MB Connect Line mbNET Series - Security and Firewall; 19.1 Firewall General

Page 154 of 237
Version: 5.1.6 – June 4
th
, 2019
19. Security
Firewall General
The industrial router has an integrated firewall to protect against third-party and unauthorized access and connection
attempts. Incoming and outgoing data traffic is checked, logged and allowed or denied via this firewall.
The firewall can generally be configured with one of the following four settings:
maximum Security
All incoming Packages (Data from Internet) are rejected
All outgoing Packages (Data from LAN) are rejected
except: DNS, FTP, IMAP, HTTP, HTTPS, POP3, SMTP, Telnet, NTP
With this setting, rules for allowing data traffic must be configured accordingly. Both incoming and outgoing
data traffic is denied.
For accessing the web interface (from outside the network), the TCP protocol and the destination port
80 must be entered and enabled in the WAN > LAN rules. If, however, you start a VPN connection, access
is accordingly allowed for the data packets from the VPN tunnel.
normal Security
All incoming Packages (Data from Internet) are rejected
All outgoing Packages (Data from LAN) are accepted.
With this setting, incoming data traffic (data from the Internet) is denied while outgoing data traffic is
allowed.