54
INTERNET SECURITY
DMS3-CTC-25-115 v1.0
6
6.2 DMZ
Introduction
The TG-1 Gateway allows you to configure one local device as a De-Militarized Zone (DMZ) host. This
means that:
None of the TG-1 Gateway firewall rules will be applied to this device.
All traffic originating from the Internet will be forwarded to this devices unless there is a port forwarding
rule defined for this type of traffic. Port forwarding rules always have higher priority.
Use a static address for the DMZ host
Make sure that your DMZ host uses a fixed IP address. If you do not do this, the device might get a new IP
address after some time and the port forwarding rule will no longer be applied to the device and another
device may suddenly be acting as DMZ host.
How to configure a device as DMZ host
1 Browse to the TG-1 Gateway GUI.
For more information, see “4.1 Access from your local network” on page 29.
2 Click WAN Services. The WAN services page appears.
3 In the upper-right corner, click show advanced. The DMZ section appears.
4 Switch Enabled to .
5 In the Destination box, type the IP address of the device that you want to use as DMZ host.
6 Optionally, you can make exceptions on the DMZ by creating port mappings to direct specific traffic to
other devices. To do this, click Add new port mapping under Port forwarding table.
7 Click Save. The DMZ is now active.