Basic Setup: WAN Settings

LAN Settings

DMZ Settings

Step 2. Inbound / Outbound Connecting

NAT:

Network Address Translation Modes:
1. None: The InstantBlock is in routing mode without performing any address translation.
2. Basic: The InstantBlock automatically performs Many-to-One NAT for all LAN/DMZ subnets.
3. Full Feature: The InstantBlock can be manually configured with Many-to-One, and Many-to-Many, One-to-One, and bidirectional One-to-One rules to do policy-based NAT.

NAT rules

Virtual Servers:

Routing:

Static Route

Policy Route

Step 3. Advanced Settings

L4 Firewall: The Stateful Packet Inspection (SPI) firewall defines access control rules for traffic running across the interfaces.

IM Management: This function can manage the usage of Instant Messengers like MSN, YAHOO, AOL, ICQ and GOOGLE TALK.

IM Users

IM Services

L7 Firewall: The L7 Firewall is designed to manage those applications supported by InstantBlock. Whatever the TCP protocol or a proxy server (such as HTTP/SOCKS) may be used by a certain application to attempt to deceive administrator, it will be recognized by InstantBlock.

IPS: InstantBlock IPS provides you with a quite complete solution to protect your network lest being maliciously attacked.

Signature-based IPS

Anomaly-based IPS

Custom-based IPS

Content Filter

Co-Defense

Co-Defense

VPN:

IPSec

PPTP

L2TP

Bandwidth Mgt. : The bandwidth manager protects mission critical traffic when it is enabled.
Step 1. Enable the bandwidth management system.
Step 2. Edit actions to be imposed on each link.
Step 3. Choose the preferred action during editing firewall rules.

IP MAC Binding: IP/MAC binding protects the InstantBlock and your network from IP spoofing attacks. IP spoofing attempts to use the IP address of a trusted computer to connect to or through the InstantBlock from a different computer. The IP address of a computer can easily be changed to a trusted address, but MAC addresses are added to Ethernet cards at the factory and cannot easily be changed.

Load Balancer: Users may want to subscribe multiple WAN links and make their outbound traffic load-balanced among the WAN links. InstantBlock now supports outbound WAN load balancing. Inbound load balancing will be supported in a very near future.

High Availability: Suppose your company is afraid that the firewall may be crashed someday, so it needs a backup system to let the network connection continually. High Availability makes it possible to let the network in your company operate smoothly.

Step 4. Logging

Log Config:

Syslog Server: It will let InstantBlock send logs to the Syslog Server specified in the Syslog Server IP Address field.

Mail Logs: Logs will be generated and can be sent via e-mail by configuring the mail server and the e-mail address. You can also specify how frequently you want to receive the logs.

Log Filter

System Logs