93 of 124  Construction of Giresun Wastewater Treatment Plant  Tender Dossier Volume 3 Employer’s Requirements  Section 8: Electrical Works  Manageable ethernet switches should have following approvals.  UL – 508 and 1604   CSA – 22.2 No. 142  CE Mark per EN61131-2   FM Class 1, Div 2   UL1604 Class 1 Div2   C-Tick for Australia   Substation IEC 61850 EMC levels tested   Maritime approval (GL)  8.20 Network Firewall (firewall)  8.20.1 General  8.20.2 Properties of Industrial Firewall  8_Vol3_d4.3_Section 8 electrical works_en_GIR.rev8.doc   Network security capacity  o IP Masquerading  o 1:1 NAT (Network address translation  o Port routing  o 1:1 NAT (network address translation)  o P Masquerading  NAT (Network Address Translation):  o Outgoing MAC packages  o Incoming MAC packages  o IP packages which are delivered to internal connection point  o IP packages incoming from device which is connected to external connection point.  Package filtering for creating firewall rules:  o External identity  o SSH (Secure shell protocol) input  o SNMP v1/v2/v3 password   Firewall will be equipped with firewall access controls   Firewall will be switch in layer 2 mode and will be router in layer 3 mode or it will be able to  operated as PPPoE Point to Point Protocol Over Ethernet   Firewall will maintain copper cable and fiber ethernet connection. Firewall is a tool which controls data which is received from internet and prevents or allows passage  according to your firewall configuration.