Setting DescriptionProtocol number Specify a protocol number directly (0–255)Specify a protocol type (ICMP, TCP, UDP, TCP&UDP)Originating IP address By specifying a subnet, you can apply the filter to a range ofaddresses.Destination IP address By specifying a subnet, you can apply the filter to a range ofaddresses.TCP/UDP originating port You can specify a range.TCP/UDP destination port You can specify a range.Direction LAN->WAN, WAN->LANOperation Allow/DenyLog Record in log or do not record in logPC Programming Manual References27.8 Router Configuration—Firewall—[2-2] Packet Filtering8.6.12 Firewall—Stateful Packet InspectionDescriptionStateful Packet Inspection (SPI) is a feature where the firewall inspects the contents of a packet and determinesdynamically whether to allow or deny the packet. If SPI is enabled, packets determined to be"INVALID" (packets that do not apply to any other state) are denied. On this PBX, SPI applies to both incoming(WAN ® LAN) and outgoing (LAN ® WAN).Using the following "TCP flag state" as the detection criteria, packets that do not match the TCP state changeare discarded by the SPI feature.This feature remembers each transmission state, and by predicting the next packet that will arrive, it can detectunauthorized access and discard packets accordingly.PC Programming Manual References27.7 Router Configuration—Firewall—[2-1] One Touch Security8.6.13 Firewall—DoS ProtectionDescriptionThe DoS Protection feature protects the system against DoS (Denial of Service) attacks. Security rules forprotecting against port scans and DoS attacks can be set with one touch.You can enable and disable DoS Protection.Conditions• For details about whether the DoS Protection feature is necessary, consult the network administrator.Document Version 2016-03 Installation Manual 3618.6.13 Firewall—DoS Protection
