Port Triggering
Port triggering allows some applications to function correctly that would otherwise be partially
blocked by the firewall. Using this feature requires that you know the port numbers used by the
Application.
Once configured, operation is as follows:
•
A PC makes an outgoing connection using a port number defined in the Port Triggering table.
•
This Router records this connection, opens the additional INCOMING port or ports associated
with this entry in the Port Triggering table, and associates them with the PC.
•
The remote system receives the PCs request and responds using the different port numbers that
you have now opened.
•
This Router matches the response to the previous request and forwards the response to the PC.
Without Port Triggering, this response would be treated as a new connection request rather
than a response. As such, it would be handled in accordance with the Port Forwarding rules.
–
Only one PC can use a Port Triggering application at any time.
–
After a PC has finished using a Port Triggering application, there is a time-out period
before the application can be used by another PC. This is required because the firewall
cannot be sure when the application has terminated.
See
"Port Triggering" on page 6-28
DMZ Port
The DMZ Port allows you to set up the DMZ port. Specifying a Default DMZ Server allows you to
set up a computer or server that is available to anyone on the Internet for services that you haven't
defined.
The default setting of the rules is that the DMZ port and both inbound and outbound traffic is
disabled. Enabling the DMZ port increases the traffic through the WAN ports.
The VPN firewall makes LAN port 8 a dedicated hardware DMZ port when DMZ is enabled (see
"The Router's Front Panel" on page
See
"DMZ Setup" on page 5-6
Router and Network Management
Reference Manual for the ProSafe VPN Firewall 200 FVX538
for the procedure on how to use this feature.
2-6).
for the procedure on how to use this feature.
January 2005
8-7