Firewall. 4.1. The performance of the Firewall shall not be degraded with 100% Internet bandwidth utilization.
4.2. Network Address Translation (NAT) is required.
4.3. Access Control Policy is required.
4.4. The configuration settings of the appliance shall be allowed to export to files for backup and restore for rapid recovery and shall control all incoming and outgoing Internet traffic, serving as the sole entry and exit point between the Internet and the WLANs in all locations.
4.5. The configuration settings of the appliance shall support blocking specific network ports, including ports of Transmission Control Protocol (TCP) and User Datagram Protocol (UDP). Blocking denial of service (DoS) attacks and malformed packet attacks shall also be configured.
4.6. The firewall policy should be applied to control network traffic such that public users should be prohibited to access the internal network segments of the School.
4.7. The router policy should be applied to shape the guest user VLAN traffic to designated bandwidth requested by School to preserve the e-learning in class which is the primary purpose of School Wi-Fi.
