Firewall

The firewall determines which Internet traffic is allowed to pass between the router and connected devices and protects your connected devices from malicious incoming traffic from the Internet. The firewall cannot be turned off.

Use the Firewall tab to adjust the general security level of the firewall, designate a specific device to receive all traffic, and set up specific firewall rules.

Security Level

You can select from three general security levels to block traffic into and through the FG2000-3 device. The default Security Level is Medium.

Low — allows inbound traffic to services with open ports matching the inbound request port. Outbound traffic is allowed to any service.
Medium — Rejects inbound traffic. Outbound traffic is allowed for any service.
High — Rejects inbound traffic. Outbound traffic is allowed only for TELNET (port 23), FTP (port 21), HTTP (port 21), HTTP (port 80), HTTPS (port 443), SMTP (port 25), DNS (port 53), POP3 (port 110), and IMAP (port 143).

DMZ

DMZ allows the connected device specified as the DMZ IP address (the DMZ destination) to receive all traffic that would otherwise be blocked by the firewall.

NOTE: Allowing DMZ may assist some troublesome network applications to function properly, but the DMZ device should have its own firewall to protect itself against malicious traffic.

Allow DMZ: Check this box to allow DMZ.

Destination IP address: Enter the IP address of the connected device you wish to become the DMZ device (the DMZ destination). NOTE: You can check the IP address of each connected device on the Connected Devices screen.

Click Save changes.

Firewall Rules

You can define one or more specific rules for the firewall to follow. Use the fields to set up a rule, and click Add New Rule. New rules are added to the bottom of the list. Use Up and Down to reposition rules on the list.

Note: For Src. IP and Dest. IP , enter a specific IP address or the keyword any.

Click Save changes.