Make rational use of the functions of the mercury route Firewall

Make rational use of the mercury route firewall function to defend against various viruses and attacks on the network. The firewall of the router can effectively protect network security. However, when setting the firewall, pay attention to the following, you cannot set this level. This will prevent legal users from asking questions. Here we will take the mercury router as an example. Netizens can also view the contents of this site on the jinke router. Www.2cto.com
1. When a LAN is set up in a company, internal users report that data cannot be called or modified during some application operations, it is found that the network can be accessed and the data can be modified only from the firewall, while the Internet users are no problem in querying various user information. Www.2cto.com 2. The company's network structure is complex, including the business private network, Intranet network and Internet network. The two website servers are interconnected, and the business data between them is updated at the same time, internet users can only browse and query data, and can perform online reporting and other services. They cannot modify data, and have the right to access and report Intranet users and to modify data, the installed firewall filters out IP packets, allowing only valid IP users to access. 3. We can see from the above that the fault is obviously closely related to the firewall system. After checking, we can find the Web servers of Internet users, but not the Web servers of Intranet, removing the firewall, you can find the server and check whether the firewall parameters have been changed after the firewall is installed. The ICMP Type PING test shows that the Web server exists, it indicates that the Web server is on the network and can work normally. 4. At the same time, use the network terminal One Touch to select the IP address of the Web server as the target address to send traffic, start the protocol analysis function of the network tester, and find that the data frame points to the firewall without any response: no response data frame appears. Set the IP address of the network assistant One Touch to an existing IP address of the authorized user, and then send traffic to the Web server, at this time, the network tester can observe that the firewall has a response data frame. This indicates that the firewall has a response to the authorized users of valid IP addresses, but the returned data frame is a message from an invalid user. 5. The above phenomena indicate that the firewall has powerful functions. In addition to filtering IP addresses, it can also filter the MAC addresses of various sites, to prevent unauthorized users with valid IP addresses from entering the system, we only need to disable the MAC address filtering function and the system will return to normal. After reading the above example, we should not find out that sometimes we must pay attention to the details when setting the firewall, so as to avoid some inexplicable faults and cause great losses.