Anti-Probing - ZyXEL Communications Vantage CNM 2.3 User Manual

Table 44 Device Operation > Device Configuration > Security > Firewall > Rule
Summary > Add/Edit (continued)
LABEL
Log Packet
Information
When Matched
Send Alert
Message to
Administrator
When Matched
Action for
Matched
Packets
Apply
Cancel

6.1.4 Anti-Probing

Click Device Operation in the menu bar and then click Device Configuration >
Security > Firewall > Anti-Probing in the navigation panel to open the
following screen. Configure this screen to help keep the device hidden from
probing attempts. You can specify which of the device's interfaces will respond to
Vantage CNM User's Guide
DESCRIPTION
This field determines if a log for packets that match the rule is created
(Yes) or not (No). Go to Device Operation > Device Configuration
> Device Log > Log and select the Access Control log category to
have the device record these logs.
Select the check box to have the device generate an alert when the rule
is matched.
Use the drop-down list box to select what the firewall is to do with
packets that match this rule.
Select Drop to silently discard the packets without sending a TCP reset
packet or an ICMP destination-unreachable message to the sender.
Select Reject to deny the packets and send a TCP reset packet (for a
TCP packet) or an ICMP destination-unreachable message (for a UDP
packet) to the sender.
Select Permit to allow the passage of the packets.
Note: You also need to configure NAT port forwarding (or full
featured NAT address mapping rules) if you want to allow
computers on the WAN to access devices on the LAN.
Note: You may also need to configure the remote management
settings if you want to allow a WAN computer to manage the
device or restrict management from the LAN.
Click this to save your customized settings and exit this screen.
Click this to exit this screen without saving.
Chapter 6 Device Security Settings
131