Security

OpenRG's gateway security suite includes comprehensive and robust security services: Stateful Packet Inspection Firewall, user authentication protocols and password protection mechanisms. These features together allow users to connect their computers to the Internet and simultaneously be protected from the security threats of the Internet.

The firewall, RG-FW^TM, the cornerstone of your gateway's security suite, has been exclusively tailored to the needs of the residential/office user and has been pre-configured to provide optimum security (see figure 6.1).

Figure 6.1: OpenRG's Firewall in Action

OpenRG's firewall provides both the security and flexibility that home and office users seek. It provides a managed, professional level of network security while enabling the safe use of interactive applications, such as Internet gaming and video-conferencing.

Additional features, including surfing restrictions and access control, can also be easily configured locally by the user through a user-friendly Web-based interface, or remotely by a service provider.

The OpenRG firewall supports advanced filtering, designed to allow comprehensive control over the firewall's behavior. You can define specific input and output rules, control the order of logically similar sets of rules and make a distinction between rules that apply to WAN and LAN network devices.

The Web-based management screens in the Security section feature the following:

• The 'General' screen allows you to choose the security level for the firewall (see section 6.1)
• The 'Access Control' screen can be used to restrict access from the home network to the Internet (see section 6.2).
• The 'Local Servers' screen can be used to enable access from the Internet to specified services provided by computers in the home network and special Internet applications (see section 6.3). 'Local Servers' is sometimes referred to as 'Port Forwarding'.
• The 'DMZ Host' screen allows you to configure a LAN host to receive all traffic arriving at your gateway, which does not belong to a known session (see section 6.4).
• The 'Port Triggering' screen allows you to define port triggering entries, to dynamically open the firewall for some protocols or ports. (see section 6.5).
• The 'Remote Administration' screen can be used to enable remote configuration of OpenRG from any Internet-accessible computer (see section 6.6).
• The 'IP/Hostname Filtering' allows you to block LAN access to a certain host or web site on the Internet. (see section 6.7).
• 'Advanced Filtering' allows you to implicitly control the firewall setting and rules (see section 6.8).
• 'Security Log' allows you to view and configure the firewall Log (see section 6.9)