Table of Contents
Advertisement
2.24 IP Filtering function
The security of the network for this device can be improved by using settings of the IP filtering function and
the password etc.
With IP filtering function the security of the network can be improved by controlling the packet which is
transmitted and received via this device by using IP address and the port number, etc. In this device, IP
filtering process is executed when the packet which is input in this device corresponds to "acl ip" definition of
the ACL definition and "acl tcp" definition and "acl udp" or "acl icmp" definitions which are specified.
It is necessary to consider the following elements to improve the security of the network.
Security policy of network
Elements other than switch (Firewall, User authentication etc.)
Points to be noted
Computer virus infection cannot be prevented by the switch of this device. Other countermeasures are
necessary as the virus measures software is used in the personal computer.
The security policy is decided according to connection type
There are two directions "From outside to inside" and "From inside to outside" in which the data flows when
similar LANs are connected even if internet is connected. When the security policy is decided, it is necessary to
consider these two directions.
Example of security policy for the data which flows "From outside to Inside"
●
Set in such a way that the packet should not be received.
Reject the access to the private host.
Unnecessary access is prevented by internal user.
Example of security policy for the data which flows "From inside to outside
●
Limit the access to the site which has legal issues.
Unnecessary access is prevented by internal user.
Supplement The IP filtering functions only for the data which flows "from outside to inside", and it does not function for
the data which flows "from inside to outside" and the data between the personal computer (The data from
LAN) inside.
Page 54 of 71
Advertisement
Table of Contents
