DirecWay DW4000 Specifications Page 35

  • Download
  • Add to my manuals
  • Print
  • Page
    / 49
  • Table of contents
  • BOOKMARKS
  • Rated. / 5. Based on customer reviews
Page view 34
28
The Direcway 6000 unit had a firewall as part of the built in hardware function. You used
to be able to modify the firewall by going to :
http://192.168.0.1/fs/dynaform/firewallconfig.html
We had recommended users make use of this firewall in their residential networks. It
blocked port attacks but did not block storms or performed statefull packet inspections.
As it turns out the screens had been there but the underlying functionality was never
completed. A recent DW6000 software upgrade has removed this function from user
modification all together.
It is unknown but it appears that with the DW7000 some attempts may be made to fulfill
the firewall capabilities of this NTI.
For the consumer version we today disable the software firewall on the workstation. For
the Professional Version a hardware firewall should be placed between the DWx000 and
the LAN on the users intranet. The problem is that for a hardware firewall to function it
generally must control the DHCP and NAT functions to perform the statefull packet
inspections and protect the underlying network. The residential service plan for a
DWx000 does not allow the user to modify the base function of the DWx000 to turn off
DHCP and NAT. A user must subscribe to the Professional Direcway service to get a
static IP address causing the DWx000 to be configured with NAT off. Once this is done
then the DWx000 functions like a “cable modem” or “DSL modem” network termination
interface and allows the consumer to purchase a separate router with the firewall, DHCP,
and NAT function built in.
NOTE: Hughes has signed an agreement with McAfee software for their firewall and
virus protection. We still maintain that a software firewall is worthless, especially since
there may be multiple computers on the LAN and each one would have to have firewalls
installed and maintained. We realize that firewalls are of limited security viability and are
only a single step in an overall security plan. If viruses plague you that much then maybe
you should investigate a migration from Windows or Microsoft versioned software to a
UNIX variant such as the Macintosh.
Page view 34
1 2 ... 30 31 32 33 34 35 36 37 38 39 40 ... 48 49

Comments to this Manuals

No comments