Configuring Firewall Settings

73

HomePortal 3801HGV Gateway User Guide

Configuring Firewall Settings

Refer to the following table to understand the parameters listed on the

Firewall Status

page:

Configuring Firewall Settings

Objective

To configure firewall settings in a way that special applications running on computers inside your

home network are granted Internet access.

To grant internet access to special applications, you need to open firewall pinholes and associate

the intended application(s) with a computer connected to your gateway. If you cannot find a listing

for your application, you can define an application with the protocol and port information. Also, you

can delete the application profile you have saved. By default, firewall provides maximum protection

and blocks unsolicited inbound traffic.

Steps

1.

Navigate to

Settings

>

Firewall

>

Applications, Pinholes and DMZ

. The

Allow device

application traffic to pass through firewall

page appears.

Parameter

Description

Firewall Status

View whether firewall is enabled or disabled in this section.

Current Applications, Pinholes

and DMZ Settings

View if any applications are hosted in this section.

Device

Displays the name of the configured devices.

Allowed Applications

Displays the name of the application that bypasses the firewall settings.

Application Type

Displays the type of application

.

Protocol

Displays the protocol in use.

Port Number(s)

Displays the port number assigned to the application.

Public IP

Displays the IP assigned to the device.

Configuring Firewall Settings

74

HomePortal 3801HGV Gateway User Guide

Configuring Firewall Settings

Configuring Firewall Settings

75

HomePortal 3801HGV Gateway User Guide

Configuring Firewall Settings

2.

Select the computer where you want to host the application(s) in the

Select a computer

section. When you host an application for a computer on your network, it implies that you

are scaling down the firewall security levels for that application to be accessible on the

specified computer.

3.

Select the

Allow individual application(s)

radio button.

Note

If the computer you want to select is not listed, you can still select it as long as it is on the

same network, and you know its IP address. Enter the IP address of that computer, and

then click

Choose

.

4.

Filter the application list by selecting the category from the

Filter Applications by

bulleted

list. Your selection is displayed in the

Application List

list box.

Note

To select multiple applications, hold down the [Shift] or [Ctrl] keys while making your

selections. Using the [Shift] key lets you make your selections in a contiguous order while

the [Ctrl] key selects the groups in a random order.

5.

Click

Add

. The application appears in the

Hosted Applications

list box.

Note

To remove a hosted application, select it in the

Hosted Applications

list box, and click

Remove

.

Creating an Application Profile

To create an application profile that bypasses the firewall settings:

1.

Navigate to

Settings

>

Firewall

>

Applications, Pinholes and DMZ

. The

Allow device

application traffic to pass through firewall

page appears.

2.

Click

Add a new user-defined application

in the

Edit firewall settings for this computer

section. This lets you create an application profile that is not included in the application

list. An application profile configures the gateway firewall to let the application-specific data

pass through. The

Firewall Application Profile Definition

page appears.

Configuring Firewall Settings

76

HomePortal 3801HGV Gateway User Guide

Configuring Firewall Settings

3.

Enter a name for the application profile in the

Application Profile Name

text box.

4.

Click the

TCP

or

UDP

radio button to select the protocol for the application profile. If the

application you are adding requires both, you need to create a separate definition for each.

5.

Enter the port or port range used by the application in the

Port (or Range)

text boxes. If

only one port is required, enter the port number in the

From

text box. For example, some

application require only one port to be opened (such as TCP port 500); others require that

all TCP ports from 600 to 1000 be opened.

6.

Enter the duration in seconds in

Protocol Timeout

text box. This is the amount of time the

connection in the specified range remains open when there is no data transfer. In most

cases, the default value is appropriate. If you leave the text box blank, the system uses the

default values (86400 seconds for the TCP protocol; 600 seconds for the UDP protocol).

7.

Enter a value in the

Map to Host Port

text box. This value must map to the port range you

established to the local computer. For example, if you set the value to 4000 and the port

range being opened is 100 to 108, the forwarded data to the first value in the range will be

Configuring Firewall Settings

77

HomePortal 3801HGV Gateway User Guide

Configuring Firewall Settings

sent to 4000. Subsequent ports will be mapped accordingly; 101 will be sent to 4001,

102 will be sent to 4002, and so on.

8.

Select the application type from the

Application Type

drop-down list.

9.

Click

Add to List

. This creates a new application profile. Also, the configured information

appears in the

Definition List

section of the same page.

You can also view the newly created application listed in the

Applications List

drop-down

list on the

Applications, Pinholes and DMZ

page.

10.

Click

Back

to return to the

Applications, Pinholes and DMZ

page.

11.

To edit a user defined applicaitons, click

Edit or delete user-defined application

in the

Edit

firewall settings for this computer

section. This lets you edit an existing profile or assign

additional TCP or UDP ports to an existing profile. The

Edit or Delete a User-Defined

Application

page appears.

Note

You can add the definition of the profile only when it has not been added to the

Hosted

Application

list box. If the profile is added in the list of hosted applications and you want to

modify it, then you need to first remove it from the

Hosted Applications

list box.

12.

Select the application you want to modify from the

User defined applications

list box.

13.

Click

Edit

. The

Firewall Application Profile Definition

page appears.