56

Edit the URL Global Whitelist

Follow these steps to

add or remove a url.

Step

1.

Go

to

Firewall and Content

Filtering and choose

Edit

global

URL

whitelist

Step 2.

Add/edit or

remove the URL that

should

never

be

checked

with

the

Content Filtering.

Click

the

Apply

button below to apply

the

change

or

click

Cancel

to

discard

changes.

Edit the URL Global Blacklist

Follow these steps to

add or remove a url.

Step

1.

Go

to

Firewall and Content

Filtering and choose

Edit

global

URL

blacklist

Step 2.

Add/edit or

remove the URL that

should be checked

with

the

Content

Filtering.

Click

the

Apply

button below to apply

the

change

or

click

Cancel

to

discard

changes.

Note:

For

HTTP

URL filtering to work, all

HTTP traffic needs to go

trough a policy using a

service with the HTTP

ALG.

58

Active content handling

Active content handling can be enabled or disabled by checking the checkbox before each

type you would like to strip. For example to strip ActiveX and Flash enable the checkbox

named Strip ActiveX objects. It’s possible to strip ActiveX, Flash, Java, JavaScript and

VBScript, it’s also possible to block cookies.

Note:

For HTTP URL filtering to work, all HTTP traffic needs to go trough a policy using a

service with the HTTP ALG.

Servers

DHCP Server Settings

The DFL-200 contains a DHCP server; DHCP (Dynamic Host Configuration Protocol) is a

protocol that lets network administrators to automatically assign IP numbers to computers on

a network. The DFL-200

DHCP Server helps to

minimize

the

work

necessary to administer

a network, as there is

no need for another

server running DHCP

Server software.

The DFL-200 DHCP

Server only implements

a subset of the DHCP

protocol necessary to

serve a small network,

these are:

•

IP address

•

Netmask

•

Subnet

•

Gateway

address

•

DNS

Servers

•

WINS

Servers

•

Domain

name

The DFL-200 DHCP

Server assigns and manages IP addresses from specified address pools within the firewall to

the DHCP clients.

Note:

Leases are remembered over a re-configure or reboot of the firewall.

The DFL-200 also includes a DHCP Relayer. A DHCP relayer is a form of gateway

between a DHCP Server and its users. The relayer intercepts DHCP queries from the users

and forwards them to a DHCP server while setting up dynamic routes based on leases. This

enables the firewall to keep an accurate routing table based on active users and protects the

DHCP server to some degree among other things.

Note:

There can only be one DHCP Server or DHCP Relay configured per interface.

60

Enable DHCP Server

To enable the DHCP Server on an interface, click on

Servers

in the menu bar, and then

click

DHCP Server

below it.

Follow these steps to enable the DHCP Server on the LAN interface.

Step 1.

Choose the LAN interface from the Available interfaces list.

Step 2.

Enable by checking the

Use built-in DHCP Server

box.

Step 3.

Fill in the IP Span, the start and end IP for the range of IP addresses that the DFL-

200 can assign.

Step 4.

Fill in the DNS servers DHCP server will assigns to the clients, at least one should

be provided. If the DNS relayer is configured the DHCP server can assign those.

Step 5.

Optionally type in the WINS servers the DHCP server assigns to the clients.

Step 6.

Optionally type in the domain that the DHCP server assigns to the clients.

Step 7.

Choose for how long the DHCP server will give out leases before the client have

to renew them.

Click the

Apply

button below to apply the setting or click

Cancel

to discard changes

Enable DHCP Relay

To enable the DHCP Relay on an interface, click on

Servers

in the menu bar, and then

click

DHCP Server

below it.

Follow these steps to enable the DHCP Relayer on the LAN interface.

Step 1.

Choose the LAN interface from the Available interfaces list.

Step 2.

Enable by checking the

Relay DHCP Requests to other DHCP server

box.

Step 3.

Fill in the IP of the DHCP Server; note that it should be on another interface then

where the DHCP request is coming from, i.e. a server on the DMZ.

Click the

Apply

button below to apply the setting or click

Cancel

to discard changes

Disable DHCP Server/Relayer

To disable the DHCP Server on an interface, click on

Servers

in the menu bar, and then

click

DHCP Server

below it.

Here click on the interface that you want to disable the DHCP

server or relayer on.

Follow these steps to disable the DHCP Server or Relayer on the LAN interface.

Step 1.

Choose the LAN interface from the Available interfaces list.

Step 2.

Disable by checking the

No DHCP processing

box.

Click the

Apply

button below to apply the setting or click

Cancel

to discard changes