Backup Modules; Configuring The Procurve Secure Router Os Firewall - HP 7102dl - ProCurve Secure Router Configuration Manual

Using the Web Browser Interface for Advanced Configuration Tasks

Backup Modules

The ProCurve Secure Router supports Basic Rate Interface (BRI) Integrated
Services Digital Network (ISDN) and analog backup. You must purchase and
install a backup module to activate backup. You must then configure backup
settings from the CLI. See Chapter 3: Configuring Backup WAN Connections
for information about configuring backup interfaces.
The ProCurve Secure Router also provides backup with demand routing. To
learn how to configure this feature, see "Configuring Demand Routing for a
Primary or Backup Connection" on page 14-88 in the Basic Management and
Configuration Guide, Chapter 14: Using the Web Browser Interface for Basic
Configuration Tasks.
Configuring the ProCurve Secure Router
OS Firewall
The ProCurve Secure Router OS firewall is a stateful-inspection firewall,
which incorporates the functions of:
a packet-filtering firewall
circuit level gateway
application level gateway
As a packet-filtering firewall, the Secure Router OS firewall checks the IP
header of every packet that arrives on a router interface. The router only
forwards packets that have permitted values in their headers—for example,
a permitted source IP address. You control which packets the firewall permits
by configuring access control lists (ACLs) and access control policies (ACPs).
For more information, see "Configuring Access Control from the Web Browser
Interface" on page 16-41.
As a circuit level gateway, the Secure Router OS firewall monitors the estab-
lishment of sessions between trusted and untrusted hosts. The firewall auto-
matically blocks packets with TCP headers associated with known attacks.
See Table 16-1 for a list of these attacks.
Backup Modules
16-27