Draytek Firewall Question

[OnlineInAustria]

I've recently bought a Draytek 2925 router and am in the process of setting it up. In the firewall section of the control panel, I don't see any of the usual options as far as security. In my old router, there is the option to select from "Low Security" "Typical Security" "High Security" "Lockdown". Most other routers I've had over the years have had similar options.

On the Draytek 2925, in the control panel under the heading "Firewall" there are two options related to filtering inbound and outbound traffic; both options are checked (active). Further down the page there are three checkbox options:

- Always pass inbound fragmented large packets (required for certain games and streaming)
- Enable Strict Security Firewall
- Block connections initiated from WAN

I've found no concrete information on the Draytek website about the policies of the "Strict Security Firewall", and so am concerned about exactly where I stand with this router.

Do I have to configure a bunch of security rules manually?
Is the router basically going to let any and everything through unless I tell it not to?

 

[AndreiV]

The firewall should protect out of the box, you adjust the filter settings / create rules on Firewall > Filter Setup , click on Set number and page opens.

You should set up the DoS Defense settings.


There is a live webpage demo available so you can play with settings before you setup your router.

>>> http://www.draytek.co.uk/support/live-web-demo <<<

 

[OnlineInAustria]

AndreiV, thanks so much for your quick reply. I will be sure to enable the DOS defense as you suggested.

I'm by no means a networking professional, so please bear with me if these questions are not particularly technically astute:

Is the purpose of the filter settings more or less to "tweak" the protection offered by the default settings of the firewall?

I realize the following question can't be answered specifically, but nonetheless here goes: On a typical consumer router, one has the option to select "Typical Security" "High Security" etc. Could you speculate on what the difference between such settings might be, and how I might be able to achieve something like "High Security" on the Draytek 2925? Are there any filters that you would recommend?

 

[AndreiV]

Filter settings can be used to open ports /allow services through the firewall, unless you have a reason to change these the default settings are probably the best.

High Security would equate to "Strict Security " on the Draytek.

 

[OnlineInAustria]

Thanks AndreiV for the clarification!