Page 86 / 138 Scroll up to view Page 81 - 85
Management and Diagnostic Console
81
Hosting an Application
To host an application on the gateway’s network for Internet users to access (such as a Web server), the
firewall must be configured to allow users on the Internet to access it.
To host an application:
1.
From
1 Select a computer
, select a computer from the pull-down menu.
2.
From
2 Edit firewall settings for this computer
, click the
Allow individual application(s)
radio button.
3.
From the Applications list, select an application profile.
4.
Click the
ADD >
button. The application displays in the Hosted Applications list.
5.
Click the
Submit
button.
To stop an application that is routed to a selected computer:
1.
From the Hosted Applications list, select the application profile name.
2.
Click the
< REMOVE
button.
Creating an Application Profile
If the application that the user wishes to host is not included in the updated application list, you may need
to create an application profile. An application profile configures the system’s firewall to pass through
application-specific data.
Note:
If an application does not appear in the Applications list, the list may need updating. If
an update is available, click the
UPDATE APPLICATION LIST
button.
Page 87 / 138
Management and Diagnostic Console
82
To create an application profile:
1.
Click the Add a new user-defined application link. The Edit Application page opens.
Figure 36. MDC Firewall Edit Application Page
2.
In the Application Name field, enter a name for the application profile.
3.
In the Protocol field, click the
TCP
or
UDP
radio button. If both protocols are required, you must create a
definition for each.
4.
In the Port (or Range) field, enter the port or port range used by the application.
5.
In the Protocol Timeout (seconds) field, enter the amount of time (in seconds) that the connection in
the specified range should remain open when there is no data transfer. In most cases the default value
is appropriate.
6.
In the Map to Host Port field, enter the value that provides the mapping offset to the local computer. For
example, if this value is set to 4000 and the range being opened is 100 to 108, the forwarded data to
the first value in the range will be sent to 4000. Subsequent ports will be mapped accordingly; 101 will
be sent to 4001, 102 will be sent to 4002, etc.
7.
From the Application Type pull-down menu, select the application type: None (Default), File Transfer
Protocol (FTP), Microsoft Games, H.323-based Internet telephony, IRC (Internet relay chat) server, or
PPTP virtual private network server.
8.
Click the
Add Definition
button.
9.
Repeat the previous step for each port or range of ports required for the application profile.
Page 88 / 138
Management and Diagnostic Console
83
Allowing all applications
DMZplus is used for hosting applications if an application will not operate properly using the “Allow
individual application(s)” option. When in DMZplus mode, the designated computer:
Shares the gateway’s IP address.
Appears as if it is directly connected to the Internet.
Has all of the unassigned TCP and UDP ports opened and pointed to it.
Can receive unsolicited network traffic from the Internet.
To configure a computer on the user’s network for DMZplus mode:
1.
Select the computer to which the user wishes to have all data sent.
2.
Click the
Allow all applications (DMZplus mode)
radio button.
3.
Click
Submit
.
4.
Access the selected computer.
5.
Confirm that the computer is configured for DHCP
. If it is not, configure it for DHCP
.
6.
Restart the computer.
When the computer restarts, it receives a special IP address from the system and all unassigned TCP and
UDP ports are forwarded to it.
Page 89 / 138
Management and Diagnostic Console
84
Firewall - Detailed Information Page
The Firewall - Detailed Information page shows detailed information about the gateway’s firewall.
Figure 37. MDC Firewall Detailed Information Page
Pinholes
A pinhole is a configuration setting in the firewall that allows access to specific services running on the
network. For example, for users outside the network to access a specific application (such as a game), a
pinhole must be opened on the gateway firewall to allow requests to the application.
The Pinholes pane shows the number of pinholes that are currently open. There are 192 pinholes available.
NAT Sessions
The NAT Sessions pane shows the number of NAT sessions currently running.
Note:
To access this page, your network must have the Remote Management feature enabled.
If the feature is not enabled, an error message will display when you click the link to access
this page.
Page 90 / 138
Management and Diagnostic Console
85
Firewall - Advanced Settings Page
The Firewall - Advanced Settings page allows you to configure the gateway’s firewall.
Figure 38. MDC Firewall Advanced Settings Page
Note:
To access this page, your network must have the Remote Management feature enabled.
If the feature is not enabled, an error message will display when you click the link to access
this page.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top