Intrusion Detection - Sagem SAGEMFAST 1500WG Reference Manual

4.8.5

Intrusion Detection

1) Intrusion Detection Feature
Stateful Packet Inspection (SPI) and Anti-DoS firewall protection (Default: Enabled) - The
Intrusion Detection Feature of the
traffic at the WAN port. When the SPI feature is turned on, all incoming packets will be blocked
except for those types marked in the Stateful Packet Inspection section.
RIP Defect (Default: Enabled) - If an RIP request packet is not acknowledged to by the router, it
will stay in the input queue and not be released. Accumulated packets could cause the input
queue to fill, causing severe problems for all protocols. Enabling this feature prevents the
packets from accumulating.
Discard Ping to WAN (Default: Disabled) - Prevent a ping on the
being routed to the network.
2) Stateful Packet Inspection
This is called a "stateful" packet inspection because it examines the contents of the packet to
determine the state of the communications; i.e., it ensures that the stated destination computer
has previously requested the current communication. This is a way of ensuring that all
communications are initiated by the recipient computer and are taking place only with sources
that are known and trusted from previous interactions. In addition to being more rigorous in their
inspection of packets, stateful inspection firewalls also close off ports until connection to the
specific port is requested.
Reproduction and communication prohibited without the written permission of E
4 - Configuring the SAGEM F@st™ 1500 ADSL router
SAGEM F@st™ 1500 ADSL Router
SAGEM F@st™ 1500 Reference Manual - 288053220-04
limits access for incoming
's WAN port from
ADSL Router
E
E E
Page 4-43