SBG6900-AC (v1.5.x): Firewall Setup

The SBG6900-AC Firewall has various settings related to blocking or exclusively allowing different types of data through the Gateway from the WAN to the LAN.  Even if specific web content is allowed on the computer level, it can be blocked on the router/gateway level using the firewall options.  By default, the Firewall is set at the Low level, and is recommended that it be enabled.  This document describes how to configure the SBG6900-AC to filter specific types of web content.

1. Launch a Firefox or Safari browser.  Enter http://192.168.0.1 into the address box, and press the Enter key.  
   
   NOTE: A browser message on Chrome, Edge, Firefox, and Opera, may appear when accessing the Web Manager.  The message includes 192.168.01 uses an unsupported protocol and ERR_SSL_VERSION_OR_CIPHER_MISMATCH.  The Web Manager uses an earlier version of the TLS protocol and does not match the version allowed by the web browser.  Safari browsers on Apple PC and mobile devices are not impacted.  The workaround to access the Web Manager with a PC is to use the Firefox browser and set the TLS version to 1.  For workaround instructions refer to article # 19435 - 192.168.0.1 uses an unsupported protocol.
    
2. A security or private risk alert may appear on the web browser advising users to proceed with caution when accessing the Web Manager.  There is no risk in proceeding to the Web Manager.  For instructions to bypass the alert screen, refer to article # 18181 - Alert Message for Web Manager Access.
    
3. On the Login page, enter admin or a customized username in the Username field.
    
4. Enter password or a customized password in the Password field.
   
   NOTE: On later versions of the SBG6900-AC, the Wi-Fi Security Key is used as the default admin password printed on the bottom white label.  For assistance with Web Manager Access, refer to article # 18753 – SBG6900-AC: Web Manager Access.
   
   
    
5. Click the Login button.  The Home page will appear.
   
   
    
6. Move the mouse cursor over Firewall on the top menu, and click the Protection Level link from the drop-down submenu.  The Firewall - Protection Level page will appear.
   
   
    
7. On the Firewall - Protection Level page, Firewall Protection Setting - Click the drop-down tab and select the desired level of protection.
   
   NOTE: The following are descriptions for each option:
   • Firewall Protection - Set the Stateful Packet Inspection (SPI) firewall features to Off/Low/Medium/High.
     • ​Off - No security, highest risk.
     • Low - Default setting.  Minimum security, higher risk.
     • Medium - Common configuration, modest risk.
     • High - Safest configuration, highest security.
   • Block Fragmented IP Packets - Prevents all fragmented IP Packets from passing through the firewall.
   • Port Scan Detection - Detects and blocks port scan activity on both the WAN and LAN.
   • IP Flood Detection - Detects and blocks packet floods originating on both the WAN and LAN.    
8. Click the Apply button. 
   
   NOTE:  A restart is not required, as the settings will immediately go into effect.