Ip Firewall; Overview; Bcm50 Integrated Router And Firewalls; Stateful Packet Filters - Avaya BCM50 Rls 6.0 Task Based Manual

IP Firewall

IP Firewall

Overview

The BCM50 IP Firewall Filters feature is one of the security features BCM
offers to protect your network against intruders. The security and firewall
features are also used for controlling what outside resources your users will
be able to access.
Note: This guide relates to the BCM50a/ba and BCM50e/be models only.
Note: Although the BCM50a/ba models will not be supplied with BCM 6.0, it is
possible to upgrade the variants of these models to BCM 6.0, if they were
originally supplied with BCM50 R2 or BCM50 R3 software.
Note: The BCM50 Integrated Router is almost identical to the Business
Secure Router (BSR) models. BCM50a/ba routers are based on the BSR252
and BCM50e/be routers are based on the BSR222.

BCM50 Integrated Router and Firewalls

The BCM50 Integrated Router firewall is a stateful inspection firewall and is
designed to protect against Denial of Service attacks. The BCM50 Integrated
Router's purpose is to allow a private Local Area Network (LAN) to be
securely connected to the Internet. The BCM50 Integrated Router can be
used to prevent theft, destruction and modification of data, as well as log
events, which may be important to the security of your network. The BCM50
Integrated Router also has packet-filtering capabilities.

Stateful Packet Filters

BCM50 Integrated Router supports stateful packet filtering for IP protocols.
Stateful packet filters monitor active sessions and record session information
such as IP addresses and port numbers. They maintain state information for
each flow (TCP, UDP or ICMP). Stateful filters use the state information to
determine if a packet is responding to an earlier request that has been
validated by the rule set. If the packet is in response to a previous request, the
packet is treated in the same manner. It will either be blocked or allowed
through.
Stateful packet filters protect your network against Internet attacks such as
source spoofing, where an attacker pretends to be a trusted user by using an
IP address that is within the accepted range of IP addresses of your internal
network. BCM50 Integrated Router stateful packet filtering validates that
addresses coming from outside the network are valid outside addresses.
Stateful packet filters also protect your network from a denial-of-service
NN40011-045 Issue 1.2 BCM50 Rls 6.0 5