Outline of security functions
provided by the product
Security functions against external attacks
To protect the LANs connected to the product against external attacks, the product provides various
filter functions and Intrusion Detection System.
Internet
Provider
Filter function
The product has the following two filters:
• Inbound filter (page 77): Used to discard needless packets early.
• Policy filter (page 80): Performs stateful inspection filtering (dynamic filter). It can control access
on a connection basis.
Intrusion Detection System (page 88)
When incoming packets are checked through the inbound filter, the function detects illegal packets
for potential external attacks. You can specify whether detected packets are discarded immediately
after received or can pass through the function, depending on the types of packets.
Packet processing flow
LAN
UP LINK
1
2
3
FWX120 Operation Manual 75
Enhancing security
4
4