SCR50AXE [Secure Cloud-managed Router] - Security Functions [Threat & Traffic Management]

This article will show you what will be included in the security (Elite Pack) functions for your SCR50AX device.
This article encompasses information on Elite Pack License versus Subscription Free, Threat Management, including its potential benefits, instructions on configuring Threat Management, as well as Traffic Management, with detailed guidance on configuring Application Management Rules and implementing the Content Filter (which necessitates Elite Pack).

Disclaimer! This article offers a general overview of the series and may not apply uniformly to every model,  software/firmware version. Prior to purchasing or using the device, please consult the
model/version-specific documentation or reach out to technical support for accurate information.

Elite Pack License vs. Subscription Free

In the Elite Pack license, you'll get access to real-time threat intelligence from Trellix. This means that the device is checking in real-time towards the cloud database for ransomware, malware, ads, phishing attempts, etc. instead of the local database which is updated every 2 days if you have the free version. This affects the throughput of your device but you will get a more secure network. You will also get the DNS Content Filter (Web filtering) which can block websites based on categories that might be harmful, or inappropriate for minors. 

Threat Management

Threat Management includes:

• Ransomware / Malware protection
• Intrusion blocker
• Dark Web blocker
• Stop mail fraud & phishing
• Block ads
• Block VPN Proxy

How Threat Management could Help you

• Blocks access to websites that are known to contain malware
• Prevents access from public hosts known for committing cyberattacks/cybercrimes
• Users can disable specific threats when access to essential services are restricted by threat management
• Allowed/blocked domain will be synced with Traffic Management Allowed/blocked domain

Configure Threat Management

Navigate to Site-wide -> Configure -> Security router -> Threat management

Tick the boxes of the threat protection services that you want to activate.

Custom Allow/Block Domain

Note! Your allow/block domain list is the same for Threat management and Content filter so you don't need to configure it twice.

Here you may allow domains that are a false-positive and which websites you know are safe. You can also block domains which you don't want to be exposed to.

Traffic Management

Application management is blocking applications on a Layer 7 level and is disabled by default. Enable Application identification by clicking the "Enable" button so it turns green. Enable the rule by ticking the "Enabled" 

Configure Application Management Rule

You can choose the client which you want to select to block applications for. 

Configure the Custom Allow/Block Domain 

Here you may allow domains that are a false-positive and which websites you know are safe. You can also block domains which you don't want to be exposed to.

Configure Application Management

Allowed/blocked domain will be synced with Threat Management Allowed/blocked domain Provides Parental Control and Productivity templates

Content Filter (Require Elite Pack)

Content filter applies blocked categories per individual clients, and can be used as a parental control. Content Filter requires an Elite Pack license to function.

Configure Content Filter

You may choose the users (clients) that you want the content filter to apply to. You can only choose individual clients, and not subnets here.