Firewall Security; Vpn Tunnels; Content Filtering; Vlan Support - Symbol AP-51 Series Product Reference Manual

1-14 AP-51xx Access Point Product Reference Guide
For detailed information on WPA2-CCMP configurations, see Configuring WPA2-CCMP (802.11i) on
page 6-22.

1.2.8.7 Firewall Security

A firewall keeps personal data in and hackers out. The access point firewall prevents suspicious
Internet traffic from proliferating the access point managed network. The access point performs
network address translation (NAT) on packets passing to and from the WAN port. This combination
provides enhanced security by monitoring communication with the wired network.
For detailed information on configuring the access point firewall, see

Configuring Firewall Settings

on page 6-25.

1.2.8.8 VPN Tunnels

Virtual Private Networks (VPNs) are IP-based networks using encryption and tunneling providing
users remote access to a secure LAN. In essence, the trust relationship is extended from one LAN
across the public network to another LAN, without sacrificing security. A VPN behaves like a private
network; however, because the data travels through the public network, it needs several layers of
security. The access point can function as a robust VPN gateway.
For detailed information on configuring VPN security support, see Configuring VPN Tunnels on page
6-33.

1.2.8.9 Content Filtering

Content filtering allows system administrators to block specific commands and URL extensions from
going out through the access point WAN port only. Therefore, content filtering affords system
administrators selective control on the content proliferating the network and is a powerful screening
tool. Content filtering allows the blocking of up to 10 files or URL extensions and allows blocking of
specific outbound HTTP, SMTP, and FTP requests.
For detailed information on configuring content filtering support, see Configuring Content Filtering
Settings on page 6-49.

1.2.9 VLAN Support

A Virtual Local Area Network (VLAN) is a means to electronically separate data on the same access
point from a single broadcast domain into separate broadcast domains. By using a VLAN, you can
group by logical function instead of physical location. There are 16 VLANs supported on the access
point. An administrator can map up to 16 WLANs to 16 VLANs and enable or disable dynamic VLAN