A Powerful, True Firewall With Content Filtering; Security - NETGEAR RP614 - Web Safe Router Reference Manual

Reference Manual for the Model RP614 v2 Web Safe Router

A Powerful, True Firewall with Content Filtering

Unlike simple Internet sharing NAT routers, the Model RP614 v2 is a true firewall, using stateful
packet inspection to defend against hacker attacks. Its firewall features include:
• Denial of Service (DoS) protection.
Automatically detects and thwarts DoS attacks such as Ping of Death, SYN Flood, LAND
Attack, and IP Spoofing.
• Blocks unwanted traffic from the Internet to your LAN.
• Blocks access from your LAN to Internet locations or services that you specify as off-limits.
• Logs security incidents.
The Model RP614 v2 will log security events such as blocked incoming traffic, port scans,
attacks, and administrator logins. You can configure the router to email the log to you at
specified intervals. You can also configure the router to send immediate alert messages to your
email address or email pager whenever a significant event occurs.
• With its content filtering feature, the Model RP614 v2 prevents objectionable content from
reaching your PCs. The router allows you to control access to Internet content by screening for
keywords within Web addresses. You can configure the router to log and report attempts to
access objectionable Internet sites.

Security

The RP614 v2 router is equipped with several features designed to maintain security, as described
in this section.
• PCs Hidden by NAT
NAT opens a temporary path to the Internet for requests originating from the local network.
Requests originating from outside the LAN are discarded, preventing users outside the LAN
from finding and directly accessing the PCs on the LAN.
• Port Forwarding with NAT
Although NAT prevents Internet locations from directly accessing the PCs on the LAN, the
router allows you to direct incoming traffic to specific PCs based on the service port number
of the incoming request, or to one designated "DMZ" host computer. You can specify
forwarding of single ports or ranges of ports.
1-2 Introduction