Page 76 / 86 Scroll up to view Page 71 - 75
Gateway Configuration Screen Definitions
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
65
365-095-25781 x.1
DMZ Host
You can configure one computer on your home network as the DMZ Host. That computer will operate
outside of the SBG6700-AC firewall. This feature allows you to set up a separate subnetwork for remote
access from the Internet to your computer, gaming devices, or other IP-enabled device so that your
home network is not exposed to hackers or other external attacks from the Internet. Outside users will
only have direct access to the designated DMZ Host device and not your home network.
If you set up a computer as the DMZ Host, remember to set the IP address back to zero (0) when you are
finished with the needed application, since this computer will be exposed to the Internet. Although the
computer is protected from Denial of Service (DoS) attacks via the SBG6700-AC firewall, it is still
exposed to the Internet.
Figure 57 – Advanced DMZ Host Screen
Table 17: Advanced DMZ Host-Field Descriptions
Field
Description
DMZ Host
Enter the IP address of the selected computer you are
setting up as the DMZ host.
Page 77 / 86
Gateway Configuration Screen Definitions
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
66
365-095-25781 x.1
Firewall Screens
You can configure firewall filters and alert notifications for your home network. The SBG6700-AC firewall
protects the SBG6700-AC LAN from unwanted attacks and other intrusions on the Internet. Firewall
protection also provides the following benefits:
Advanced, integrated stateful-inspection firewall supporting intrusion detection, session tracking,
and denial-of-service attack prevention.
Maintains state data for every TCP/IP session on the OSI network and transport layers.
Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for
improper packets and intrusion attempts.
Generates comprehensive notifications for the following:
ο
User authentications
ο
Rejected internal and external connection requests
ο
Session creation and termination
ο
Outside attacks (intrusion detection)
Protection Level
The Firewall Protection Level screen has various settings related to blocking or exclusively allowing
different types of data through the SBG6700-AC from the WAN to the LAN. There are three security
firewall protection levels which correspond to how many services are allowed:
Off
- No security, highest risk
Low
- Minimum security, higher risk
Medium
- Common configuration, modest risk
High
- Safest configuration, highest security
Firewall protection enables the Stateful Packet Inspection (SPI) firewall features. Block Fragmented IP
packets prevent all fragmented IP packets from passing through the firewall. Port Scan Detection
detects and blocks port scan activity originating on both the LAN and WAN. IP Flood Detection detects
and blocks packet floods originating on both the LAN and WAN.
You can block Java Applets, Cookies, ActiveX controls, pop up windows, and Proxies.
Page 78 / 86
Gateway Configuration Screen Definitions
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
67
365-095-25781 x.1
Figure 58 – Firewall Protection Level Screen
Table 18: Firewall Protection Level -Field Descriptions
Field
Description
Firewall Protection
Level
Select
Low
,
Medium
, or
High
to set the level of firewall
protection that you want for your gateway.
Select
Off
to disable firewall protection.
Note
: If you choose to disable firewall protection, your
computer(s) and other Ethernet-enabled devices on your
home network will be at risk for possible attacks from viruses
and hackers.
Firewall Settings
Checkmark to enable each filter that you want to set for
the firewall.
Click
Apply
, when done.
Allowed Services
Listing of the websites you selected to allow access to
from your home network.
Page 79 / 86
Gateway Configuration Screen Definitions
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
68
365-095-25781 x.1
Parental Control
You can use the Parental Control screen to set up user access restrictions on a specific device connected
to your SBG6700-AC network. You can set up the following Parental Controls:
Allow or block access to specific Internet sites.
Allow or block access to specific MAC addresses.
Allow or block Internet access based on specific day and time settings.
Enable or disable Internet session duration timers to limit the amount of time for Internet access.
Note
: When creating Parental Control access filters, remember to assign the Start and End ports. Otherwise,
any filters without assigned ports will apply to all ports. This also applies to MAC addresses.
Figure 59 – Firewall Parental Control-Set Time Zone Screen
Table 19: Firewall Parental Control-Set Time Zone-Field Descriptions
Field
Description
Current Time
Enter the current time.
Current Time Zone
Select your time zone.
Automatically adjust for
Daylight Saving Time
Select
Yes
or
No
if you want the time to change for
Daylight Saving Time.
Page 80 / 86
Gateway Configuration Screen Definitions
SURFboard® SBG6700-AC Wireless Cable Modem Gateway
User Guide
69
365-095-25781 x.1
Figure 60 – Firewall Parental Control Screen
Table 20: Firewall Parental Control -Field Descriptions
Field
Description
Description
Enter a name to create a new user profile.
MAC Address
Enter the 12-digit (hexadecimal) hardware address of the device that you
are setting up for parental controls.
The MAC addressed is assigned by the hardware manufacturer and should
be located on the device label.
URL
Enter the web address of the Internet site that you want to block or access.
Start Port
Enter the starting port number of the range of ports for which you want to
block incoming or outgoing access.
Default port is
0
.

Rate

3.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top