Filter
Top Products
Chapter 3 Configuration
37
NEWS(119) TCP(6) 119 119 NO NO NO
YES
NO
YES
RealAudio
(7070)
UDP(17)
7070 7070 NO NO
YES YES YES YES
PING ICMP(1) N/A N/A NO
YES
NO
YES
NO
YES
H.323(1720)
TCP(6) 1720 1720 NO NO NO
YES YES YES
T.120(1503)
TCP(6) 1503 1503 NO NO NO
YES YES YES
SSH(22) TCP(6) 22 22 NO NO NO
YES YES YES
NTP(123) UDP(17)
123 123 NO
YES
NO
YES
NO
YES
HTTPS(443)
TCP(6) 443 443 NO NO NO
YES
NO
YES
ICQ (5190) TCP(6) 5190 5190 NO NO NO
NO YES YES
Note: Inbound: Internet to LAN, Outbound: LAN to Internet
3.6.3.4.2.2 Address Filters
There are no pre-defined address filter rules; you can add the filter rules to meet your
requirements. There are two kinds of address filters, one is inbound, the other is
outbound. The rules can be set to prevent unauthorized users (hosts or network) to
access the Internet from LAN (outbound) and/or access LAN from the Internet (inbound).
3.6.3.4.2.3 Packet filter example
The following provides an example of configuring a web server in LAN when the firewall
policy is set to High, Medium or Low security level.
The pre-defined port filter rule for HTTP is the same no matter if it is a high, medium or
low security level. The default setting is allowed for outbound access, not allowed for
inbound access. To setup a Web server located on the local network, when the firewall
policy is set, you have to configure the Port Filters setting first.
When the firewall policy is set, the port filters screenshot is as below, the inbound HTTP
access is not allowed.