A Powerful, True Firewall With Content Filtering; Security - NETGEAR RangeMax WPN824 Reference Manual

• Wireless access can be restricted by MAC address.
• Wireless network name broadcast can be turned off so that only devices that have the network
name (SSID) can connect.

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the WPN824 is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• Denial of Service (DoS) protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents.
The WPN824 will log security events such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the router to E-mail the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your E-mail
address or E-mail pager whenever a significant event occurs.
• The WPN824 prevents objectionable content from reaching your computers. The router can
screen for keywords within Web addresses, allows you to control access to Internet content.
You can configure the router to log and report attempts to access objectionable Internet sites.

Security

The WPN824 router is equipped with several features designed to maintain security, as described
in this section.
• Computers Hidden by NAT.
NAT opens a temporary path to the Internet for requests originating from the local network.
Requests originating from outside the LAN are discarded, preventing users outside the LAN
from finding and directly accessing the computers on the LAN.
• Port Forwarding with NAT.
Although NAT prevents Internet locations from directly accessing the computers on the LAN,
the router allows you to direct incoming traffic to specific computers based on the service port
number of the incoming request, or to one designated "DMZ" host computer. You can specify
forwarding of single ports or ranges of ports.
Introduction
Reference Manual for the RangeMax Wireless Router WPN824
v1.0, November 2005
2-3