Reference Manual for the ProSafe VPN Firewall FVS114

3-12

Connecting the Firewall to the Internet

202-10098-01, April 2005

a.

Account:

Enter your Account Name (may also be called Host Name) and Domain Name.

These parameters may be necessary to access your ISP’s services such as mail or news

servers.

b.

Internet IP Address:

If your ISP has assigned you a permanent, fixed (static) IP address for your PC, select

“Use static IP address”. Enter the IP address that your ISP assigned. Also enter the

netmask and the Gateway IP address. The Gateway is the ISP’s firewall to which your

firewall will connect.

c.

Domain Name Server (DNS) Address:

If you know that your ISP does not automatically transmit DNS addresses to the firewall

during login, select “Use these DNS servers” and enter the IP address of your ISP’s

Primary DNS Server. If a Secondary DNS Server address is available, enter it also.

Note:

After completing the DNS configuration, restart the computers on your network so

that these settings take effect.

d.

Firewall’s MAC Address:

This section determines the Ethernet MAC address that will be used by the firewall on the

Internet port. Some ISPs will register the Ethernet MAC address of the network interface

card in your PC when your account is first opened. They will then only accept traffic from

the MAC address of that PC. This feature allows your firewall to masquerade as that PC

by “cloning” its MAC address.

To change the MAC address, select “Use this Computer’s MAC address.” The firewall

will then capture and use the MAC address of the PC that you are now using. You must be

using the one PC that is allowed by the ISP. Or, select “Use this MAC address” and

enter it.

e.

Click

Apply

to save your settings.

4.

If your Internet connection does require a login, fill in the settings according to the instructions

below. Select Yes if you normally must launch a login program such as Enternet or WinPOET

in order to access the Internet.

Note:

After you finish setting up your firewall, you will no longer need to launch the ISP’s

login program on your PC in order to access the Internet. When you start an Internet

application, your firewall will automatically log you in.

Reference Manual for the ProSafe VPN Firewall FVS114

Connecting the Firewall to the Internet

3-13

202-10098-01, April 2005

a.

For connections that require a login using protocols such as PPPoE, PPTP, Telstra Bigpond

Cable broadband connections, select your Internet service provider from the drop-down

list.

Figure 3-10: Basic Settings ISP list

b.

The screen will change according to the ISP settings requirements of the ISP you select.

c.

Fill in the parameters for your ISP according to the Wizard-detected procedures starting on

page 3-10

.

d.

Click

Apply

to save your settings.

Reference Manual for the ProSafe VPN Firewall FVS114

3-14

Connecting the Firewall to the Internet

202-10098-01, April 2005

Firewall Protection and Content Filtering

4-1

202-10098-01, April 2005

Chapter 4

Firewall Protection and

Content Filtering

This chapter describes how to use the content filtering features of the FVS114 ProSafe VPN

Firewall to protect your network. These features can be found by clicking on the

Security

heading

in the main menu of the browser interface.

Firewall Protection and Content Filtering Overview

The FVS114 ProSafe VPN Firewall provides you with Web content filtering options, plus

browsing activity reporting and instant alerts via e-mail. Parents and network administrators can

establish restricted access policies based on time-of-day, Web addresses and Web address

keywords. You can also block Internet access by applications and services, such as chat or games.

A firewall is a special category of router that protects one network (the trusted network, such as

your LAN) from another (the untrusted network, such as the Internet), while allowing

communication between the two. A firewall incorporates the functions of a NAT (Network

Address Translation) router, while adding features for dealing with a hacker intrusion or attack,

and for controlling the types of traffic that can flow between the two networks. Unlike simple

Internet sharing NAT routers, a firewall uses a process called stateful packet inspection to protect

your network from attacks and intrusions. NAT performs a very limited stateful inspection in that

it considers whether the incoming packet is in response to an outgoing request, but true stateful

packet inspection goes far beyond NAT.

To configure these features of your firewall, click on the subheadings under the

Security

heading

in the main menu of the browser interface. The subheadings are described below:

Reference Manual for the ProSafe VPN Firewall FVS114

4-2

Firewall Protection and Content Filtering

202-10098-01, April 2005

Block Sites

The FVS114 allows you to restrict access based on Web addresses and Web address keywords. Up

to 255 entries are supported in the Keyword list. The Block Sites menu is shown in

Figure 4-1

:

Figure 4-1:

Block Sites menu

Web Components

: You can use these to block undesirable Web componenents or behavior. Select

the desired options:

•

Turn Proxy filtering on: Block use of a remote Proxy Server. A Proxy Server can be used to

hide the real name or address of the site which your LAN users are connecting to. By enabling

this option, you force LAN users to connect directly, so their activity can be logged and/or

blocked.

•

Turn Java filtering on: Block Java applets.

•

Turn ActiveX filtering on: Block ActiveX components (OCX files) used by IE on Windows,

and by Windows Update.