iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
You may choose between three pre-defined security levels for iPECS SBG-1000: Minimum,
Typical (the default), and Maximum. The following table summarizes iPECS SBG-1000’s behavior
for each of the three security levels.
Security Level
Maximum Security
Typical Security (Default)
Minimum Security
Requests Originating in the
WAN (Incoming Traffic)
Blocked: No access to home
network from Internet, except as
configured in the Port Forwarding,
DMZ host and Remote Access
screens
Blocked: No access to home
network from Internet, except as
configured in the Port Forwarding,
DMZ host and Remote Access
screens
Unrestricted: Permits full access
from Internet to home network; all
connection attempts permitted
Requests Originating in the
LAN (Outgoing Traffic)
Limited: Only commonly-used
services, such as
Web-browsing and e-mail, are
permitted. The list of allowed
services can be edited in the
Access Control screen (refer
to Section 5.2.2)
Unrestricted: All services are
permitted, except as
configured in the Access
Control screen
Unrestricted: All services are
permitted, except as
configured in the Access
Control screen
Table 5.1 iPECS SBG-1000’s Firewall Security Levels
To configure iPECS SBG-1000’s basic security settings, perform the following:
1. Choose between the three predefined security levels described in the table above.
Note: Using the Minimum Security setting may expose the home network to
significant security risks, and thus should only be used, when necessary, for short
periods of time.
2. Check the 'Block IP Fragments' box in order to protect your home network from a common
type of hacker attack that could make use of fragmented data packets to sabotage your
home network. Note that VPN over IPSec and some UDP-based services make legitimate
use of IP fragments. In case of enabling these services, you will need to allow IP fragments
to pass into the home network.
3. Click 'OK' to save the settings.
By default, the selected security level affects access to such Internet services as Telnet, FTP,
HTTP, HTTPS, DNS, IMAP, POP3 and SNTP. Note that some programs (such as some Internet
messengers and Peer-To-Peer clients) tend to use ports of the above-mentioned services in case
they cannot connect using their own default ports. When allowing this behavior, the Internet
connection requests of such programs will not be blocked, even at the ‘Maximum’ security level.
After the security level is set, the firewall regulates the flow of data between the home network and
the Internet. Both incoming and outgoing data are inspected and then either accepted (allowed to
pass through iPECS SBG-1000) or rejected (barred from passing through iPECS SBG-1000),
according to a flexible and configurable set of rules. These rules are designed to prevent unwanted
36