Firewall Configurations - Planet XRT-401C User Manual

Firewall Configurations

PLANET XRT C series provides extensive, scheduled, SPI based firewall protection by
restricting connection parameters, thus limiting the risk of hacker attack, and defending against
a wide array of common Internet attacks. However, for applications that require unrestricted
access to the Internet, you can configure a specific client/server as a Demilitarized Zone
(DMZ).
Sub-menu Description
Access Control
URL Blocking
Schedule Rule
Intrusion Detection
DMZ
QoS
(XRT0-402C/204C)
Access Control allows you to have privileges to determine which
LAN side computer/user can or cannot have Internet access or certain
Internet applications. You can also control which computer, what
services and the time period in which allowed to grant access to these
services can be controlled as well.
URL Blocking allows you to restrict particular websites which can not
be accessed by LAN users.
You may define name of scheduled firewall or access control rule and
activates the schedule to be used in the "Access Control" page.
When the SPI (Stateful Packet Inspection) firewall feature is enabled,
traffic pass through XRT will be examined, and abnormal packets will
be discarded. Firewall in XRT supports full operation as initiated from
the local LAN.
If you have a local client PC that cannot run an Internet application
properly in the NAT environment, then you may enable DMZ to the
client to have unrestricted two-way Internet access. In XRT C series,
multiple PCs can be exposed to the Internet for two-way
communications e.g. Internet gaming, video conferencing, or VPN
connections. To enable DMZ feature, one or more public IP
address(es) is required.
XRT-402C/XRT-204C provides the QoS functionality through which
packets can be classified and prioritized. Up to 16 rules can be defined
to classify the time-critical traffic for LAN side applications
Machine Configurations
53