连上因特网 : WAN 设定

LAN 设定

DMZ 设定

Step 2. 对内 / 对外联机设定

透通 / 路由 / 转址模式 (NAT) :

Network Address Translation Modes:
1. None: The InstantBlock is in routing mode without performing any address translation.
2. Basic: The InstantBlock automatically performs Many-to-One NAT for all LAN/DMZ subnets.
3. Full Feature: The InstantBlock can be manually configured with Many-to-One, and Many-to-Many, One-to-One, and bidirectional One-to-One rules to do policy-based NAT.

NAT rules

Virtual Servers:

Routing:

Static Route

Policy Route

Step 3. 进阶设定

L4 防火墙 : The Stateful Packet Inspection (SPI) firewall defines access control rules for traffic running across the interfaces.

实时通讯软件管理 : This function can manage the usage of Instant Messengers like MSN, YAHOO, AOL, ICQ and GOOGLE TALK.

IM Users

IM Services

L7 防火墙 : The L7 Firewall is designed to manage those applications supported by InstantBlock. Whatever the TCP protocol or a proxy server (such as HTTP/SOCKS) may be used by a certain application to attempt to deceive administrator, it will be recognized by InstantBlock.

入侵防御系统 (IPS) : InstantBlock IPS provides you with a quite complete solution to protect your network lest being maliciously attacked.

Signature-based IPS

Anomaly-based IPS

Custom-based IPS

网页内容过滤

联合防御系统

虚拟私有网络 :

IPSec

PPTP

L2TP

频宽管理 : The bandwidth manager protects mission critical traffic when it is enabled.
Step 1. Enable the bandwidth management system.
Step 2. Edit actions to be imposed on each link.
Step 3. Choose the preferred action during editing firewall rules.

IP / MAC 绑定 : IP/MAC binding protects the InstantBlock and your network from IP spoofing attacks. IP spoofing attempts to use the IP address of a trusted computer to connect to or through the InstantBlock from a different computer. The IP address of a computer can easily be changed to a trusted address, but MAC addresses are added to Ethernet cards at the factory and cannot easily be changed.

对外联机负载平衡 : Users may want to subscribe multiple WAN links and make their outbound traffic load-balanced among the WAN links. InstantBlock now supports outbound WAN load balancing. Inbound load balancing will be supported in a very near future.

高可用性 (双机备源) : Suppose your company is afraid that the firewall may be crashed someday, so it needs a backup system to let the network connection continually. High Availability makes it possible to let the network in your company operate smoothly.

Step 4. Logging

Log Config:

Syslog Server: It will let InstantBlock send logs to the Syslog Server specified in the Syslog Server IP Address field.

Mail Logs: Logs will be generated and can be sent via e-mail by configuring the mail server and the e-mail address. You can also specify how frequently you want to receive the logs.

Log Filter

System Logs