User manual DRAYTEK VIGOR 2920 V1.01

[. . . ] Vigor2920 Series User's Guide ii Vigor2920 Series Dual-WAN Security Router User's Guide Version: 1. 0 Firmware Version: V3. 3. 2 Date: 29/03/2010 iii Vigor2920 Series User's Guide Copyright Information Copyright Declarations Copyright 2010 All rights reserved. No part may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language without written permission from the copyright holders. The following trademarks are used in this document: Microsoft is a registered trademark of Microsoft Corp. Windows, Windows 95, 98, Me, NT, 2000, XP, Vista and Explorer are trademarks of Microsoft Corp. [. . . ] Data Filter - When there is an existing Internet connection, Data Filter is applied to incoming and outgoing traffic. The following illustrations are flow charts explaining how router will treat incoming traffic and outgoing traffic respectively. 97 Vigor2920 Series User's Guide Stateful Packet Inspection (SPI) Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy static packet filtering, which examines a packet based on the information in its header, stateful inspection builds up a state machine to track each connection traversing all interfaces of the firewall and makes sure they are valid. The stateful firewall of Vigor router not just examine the header information also monitor the state of the connection. Denial of Service (DoS) Defense The DoS Defense functionality helps you to detect and mitigate the DoS attack. The attacks are usually categorized into two types, the flooding-type attacks and the vulnerability attacks. The flooding-type attacks will attempt to exhaust all your system's resource while the vulnerability attacks will try to paralyze the system by offending the vulnerabilities of the protocol or operation system. The DoS Defense function enables the Vigor router to inspect every incoming packet based on the attack signature database. Any malicious packet that might duplicate itself to paralyze the host in the secure LAN will be strictly blocked and a Syslog message will be sent as warning, if you set up Syslog server. Any abnormal traffic flow violating the pre-defined parameter, such as the number of thresholds, is identified as an attack and the Vigor router will activate its defense mechanism to mitigate in a real-time manner. The below shows the attack types that DoS/DDoS defense function can detect: 1. Unknown protocol Below shows the menu items for Firewall. Vigor2920 Series User's Guide 98 4. 4. 2 General Setup General Setup allows you to adjust settings of IP Filter and common options. Under some circumstance, your filter set can be linked to work in a serial manner. Also you can configure the Log Flag settings, Apply IP filter to VPN incoming packets, and Accept incoming fragmented UDP packets. Click Firewall and click General Setup to open the general setup page. Call Filter Data Filter Filter Check Enable to activate the Call Filter function. Select Pass or Block for the packets that do not match with the filter rules. IM/P2P Filter Select a CSM profile for global IM/P2P application blocking. All the hosts in LAN must follow the standard configured in the CSM profile selected here. For troubleshooting needs, you can specify to record information for IM/P2P by checking the Log box. Please refer to section Syslog/Mail Alert for more detailed information. Select one of the URL Content Filter profile settings (created in CSM>> URL Content Filter) for applying with this router. Please 99 Vigor2920 Series User's Guide URL Content Filter set at least one profile for choosing in CSM>> URL Content Filter web page first. For troubleshooting needs, you can specify to record information for URL Content Filter by checking the Log box. Please refer to section Syslog/Mail Alert for more detailed information. [. . . ] We suggest you setting the network connection as get IP automatically. (Please refer to the section 6. 2) Please follow the steps below to ping the router correctly. For Windows 1. Type command (for Windows 95/98/ME) or cmd (for Windows NT/ 2000/XP/Vista). If the link is OK, the line of "Reply from 192. 168. 1. 1:bytes=32 time<1ms TTL=255" will appear. [. . . ]