Firewall
147
Universal plug and play gateway
The Universal Plug and Play (UPnP) Gateway allows UPnP capable applications and
devices to request port forwarding rules to be established on demand. This allows some
applications and devices that may not operate correctly behind the NAT firewall to
automatically work.
Warning
When UPnP in enabled, any host connected to the internal network can create a port
forwarding rule on the firewall. We strongly recommend that do not enable the UPnP
Gateway feature.
Configuring the UPnP gateway
The UPnP Gateway needs to be run on a pair of interfaces, the External interface
(typically default gateway internet) and the Internal interface (typically LAN or DMZ).
The UPnP Gateway sends out notifications on the internal interface, advertising its
presence on the network. Any UPnP capable applications or devices that you require to
make use of the UPnP Gateway need to be connected to the CyberGuard SG appliance
via this interface. The UPnP Gateway listens on this interface to requests from UPnP
capable applications and devices to establish port forwarding rules.
In response to these requests, the UPnP Gateway establishes port forwarding rules to
allow matching packets to be forwarded from the configured external interface through to
the internal interface.
Note
The port forwarding rules set up via the UPnP Gateway are temporary. The list of
configured UPnP port forwarding rules is cleared should the CyberGuard SG appliance
be power cycled, or should the internal or external interface become unavailable.
The UPnP Gateway is intended for transitory application port forwarding, such as those
established by some versions of Microsoft Messenger for file transfers. For long term
port forwarding, we recommend configuring the necessary rules via the Destination NAT
features in Packet Filtering.
Should there be a conflict, packet filtering and NAT rules have priority over UPnP rules.
To Next Page
Loading...
Need help?
General
