SBG6782 (v8.4.x): Firewall Setup

The SBG6782 Firewall has various settings related to blocking or exclusively allowing different types of data through the Gateway from the WAN to the LAN.  Even if specific web content is allowed on the computer level, it can be blocked on the router/gateway level using the firewall options.  By default, the Firewall is set at the Low level.  This document describes how to configure the SBG6782 to filter specific types of web content.

To Setup Firewall

1. Launch a Firefox or Safari browser.  Enter http://192.168.0.1 into the address box, and press the Enter key.  
   
   NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager.  The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH.  The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser.  Safari browsers on Apple PC and mobile devices are not impacted.  The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1.  For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
    
2. A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager.  There is no risk in proceeding to the Web Manager.  For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
    
3. On the Login page, enter admin or a customized username in the Username field.
    
4. Enter motorola or a customized password in the Password field.
   
   NOTE 1: On later versions of the SBG6782-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label.  For assistance with Web Manager Access, refer to article # 18755 – SBG6782-AC: Web Manager Access.
   
   
    
   NOTE 2:  For units that have been leased or purchased by Shaw Communications, the username is cusadmin, and the password is the Customer S/N (Serial Number), located on a white sticker on the bottom of the unit.
   
   NOTE 3:  If the unit has been leased or purchased by Time Warner Cable, and the admin username and motorola
   password does not allow access to the GUI, please contact Time Warner Cable for assistance.
    
5. Click the Login button.  The Home page will appear.
   
   
    
6. Move the mouse cursor over the Firewall tab and select the Protection Level sub-link.  The Firewall - Protection Level page will appear.
   
   
    
7. On the Firewall - Protection Level page:
   a.   Firewall Protection Setting - Click the drop-down tab and select the desired level of protection.
   
   NOTE: The following are descriptions for each option:
   • Firewall Protection - Set the Stateful Packet Inspection (SPI) firewall features to Off/Low/Medium/High.
   • • Off - No security, highest risk.
     • Low - Default setting.  Minimum security, higher risk.
     • Medium - Common configuration, modest risk.
     • High - Safest configuration, highest security.
       
       Recommended: It is highly recommended to enable the firewall.
        
   • Block Fragmented IP Packets - Prevents all fragmented IP Packets from passing through the firewall.
   • Port Scan Detection - Detects and blocks port scan activity on both the WAN and LAN.
   • IP Flood Detection - Detects and blocks packet floods originating on both the WAN and LAN.
   •     
   b.   Click the Apply button. 
   
   NOTE:  A restart is not required, as the settings will immediately go into effect.