QX50/QX200/QX2000; (SW Version 6.0.x) 119
QX50/QX200/QX2000 Manual II: Administrator’s Guide
Firewall
The Firewall Configuration page allows setting up a firewall, configuring the security level and enabling the NAT and IDS services of QX IP PBX.
A Firewall is a security service configured by the QX IP PBX administrator based on various criteria. The firewall allows or blocks traffic based on policies,
services and/or IP addresses. The firewall has several levels of security policies (low, medium or high). The administrator may add additional service-
based rules. Filtering rules will take effect only if the Firewall has been enabled and are independent from the selected firewall security level.
NAT (Network Address Translation) is used to allow QX IP PBX LAN members to connect to the Internet using QX IP PBX's WAN IP address. The QX IP
PBX/NAT also handles forwarding incoming packets from the WAN to the PCs or devices on QX IP PBX’s LAN.
The IDS (Intrusion Detection System) is a type of firewall, but together with deleting dangerous packets or packets containing intrusion attacks, IDS
generates a log file with information about these dropped packets and the senders responsible for those packets. The log can be viewed on the
IDS Log
page and notifications about them can be sent to the user in various ways such as e-mail, flashing LED and display notification.
Firewall and NAT
The Firewall Configuration page offers the following components:
The Enable IDS checkbox selection enables the Intrusion Detection System. The Enable NAT checkbox selection enables Network Address Translation.
Enable Firewall
checkbox selection enables the firewall
security service. The firewall security level has to be selected,
otherwise the firewall cannot be enabled.
The Firewall Security radio buttons are the following:
• Low Security - Everything that is not explicitly forbidden will
be allowed. This security level doesn't block anything by
default. It is recommended if the device is already located
behind another firewall or if every filter has been configured
correctly.
• Medium Security - Traffic originating from the LAN side may
pass and traffic from the WAN side will be blocked by default.
This is the recommended security level.
• High Security - Everything that is not explicitly allowed will
be blocked, including traffic from the LAN side.
Fig.II- 178: Firewall Settings page
Advanced Firewall Settings
Advanced Firewall Settings
are used to deny Ping and
Portscanning operations addressed towards the device. With these
features enabled, QX IP PBX will answer with inscrutable messages
to the Ping and Portscanning operations.
Please Note: Operations are available only when the firewall is
enabled from the
Firewall and NAT page.
This page offers the following components:
The Ping Stealth checkbox selection prohibits a Ping operation
toward QX IP PBX from its WAN.
The Fool Portscanner checkbox (available only for QX50/QX200)
selection prohibits QX IP PBX portscanning from its WAN. As a
reply to a Portscanning operation, "network unreachable" or "host
unreachable" feedback messages will be sent.
Fig.II- 179: Advanced Firewall Settings page
IDS Log
The IDS logging page (available only for QX50/QX200) contains information about dropped packets and the senders responsible for those packets. IDS
discards dangerous packets or packets including intrusion attacks. It generates a table with the IDS log report. The administrator can be notified about
newly logged entries in various ways (mail, display notification, Flashing LED, sms) depending on the settings in the Event Settings page. To make an IDS
log reporting table, IDS needs to be enabled on the
Firewall and NAT page.
To Next Page
Loading...
General
