DrayTek VigorPro 5300 Router Manual PDF (Setup & Configuration Guide)

Page 81 / 304 Scroll up to view Page 76 - 80

VigorPro5300 Series User’s Guide

73

Priority

It determines the action that this router will apply.

Both: Pass

– The router will let all the packages that match with

the conditions specified in URL Access Control and Web Feature

below passing through. When you choose this setting, both

configuration set in this page for URL Access Control and Web

Feature will be inactive.

Both:Block

–The router will block all the packages that match

with the conditions specified in URL Access Control and Web

Feature below. When you choose this setting, both configuration

set in this page for URL Access Control and Web Feature will be

inactive.

Either: URL Access Control First

– When all the packages

matching with the conditions specified in URL Access Control and

Web Feature below, such function can determine the priority for

the actions executed. For this one, the router will process the

packages with the conditions set below for URL first, then Web

feature second.

Either: Web Feature First

–When all the packages matching with

the conditions specified in URL Access Control and Web Feature

below, such function can determine the priority for the actions

executed. For this one, the router will process the packages with

the conditions set below for web feature first, then URL second.

Log

None

– There is no log file will be recorded for this profile.

Pass

– Only the log about Pass will be recorded in Syslog.

Block

– Only the log about Block will be recorded in Syslog.

All

– All the actions (Pass and Block) will be recorded in Syslog.

URL Access Control

Enable URL Access Control

- Check the box to activate URL

Access Control. Note that the priority for

URL Access Control

is

higher than

Restrict Web Feature

. If the web content match the

setting set in URL Access Control, the router will execute the

action specified in this field and ignore the action specified under

Restrict Web Feature.

Prevent web access from IP address

- Check the box to deny any

web surfing activity using IP address, such as http://202.6.3.2. The

reason for this is to prevent someone dodges the URL Access

Control. You must clear your browser cache first so that the URL

content filtering facility operates properly on a web page that you

visited before.

Action

– This setting is available only when

Either : URL Access

Control First

or

Either : Web Feature First

is selected.

Pass

-

Allow accessing into the corresponding webpage with the

keywords listed on the box below.

Page 82 / 304

VigorPro5300 Series User’s Guide

74

Block -

Restrict accessing into the corresponding webpage with the

keywords listed on the box below.

If the web pages do not match with the keyword set here, it will be

processed with reverse action.

Group/Object Selections

– The Vigor router provides several

frames for users to define keywords and each frame supports

multiple keywords. The keyword could be a noun, a partial noun,

or a complete URL string. Multiple keywords within a frame are

separated by space, comma, or semicolon. In addition, the maximal

length of each frame is 32-character long. After specifying

keywords, the Vigor router will decline the connection request to

the website whose URL string matched to any user-defined

keyword. It should be noticed that the more simplified the blocking

keyword list, the more efficiently the Vigor router perform.

Web Feature

Enable Restrict Web Feature -

Check this box to make the

keyword being blocked or passed.

Action -

This setting is available only when

Either : URL Access

Control First

or

Either : Web Feature Firs

is selected.

Pass

allows accessing into the corresponding webpage with the

keywords listed on the box below.

Pass

-

Allow accessing into the corresponding webpage with the

keywords listed on the box below.

Block

-

Restrict accessing into the corresponding webpage with the

keywords listed on the box below.

If the web pages do not match with the specified feature set here, it

will be processed with reverse action.

Cookie

-

Check the box to filter out the cookie transmission from

Page 83 / 304

VigorPro5300 Series User’s Guide

75

inside to outside world to protect the local user's privacy.

Proxy

-

Check the box to reject any proxy transmission. To control

efficiently the limited-bandwidth usage, it will be of great value to

provide the blocking mechanism that filters out the multimedia

files downloading from web pages.

File Extension Profile –

Choose one

of the profiles that you

configured in

Object Setting>> File Extension Objects

previously for passing or blocking the file downloading.

3.5.3 Web Content Filter Profile

Click

CSM

and click

Web Content Filter

to open the profile setting page.

You can set eight profiles as Web content filter. Simply click the index number under Profile

to open the following web page.

Page 84 / 304

VigorPro5300 Series User’s Guide

76

Action

Pass

- allow accessing into the corresponding webpage with the

categories listed on the box below.

Block

- restrict accessing into the corresponding webpage with the

categories listed on the box below.

If the web pages do not match with the specified feature set here, it

will be processed with reverse action.

Log

None

– There is no log file will be recorded for this profile.

Pass

– Only the log about Pass will be recorded in Syslog.

Block

– Only the log about Block will be recorded in Syslog.

All

– All the actions (Pass and Block) will be recorded in Syslog.

.

For this section, please refer to

Web Content Filter

user’s guide.

3.6 Firewall

3.6.1 Basics for Firewall

While the broadband users demand more bandwidth for multimedia, interactive applications,

or distance learning, security has been always the most concerned. The firewall of the Vigor

router helps to protect your local network against attack from unauthorized outsiders. It also

Page 85 / 304

VigorPro5300 Series User’s Guide

77

restricts users in the local network from accessing the Internet. Furthermore, it can filter out

specific packets that trigger the router to build an unwanted outgoing connection.

The most basic security concept is to set user name and password while you install your

router. The administrator login will prevent unauthorized access to the router configuration

from your router.

If you did not set password during installation; you can go to

System Maintenance

to set up

your password.

Firewall Facilities

The users on the LAN are provided with secured protection by the following firewall

facilities:

z

User-configurable IP filter (Call Filter/ Data Filter).

z

Stateful Packet Inspection (SPI): tracks packets and denies unsolicited incoming data

z

Selectable Denial of Service (DoS) /Distributed DoS (DDoS) attacks protection

z

URL Content Filter

IP Filters

Depending on whether there is an existing Internet connection, or in other words “the WAN

link status is up or down”, the IP filter architecture categorizes traffic into two:

Call Filter

and

Data Filter

.

Rate

Popular DrayTek Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share