A Powerful, True Firewall With Content Filtering; Security - NETGEAR FWG114P Reference Manual

Reference Manual for the ProSafe Wireless 802.11g Firewall/Print Server Model FWG114P

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the FWG114P is a true firewall, using stateful packet
inspection to defend against hacker attacks. Its firewall features include:
• DoS protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents.
The FWG114P will log security events such as blocked incoming traffic, port scans, attacks,
and administrator logins. You can configure the router to email the log to you at specified
intervals. You can also configure the router to send immediate alert messages to your email
address or email pager whenever a significant event occurs.
• With its content filtering feature, the FWG114P prevents objectionable content from reaching
your PCs. The router allows you to control access to Internet content by screening for
keywords within Web addresses. You can configure the router to log and report attempts to
access objectionable Internet sites.

Security

The FWG114P Wireless Firewall/Print Server is equipped with several features designed to
maintain security, as described in this section.
• PCs Hidden by NAT: NAT opens a temporary path to the Internet for requests originating from
the local network. Requests originating from outside the LAN are discarded, preventing users
outside the LAN from finding and directly accessing the PCs on the LAN.
• Port Forwarding with NAT: Although NAT prevents Internet locations from directly accessing
the PCs on the LAN, the router allows you to direct incoming traffic to specific PCs based on
the service port number of the incoming request, or to one designated "DNS" host computer.
You can specify forwarding of single ports or ranges of ports.
Introduction
December 2003, M-10177-01
2-3