode	52
7.10 Configure a Port Forwarding Rule	53
Technical Reference	56
Applications	57
8.1 Overview	57
8.1.1 What You Can Do	57
8.1.2 What You Need To Know	57
8.1.3 Before You Begin	58
8.2 Parental Control	58
8.2.1 Device Screen	58
8.3 OpenVPN Server/Client	62
8.3.1 OpenVPN Server Screen	62
8.3.2 OpenVPN Account Screen	64
8.3.3 OpenVPN Client Screen	66
8.4 USB Application	68
8.4.1 SAMBA Server Screen	68
8.4.2 FTP Server Screen	70
8.4.3 USB Media Sharing Screen	72
8.5 Access Your Shared Files From a Computer	74
8.5.1 Using Windows Explorer	74
8.5.2 Using FTP Program	75
WAN	78
9.1 Overview	78
9.2 What You Can Do	78
9.3 What You Need To Know	79
9.3.1 Configuring Your Internet Connection	79
9.4 Internet Connection Screen	80
9.4.1 IPoE Encapsulation	80
9.4.2 PPPoE Encapsulation	83
9.4.3 PPTP Encapsulation	86
9.5 NAT & Port Forwarding Screen	89
9.5.1 Add Port Forwarding Rule Screen	91
9.6 Passthrough Screen	92
9.7 Port Trigger Screen	94
9.7.1 Add Port Trigger Rule Screen	95
9.8 Dynamic DNS Screen	96
9.9 UPnP Screen	97
9.9.1 Turning On UPnP in Windows 7 Example	98
9.9.2 Turning on UPnP in Windows 10 Example	101
Wireless LAN	104
10.1 Overview	104
10.1.1 What You Can Do	104
10.1.2 What You Should Know	105
10.2 Main WiFi Screen	108
10.3 Guest WiFi Screen	111
10.4 MAC Filter Screen	112
10.4.1 Add MAC Address Screen	113
10.5 WPS Screen	113
10.6 Scheduling Screen	115
LAN	116
11.1 Overview	116
11.2 What You Can Do	116
11.3 What You Need To Know	116
11.4 LAN IP Screen	117
11.4.1 Static DHCP Table-Add/Edit Rule Screen	120
11.4.2 Configure LAN Screen in Bridge Mode	122
11.5 IPv6 LAN Screen	123
Security	126
12.1 Overview	126
12.1.1 What You Can Do	126
12.1.2 What You Need To Know	126
12.2 IPv4 Firewall Screen	127
12.2.1 IPv4 Firewall-Add Rule Screen	129
12.3 IPv6 Firewall Screen	130
12.3.1 IPv6 Firewall-Add Rule Screen	131
System	133
13.1 Overview	133
13.2 What You Can Do	133
13.3 Status Screen	133
13.4 General Setting Screen	136
13.5 Remote Access Screen	138
13.6 Maintenance Screen	139
13.7 Operating Mode Screen	140
13.8 Logs Screen	142
Troubleshooting	144
14.1 Overview	144
14.2 Power, Hardware Connections, and LEDs	144
14.3 NBG7815 Access and Login	145
14.4 Internet Access	146
14.5 Resetting the NBG7815 to Its Factory Defaults	147
14.6 Wireless Connections	147
14.7 USB Device Problems	149
Customer Support	150
Setting Up Your Computer’s IP Address	156
Common Services	175
Legal Information	178

Match case Limit results 1 per page

Chapter 12 Security

NBG7815 User’s Guide

127

About the NBG7815 Firewall

The NBG7815’s firewall feature physically separates the LAN and the WAN and acts as a secure

gateway for all data passing between the networks.

It is a stateful inspection firewall and is designed to protect against Denial of Service attacks when

activated (click

the

IPv4 Firewall

IPv6 Firewall

tab under

Security

and then click the

Enable

Firewall

check box). The NBG7815's purpose is to allow a private Local Area Network (LAN) to be securely

connected to the Internet. The NBG7815 can be used to prevent theft, destruction and modification of

data, as well as log events, which may be important to the security of your network.

The NBG7815 is installed between the LAN and a broadband modem connecting to the Internet. This

allows it to act as a secure gateway for all data passing between the Internet and the LAN.

The NBG7815 has one Ethernet WAN port and four Ethernet LAN ports, which are used to physically

separate the network into two areas.The WAN (Wide Area Network) port attaches to the broadband

(cable or DSL) modem to the Internet.

The LAN (Local Area Network) port attaches to a network of computers, which needs security from the

outside world. These computers will have access to Internet services such as e-mail, FTP and the World

Wide Web. However, "inbound access" is not allowed (by default) unless the remote host is authorized to

use a specific service.

Guidelines For Enhancing Security With Your Firewall

Change the default password via Web Configurator.

Think about access control before you connect to the network in any way, including attaching a

modem to the port.

Limit who can access your router.

Don't enable any local service (such as NTP) that you don't use. Any enabled service could present a

potential security risk. A determined hacker might be able to find creative ways to misuse the enabled

services to access the firewall or the network.

For local services that are enabled, protect against misuse. Protect by configuring the services to

communicate only with specific peers, and protect by configuring rules to block packets for the services

at specific interfaces.

Protect against IP spoofing by making sure the firewall is active.

Keep the firewall in a secured (locked) room.

12.2

IPv4 Firewall Screen

Use this screen to enable or disable the NBG7815’s IPv4 firewall. Click

Settings

Firewall

IPv4

Firewall

show the following screen.