3. Firewall Features

The 402 uses a NAT firewall and supports one DMZ host per WAN port. You can choose from 12 pre-defined Virtual Servers (Port Forwarding) for common services, define your own - specifying protocol, WAN and LAN port ranges and WAN interface, or use the Special Application feature for triggered port mappings. You can edit port forwarding settings and also temporarily disable them. Universal Plug and Play (UPnP) is not supported.

The Access Filter feature lets you create four groups of IP addresses - complete with DHCP reservations and ability to bind individual clients to specific PPPoE sessions - and block all Internet access, or choose from 12 common and 10 user-defined services. You can also block up to 20 URLs, IP addresses, or keywords for each of the four user-defined groups. None of these features is day / date schedulable.

There's no logging, although Xincom plans to add this within a few months, but there's an Email alert feature that's supposed to send mail when a WAN port goes down. I never heard a peep from the router, however, even though I connected and disconnected WAN ports many times during testing.