Firewall Control (CXi, CXi II, MXe and MXe Server only)

Parameter

Description

Default Value

Logging State

Select "Disabled" to disable logging of unknown packets.

Enabled

PPTP Pass-through

Select "Disabled" to disable PPTP Pass-through. When PPTP Pass-through is "Enabled", outbound PPTP VPN tunnels are allowed to pass through the firewall from the LAN to the internet.

Enabled

IPSEC Pass-through

Select "Disabled" to disable IPSEC Pass-through. When IPSEC Pass-through is "Enabled", outbound IPSec VPN tunnels are allowed to pass through the firewall from the LAN to the internet.

Enabled

Action for Unknown Packets

Select the method of handling unknown packets received on the WAN interface:

Drop: the unknown packet is discarded without a reply to the sender.

Reject: the unknown packet generates an error packet (ICMP port unreachable) for the sender. Additionally, the packet is logged if logging is enabled for this packet type.

Drop

Do Not Log UDP Ports

List the UDP packets that do not generate logs when packets are received on the specified ports. Valid ports are numbered 1-65535 with a total field length of up to 128 characters. Port ranges are of the form x-y, where x is less than y. List ports and/or port ranges separated by commas.

137-139, 520

Do Not Log TCP Ports

List the TCP packets that do not generate logs when packets are received on the specified ports. Valid ports are numbered 1-65535 with a total field length of up to 128 characters. Port ranges are of the form x-y, where x is less than y. List ports and/or port ranges separated by commas.

135, 137-139

WAN Firewall

Select "Enabled" to enable the firewall and Network Address Translation (NAT) For a computer to communicate with other computers and Web servers on the Internet, it must have an IP address. An IP address is a unique 32-bit number that identifies the location of your computer on a network. An IP address is similar to a street address in that it is means to find out exactly where you are and deliver information to you. Network Address Translation allows a single device, such as a router, to act as an agent between the Internet (or "public network") and a local (or "private") network. This means that only a single, unique IP address is required to represent an entire group of computers. on the WAN port .

Disabling the firewall makes it feasible to connect the WAN port to a separate network with transparent routing provisioned between the networks on the WAN port and the LAN ports of the controller.

Enabled