Manage the Firewall and Secure Your Network
75
AC1900, N900, and N450 WiFi Cable Data Gateways
Ipsec PassThrough If IPSec pass-through is enabled, IPSec traffic is forwarded. If it is disabled,
IPSec traffic is blocked.
PPTP PassThrough If PPTP pass-through is enabled, PPTP traffic is forwarded. If it is disabled,
PPTP traffic is blocked.
Multicast If multicast is enabled, the cable data gateway passes multicasting streams
through the firewall. If it is disabled, multicast streams are blocked.
Port Scan Detection If port scan detection is enabled, the cable data gateway responds to
Internet-based port scans. If it is disabled, the cable data gateway blocks
port scans.
Note: Best practise is to keep port scan detection enabled.
IP Flood Detection If IP flood detection is enabled, the cable data gateway blocks devices
(usually malicious devices) that are attempting to flood devices. If it is
disabled, flooding is not blocked.
Note: Best practise is to keep IP flood detection enabled.
Web Features
These features are disabled by default. To enable a feature, select the associated Enable check box.
Filter Proxy If the proxy filter is enabled, the HTTP proxy is blocked and you can
connect to the web only directly. That is, you cannot connect to the web
through a proxy server. If the proxy filter is disabled, you can connect to the
web through a proxy server.
Filter Cookies If the cookie filter is enabled, websites cannot deposit cookies. If it is
disabled, websites can deposit cookies.
Filter Java Applets If the Java applets filter is enabled, websites cannot use Java applets. If it is
disabled, websites can use Java applets.
Filter ActiveX If the ActiveX filter is enabled, websites cannot use ActiveX. If it is disabled,
websites can use ActiveX.
Filter Popup Windows If the pop-up filter is enabled, websites cannot use pop-up screens. If it is
disabled, websites can use pop-up screens.
Block Fragmented IP
Packets
If the fragmented IP packet filter is enabled, you can download only
complete (unfragmented) IP packets. If it is disabled, you can download
fragmented IP packets.
Feature Description