15 SBG1000 Wireless Cable Modem Gateway User Guide
Home
X
ExitPrint
Overview Installation Troubleshooting Contact FAQ Specifications Glossary License
Configuration: Basic Gateway TCP/IP Wireless Print Server USB
Security
The Motorola SBG1000 Wireless Cable Modem Gateway provides:
• A firewall to protect the SBG1000 LAN from undesired attacks over the Internet
• Security measures to prevent eavesdropping of wireless data
Network Address Translation (NAT) provides some security because the IP addresses of SBG1000 LAN
computers are not visible on the Internet.
The logical network diagram does not necessarily correspond to the network cabling. A full discussion of network
security is beyond the scope of this document.
SBG1000 security measures shown in a logical network diagram
Firewall
The SBG1000 firewall protects the SBG1000 LAN from undesired attacks and other intrusions from the Internet. It
provides an advanced integrated stateful-inspection firewall supporting intrusion detection, session tracking, and
denial-of-service attack prevention. The firewall:
• Maintains state data for every TCP/IP session on the OSI network and transport layers
• Monitors all incoming and outgoing packets, applies the firewall policy to each one, and screens for improper
packets and intrusion attempts
• Provides comprehensive logging for all:
— User authentications
— Rejected internal and external connection requests
— Session creation and termination
— Outside attacks (intrusion detection)
You can configure the firewall filters to set rules for port usage and to block specific IP domains and networks. For
information about choosing a default firewall policy, see “Setting the Firewall Policy” on page 36.
SBG1000
Firewall
ComputerComputer
Wired Ethernet and/or HPNA LAN
Wireless IEEE 802.11b LAN
LaptopComputer PDA
Wireless Security:
WEP shared key encryption
MAC access control list
Closed network
Internet
DMZ computer