Security > Firewall General - MB Connect Line mbNET.mini User Manual

11.5 Security > Firewall General
The mbNET.mini has an integrated firewall to protect against third-party and unauthorized access and con-
nection attempts. Incoming and outgoing data traffic is checked, logged and allowed or denied via this firewall.
The firewall can generally be configured with one of the following three settings:
• Maximum security
Which data traffic is allowed must be configured accordingly in this setting. Both incoming and outgoing
data traffic is denied.
To access the web interface (from outside the network), the TCP protocol and the destination port
80 must be entered and enabled in the
access is accordingly allowed for the data packets from the VPN tunnel.
• Normal Security
With this setting, incoming data traffic (data from the Internet) is denied while outgoing data traffic is al-
lowed.
• Minimum Security
With this setting, all incoming and outgoing data traffic is allowed.
The "minimum Security" option should only be temporarily set for test purposes since it allows all data
traffic from inside to outside the network as well as access from outside the network. This setting puts the
integrity of your mbNET.mini and the connected devices at risk!
SNAT
This function transparently passes on the incoming data traffic from Internet or VPN connections to the LAN. In
other words, all data packets going to the LAN are assigned the IP address of the router as the sender address.
This means that none of the LAN subscribers need the router as a "gateway". This is a considerable advantage
when integrating remote maintenance into existing network structures as it means that these structures do not
need to be changed.
Page 62 of 90 | Version: 1.6.0 DR 03 (10.01.2017) - EN | 10.01.2017
WAN >LAN settings. If, however, you start a VPN connection,
ADVI C E