3Com OfficeConnect Wireless Cable/DSL Gateway reviewed



Firewall Features

The OfficeConnect uses a NAT + SPI firewall and supports one DMZ host. Static inbound port forwarding (Virtual Servers - Figure 4) can be done with single ports, port ranges or combinations of the two, but you can't specify TCP or UDP protocols.

OfficeConnect 11g: Virtual Servers

Figure 4: Virtual Servers

I also found that "Loopback" isn't supported for virtual servers.

The Special Applications feature (Figure 5) also supports single ports, port ranges and combinations, plus the ability to specify a single outbound trigger port. Curiously, Virtual Servers setups can't be temporarily disabled (you must delete them to close the port(s), but Special Applications can.

OfficeConnect 11g: Special applications

Figure 5: Special Applications

Universal Plug and Play (UPnP) is supported, but disabled by default (the way I like to see it). If you do enable it, you have no control over its NAT Traversal feature and ports opened by it aren't shown in the router's admin interface.

Control over outbound Internet access (port filtering) is provided by the PC Privileges feature.

OfficeConnect 11g: PC Privileges

Figure 6: PC Privileges

Figure 6 gives you a flavor for the interface, and Figure 7 shows the screen for adding a privilege. Note that privileges can be defined only for individual IP addresses and all IP addresses other than those with specific privileges set.

OfficeConnect 11g: Adding a PC Privilege

Figure 7: Adding a PC Privilege

Note also that none of the firewall features is schedulable, a handy feature found on many competitive products.

The Status page provides a nice summary of many of the router's settings, and contains a button for doing a release / renew on the WAN connection.

OfficeConnect 11g: Logging

Figure 8: Logging

Figure 8 gives you a flavor for what the Log page contains. It doesn't include website traffic logging, but does show wireless client DHCP leases. There are no emailed alerts, but, according to the User Guide, the front panel Alert light will be lit if the router "has detected a hacker attack from the Internet and has prevented it from harming your network".