Gateway Configuration Screen Definitions

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

65

365-095-25781 x.1

DMZ Host

You can configure one computer on your home network as the DMZ Host. That computer will operate

outside of the SBG6700-AC firewall. This feature allows you to set up a separate subnetwork for remote

access from the Internet to your computer, gaming devices, or other IP-enabled device so that your

home network is not exposed to hackers or other external attacks from the Internet. Outside users will

only have direct access to the designated DMZ Host device and not your home network.

If you set up a computer as the DMZ Host, remember to set the IP address back to zero (0) when you are

finished with the needed application, since this computer will be exposed to the Internet. Although the

computer is protected from Denial of Service (DoS) attacks via the SBG6700-AC firewall, it is still

exposed to the Internet.

Figure 57 – Advanced DMZ Host Screen

Table 17: Advanced DMZ Host-Field Descriptions

Field

Description

DMZ Host

Enter the IP address of the selected computer you are

setting up as the DMZ host.

Gateway Configuration Screen Definitions

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

66

365-095-25781 x.1

Firewall Screens

You can configure firewall filters and alert notifications for your home network. The SBG6700-AC firewall

protects the SBG6700-AC LAN from unwanted attacks and other intrusions on the Internet. Firewall

protection also provides the following benefits:

•

Advanced, integrated stateful-inspection firewall supporting intrusion detection, session tracking,

and denial-of-service attack prevention.

•

Maintains state data for every TCP/IP session on the OSI network and transport layers.

•

Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for

improper packets and intrusion attempts.

•

Generates comprehensive notifications for the following:

ο

User authentications

ο

Rejected internal and external connection requests

ο

Session creation and termination

ο

Outside attacks (intrusion detection)

Protection Level

The Firewall Protection Level screen has various settings related to blocking or exclusively allowing

different types of data through the SBG6700-AC from the WAN to the LAN. There are three security

firewall protection levels which correspond to how many services are allowed:

•

Off

- No security, highest risk

•

Low

- Minimum security, higher risk

•

Medium

- Common configuration, modest risk

•

High

- Safest configuration, highest security

Firewall protection enables the Stateful Packet Inspection (SPI) firewall features. Block Fragmented IP

packets prevent all fragmented IP packets from passing through the firewall. Port Scan Detection

detects and blocks port scan activity originating on both the LAN and WAN. IP Flood Detection detects

and blocks packet floods originating on both the LAN and WAN.

You can block Java Applets, Cookies, ActiveX controls, pop up windows, and Proxies.

Gateway Configuration Screen Definitions

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

67

365-095-25781 x.1

Figure 58 – Firewall Protection Level Screen

Table 18: Firewall Protection Level -Field Descriptions

Field

Description

Firewall Protection

Level

•

Select

Low

,

Medium

, or

High

to set the level of firewall

protection that you want for your gateway.

•

Select

Off

to disable firewall protection.

Note

: If you choose to disable firewall protection, your

computer(s) and other Ethernet-enabled devices on your

home network will be at risk for possible attacks from viruses

and hackers.

Firewall Settings

•

Checkmark to enable each filter that you want to set for

the firewall.

•

Click

Apply

, when done.

Allowed Services

Listing of the websites you selected to allow access to

from your home network.

Gateway Configuration Screen Definitions

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

68

365-095-25781 x.1

Parental Control

You can use the Parental Control screen to set up user access restrictions on a specific device connected

to your SBG6700-AC network. You can set up the following Parental Controls:

•

Allow or block access to specific Internet sites.

•

Allow or block access to specific MAC addresses.

•

Allow or block Internet access based on specific day and time settings.

•

Enable or disable Internet session duration timers to limit the amount of time for Internet access.

Note

: When creating Parental Control access filters, remember to assign the Start and End ports. Otherwise,

any filters without assigned ports will apply to all ports. This also applies to MAC addresses.

Figure 59 – Firewall Parental Control-Set Time Zone Screen

Table 19: Firewall Parental Control-Set Time Zone-Field Descriptions

Field

Description

Current Time

Enter the current time.

Current Time Zone

Select your time zone.

Automatically adjust for

Daylight Saving Time

Select

Yes

or

No

if you want the time to change for

Daylight Saving Time.

Gateway Configuration Screen Definitions

SURFboard® SBG6700-AC Wireless Cable Modem Gateway

•

User Guide

69

365-095-25781 x.1

Figure 60 – Firewall Parental Control Screen

Table 20: Firewall Parental Control -Field Descriptions

Field

Description

Description

Enter a name to create a new user profile.

MAC Address

Enter the 12-digit (hexadecimal) hardware address of the device that you

are setting up for parental controls.

The MAC addressed is assigned by the hardware manufacturer and should

be located on the device label.

URL

Enter the web address of the Internet site that you want to block or access.

Start Port

Enter the starting port number of the range of ports for which you want to

block incoming or outgoing access.

Default port is

0

.