Intrusion Detection - EE Brightbox User Manual

INTRUSION DETECTION

You can configure special firewall intrusion detection settings in the Intrusion Detection
admin page. The Intrusion Detection feature includes two key features. Stateful Packet
Inspection (SPI) and Hacker Prevention.
Stateful Packet Inspection (SPI) limits the access of incoming traffic. By default the SPI
feature is turned on, and all the incoming packets from the Internet will be blocked unless
they are initiated from a device or computer connected to the router. You can configure SPI
settings for a number of different traffic types and disable the SPI, allowing those types of
traffic to automatically be allowed through the router firewall.
In addition you can also configure the 'Discard Ping to WAN Interface' setting on this page.
Usually an ICMP ping message from the Internet to your WAN IP address would not generate
a ping response (and would timeout), protecting your router from being visible to potential
hackers. You can disable this setting if you wish to allow your device to respond to ICMP ping
messages.
Please note that disabling the SPI or Discard Ping to WAN Interface options is only
recommended for temporary diagnostic/troubleshooting purposes. Leaving any of these
settings disabled may make your router and local network vulnerable to attack from hackers.
You can access the Intrusion Detection page as follows:
1. Login to the router's admin pages.
2. Click on the Advanced Set-Up tab and click Accept on the 'Please proceed with
caution' page.
3. Click on Firewall in the left hand navigation menu to expand the Firewall menu
4. Click on Intrusion Detection in the left hand navigation menu:
EE Bright Box User Manual
155