Protecting & Monitoring Your Wireless Network

SBG6782-AC Wireless Cable Modem & Router

•

User Guide

27

365-095-23865 x.1

Set Up Firewall Protection

You can set up firewall filters and firewall alert notifications on your wireless home network. You

can also block Java Applets, Cookies, ActiveX controls, popup windows, Proxies, and website

access. See

Protection Level

for more information.

To set the firewall protection level:

1.

From any screen, click the

Firewall-Protection Level

menu link or click the Firewall menu

button on the SBG6782-AC Main Menu and then select

Protection Level

.

Figure 17 – Firewall Protection Level Screen

2.

Click the Firewall Protection Setting drop-down button to select the firewall protection level.

Possible values:

Low

,

Medium

,

High

, or

Off

Note

: Selecting

Off

will disable firewall protection on your home network. Your computer(s)

and other Ethernet-enabled devices on your network will be at risk for possible attacks from

viruses and hackers.

3.

Select each Web filter that you want to set for the firewall and then click

Apply

.

Set Up Parental Controls

You can set up the following Parental Controls on your home network:

•

Allow or block access to specific Internet sites.

•

Allow or block access to specific MAC addresses.

•

Enable or disable Internet session duration timers to limit the amount of time for Internet

access.

Note

: Any Parental Control filters that do not include assigned ports, will apply to all ports. This

also applies to MAC addresses as well.

Protecting & Monitoring Your Wireless Network

SBG6782-AC Wireless Cable Modem & Router

•

User Guide

28

365-095-23865 x.1

You can also link each user on your network to specified rules for login, time-access, and content

filtering. See

Parental Control

for more information

To set Parental Controls:

1.

From any screen, click the

Firewall-Parental Control

menu link or click the Firewall menu

button on the SBG6782-AC Main Menu and then select

Parental Control

.

2.

Click

Current Time Zone

drop-down button to select your time zone.

Figure 18 – Parental Control-Change Time Zone Screen

3.

Select

Yes

or

No

to automatically adjust the time for Daylight Saving Time.

4.

Click

Create

to continue setting up Parental Controls.

Figure 19 – Firewall Parental Control Screen

Protecting & Monitoring Your Wireless Network

SBG6782-AC Wireless Cable Modem & Router

•

User Guide

29

365-095-23865 x.1

5.

Enter a name for the user profile that you want to create in the Description field.

6.

Enter the 12-digit (hexadecimal) MAC address of the device for which you are creating

Parental Controls in the MAC Address field.

7.

Enter the web address of the Internet site that you want to block or access.

8.

Enter the Starting port number of the in the Start Port field.

9.

Enter the Ending port number in the End Port field.

10.

Select the days of the week that you want to allow the selected user to access the Internet.

11.

Select the time range that you want to allow the selected user to access the Internet.

12.

Select to

Allow

or

Block

Internet access for the time and days you set previously.

13.

Select

On

or

Off

in the Enabled field to enable or disable this Parental Control restriction.

14.

Click

Apply

, when done.

Set Up Port Triggers

You can use Port Triggers to configure dynamic triggers to specific devices on the LAN. This

allows special applications that require specific port numbers with bi-directional traffic to function

properly. Applications such as video conferencing, voice, gaming, and some messaging program

features may require these special settings.

To configure Port Triggers:

1.

From any screen, click the

Advanced-Port Triggers

menu link or click the Advanced menu

button on the SBG6782-AC Main Menu and then select

Port Triggers

.

2.

Click

Create Port Triggers

button to open the Add Port Triggering Entry window.

Figure 20 – Advanced Port Triggers Screen

3.

Enter the starting port number of the Port Trigger range in the Trigger Start Port field.

4.

Enter the ending port number of the Port Trigger range in the Trigger End Port field.

5.

Enter the starting port number of the Port Trigger range in the Target Start Port field.

6.

Enter the ending port number of the Port Trigger range in the Target End Port field.

7.

Select

TCP

,

UDP

, or

Both

from the Protocol drop-down list.

8.

Select

On

to activate IP port triggers or

Off

to disable IP port triggers.

9.

Click

Apply

to create your port triggers.

Protecting & Monitoring Your Wireless Network

SBG6782-AC Wireless Cable Modem & Router

•

User Guide

30

365-095-23865 x.1

Set Up the DMZ Host

WARNING

!

The gaming DMZ host is not protected by the SBG6782-AC

gateway firewall. It is open to communication or hacking from any computer on

the Internet. Consider carefully before configuring a device to be in the DMZ.

You can configure one computer to be the DMZ host. This setting is generally used for

computers using problem applications that use random port numbers and do not function

correctly with specific port triggers or the port forwarding setups. If you set up a computer as a

DMZ Host, set this back to zero when you are finished with the needed application, since this

computer will be effectively exposed to the public Internet, though still protected from Denial of

Service (DoS) attacks via the Firewall.

To create the DMZ Host:

1.

Click

Advanced

on the SBG6782-AC Main Menu.

2.

Click

DMZ Host

from the Advanced submenu options.

Figure 21 – Advanced DMZ Host Screen

3.

Enter the last one to three digits (from

2

to

254

) of the IP address of the computer or gaming

device you want to set up as the DMZ host and expose to the Internet.

4.

Click

Apply

to activate the selected computer.

Note

: Remember to set the IP address back to zero when you are finished with the needed

application, since that computer will be exposed to the public Internet.

Protecting & Monitoring Your Wireless Network

SBG6782-AC Wireless Cable Modem & Router

•

User Guide

31

365-095-23865 x.1

Store Remote Firewall Logs

You can store firewall attack reports or logs on a computer in your home, so that multiple

instances can be logged over a period of time. You can select individual attack or configuration

items to send to the SysLog server, so that only the items of interest will be monitored.

Note

: The SysLog server must be on the same network as the Private LAN behind the

Configuration Manager (typically

192.168.0.x

).

To store remote Firewall logs:

1.

From any screen, click the

Firewall-Remote Log

menu link or click the Firewall menu button

on the SBG6782-AC Main Menu and then select

Remote Log

.

Figure 22 – Firewall Remote Log Screen

2.

Select all desired event types that you want to monitor. This will activate the SysLog

monitoring feature.

3.

Enter the last digits from

10

to

254

of the SysLog server’s IP address.

Note

: Normally, the IP address of this SysLog server is hard-coded so that the address

always agrees with the entry on this page.

4.

Click

Apply

.