SMC Networks Barricade Plus SMC7004FW User Manual page 15

A
PPLICATIONS
• DMZ Host Support
Allows a networked computer to be fully exposed to the
Internet. This function is used when the special application
sensing tunnel feature is insufficient to allow an application to
function correctly.
• Security
The Barricade Plus supports security features that can deny
Internet access to specified users, or filter all requests for specific
services the administrator does not want to serve. The Barricade
Plus' firewall can also block common hacker attacks, including
IP Spoofing, Land Attack, Ping of Death, IP with zero length,
Smurf Attack, UDP port loopback, Snork Attack, TCP null
scan, and TCP SYN flooding.
• Stateful Packet Inspection
Stateful Packet Inspection (SPI) is one of the firewall features
provided by the Barricade Plus. The SPI ensures that the data coming
into your network was requested by an end node computer on your
network. The Barricade Plus examines the incoming data and
compares it to a database of trusted information. As traffic leaves the
network it is defined by certain characteristics. Incoming information
is then compared to these sets of characteristics. If the incoming data
matches the predefined set of characteristics the incoming traffic is
allowed. If no match is found the incoming traffic is discarded.
• Virtual Private Network (VPN)
The Barricade Plus supports two of the most commonly used
VPN protocols – PPTP and IPSec. These protocols allow remote
users to establish a secure connection to their corporate network.
If your service provider supports VPNs, then any of these
protocols can be used to create an authenticated and encrypted
tunnel for passing secure data over the Internet (i.e., a
1-4