SBG6580 (v8.5.x): Firewall Setup

The SBG6580 Firewall has various settings related to blocking or exclusively allowing different types of data through the Gateway from the WAN to the LAN.  Even if specific web content is allowed on the computer level, it can be blocked on the router / gateway level using the firewall options.  By default, the Firewall is set at the Low level.  This document describes how to configure the SBG6580 to filter specific types of web content.

To Setup Firewall

1. Launch a web browser, such as Internet Explorer, Firefox, or Safari.  Enter http://192.168.0.1 into the address box, and press the Enter key.  The Login page appears.
   
   NOTE: By default the LAN IP address is 192.168.0.1.  If the default address has been changed, enter the custom address in the address box.
    
2. On the Login page:
   a.   Enter admin in the Username field.
   b.   Enter motorola in the Password field.
   c.   Click the Login button.  The Home page appears.
   
   NOTE: On firmware version 8.9.0.4 and later, the default admin password is required to be changed.  The Change User Password prompt will immediately appear after logging into the Web manager with the default admin password.  For assistance with the Change User Password screen, please refer to article # 18055 - SBG6580 (v.8.9.x): Prompt to Change Default Admin Login.
    
   
    
3. Move the mouse-cursor over the Firewall tab and select the Protection Level sub-link.  The Firewall - Protection Level page appears.
4. On the Firewall - Protection Level page:
   a.   Firewall Protection Setting - Click the drop-down tab and select the desired level of protection.
   
   NOTE: The following are descriptions for each option:
   • Firewall Protection - Set the Stateful Packet Inspection (SPI) firewall features to Off/Low/Medium/High.
   • • Off - No security, highest risk.
     • Low - Default setting.  Minimum security, higher risk.
     • Medium - Common configuration, modest risk.
     • High - Safest configuration, highest security.
       
       Recommended: It is highly recommend to enable the firewall.
        
   • Block Fragmented IP Packets - Prevents all fragmented IP Packets from passing through the firewall.
   • Port Scan Detection - Detects and blocks port scan activity on both the WAN and LAN.
   • IP Flood Detection - Detects and blocks packet floods originating on both the WAN and LAN.
   •     
   b.   Click the Apply button. 
   
   NOTE:  A restart is not required, as the settings will immediately go into effect.