VigorPro5300 Series User’s Guide
78
z
Call Filter -
When there is no existing Internet connection,
Call Filter
is applied to all
traffic, all of which should be outgoing. It will check packets according to the filter
rules. If legal, the packet will pass. Then the router shall
“initiate a call”
to build the
Internet connection and send the packet to Internet.
z
Data Filter
- When there is an existing Internet connection,
Data Filter
is applied to
incoming and outgoing traffic. It will check packets according to the filter rules. If legal,
the packet will pass the router.
The following illustrations are flow charts explaining how router will treat incoming traffic
and outgoing traffic respectively.
S
S
t
t
a
a
t
t
e
e
f
f
u
u
l
l
P
P
a
a
c
c
k
k
e
e
t
t
I
I
n
n
s
s
p
p
e
e
c
c
t
t
i
i
o
o
n
n
(
(
S
S
P
P
I
I
)
)
Stateful inspection is a firewall architecture that works at the network layer. Unlike legacy
static packet filtering, which examines a packet based on the information in its header,
stateful inspection builds up a state machine to track each connection traversing all interfaces
of the firewall and makes sure they are valid. The stateful firewall of Vigor router not just
examine the header information also monitor the state of the connection.
D
D
e
e
n
n
i
i
a
a
l
l
o
o
f
f
S
S
e
e
r
r
v
v
i
i
c
c
e
e
(
(
D
D
o
o
S
S
)
)
D
D
e
e
f
f
e
e
n
n
s
s
e
e
The
DoS Defense
functionality helps you to detect and mitigate the DoS attack. The attacks
are usually categorized into two types, the flooding-type attacks and the vulnerability attacks.
The flooding-type attacks will attempt to exhaust all your system's resource while the
Summary of Contents for VigorPro 5300
Page 8: ......
Page 22: ...VigorPro5300 Series User s Guide 14...
Page 34: ...VigorPro5300 Series User s Guide 26 This page is left blank...
Page 98: ...VigorPro5300 Series User s Guide 90...
Page 221: ...VigorPro5300 Series User s Guide 213...
Page 258: ...VigorPro5300 Series User s Guide 250 13 Click Close to exit...
