This is an old revision of the document!


Security Settings

Security Profiles

The Internet Gate has three freely configurable security profiles:

  • Hi - protect LAN from WAN, limit outgoing traffic to web surf and e-mail
  • Lo - same protection of LAN from WAN as in Hi, but allow all outgoing traffic
  • AC - by default same protection as Hi

Security page in rel 5.30

Even though all three profiles are freely configurable you should leave profiles Hi and Lo unchanged and apply your changes to profile AC.

With three security profiles you can easily and instantly change firewall security level using the ALT button on the front of the unit, if you for instance want to temporarily open up firewall to allow through a certain program or game.

You can change active profile on the Security Settings page, the main menu or using the ALT button.

You can edit any security profile by clicking on it.

:?: Most problems involving traffic not getting through the firewall can be solved by changing to security profile Lo.

:!: Even though security profile Lo is called “low” it still offers the same security as Hi against incoming packets from the Internet. It is only the rules for packets going out to the Internet that have less limitations.

Configure Flows

The firewall in Internet Gate uses flows to be able to stateful inspect data streams. Each new data stream to be inspected uses one flow to track what state the data stream is in. Once the data stream is closed the flow is returned for new usage (after a small timeout).

In use shows how many flows are used by the firewall right now (or actually: when you opened the web page - to see the up-to-date value, click refresh on your browser).

Peak shows the absolute highest number of flows ever used since Internet Gate was turned on.

Total is the number of flows reserved, available to be used by the firewall. Default value is 4000, allowed values are between 500 and 9000. If no Total value is visible (field empty) it means the default value of 4000.

If the Peak value approaches the Total value you are recommended to increase the Total value, click on Apply, save permanently and reboot.

Total is recommended to be set to at least 1000 more than Peak. For instance if Peak is 3600 and Total is 4000 you are recommended to increase Total to for example 5000.

However, flows consume memory and resources in your Internet Gate. Having reserved too many flows may reduce overall performance.

web_gui/security_page.1290157826.txt.gz · Last modified: 2010/11/19 10:10 by tibor
CC Attribution-Noncommercial-Share Alike 3.0 Unported
www.chimeric.de Valid CSS Driven by DokuWiki do yourself a favour and use a real browser - get firefox!! Recent changes RSS feed Valid XHTML 1.0