NETGEAR FVS318N-100NAS Network Router User Manual


 
Network and System Management
315
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Content filtering
Sou
rce MAC filtering
LAN WAN Outbound Rules and DMZ WAN Outbound Rules (Service Blocking)
You can control specific outbound traffic (from LAN to WAN and from the DMZ to WAN). The
LAN WAN Rules screen and the DMZ WAN Rules screen list all existing rules for outbound
traffic. If you have not defined any rules, only the default rule is listed. The default rule allows
all outgoing traffic. Any outbound rule that you create restricts outgoing traffic and therefore
decreases the traffic load on the WAN side.
WARNING:
This feature is for advanced administrators. Incorrect
configuration might cause serious problems.
Each rule lets you specify the desired action for the connections that are covered by the rule:
BLOCK always
BLOCK by
schedule, otherwise allow
AL
LOW always
ALL
OW by schedule, otherwise block
The following section summarizes the various criteria th
at you can apply to outbound rules in
order to reduce traffic. For more information about outbound rules, see Outbound Rules
(Service Blocking) on
page 127. For detailed procedures on how to configure outbound rules,
see Configure LAN WAN Rules on p
age 135 and Configure DMZ WAN Rules on page 142.
When you define outbound firewall rules, you can further refine their application according to
t
he following criteria:
Servi
ces. You can specify the services or applications to be covered by an outbound
rule. If the desired service or application does not display in the list, you need to define it
using the Services screen (see Outbound Rules (Service Blocking) on
page 127 and Add
Customized Services on p
age 168).
L
AN users. You can specify which computers on your network are affected by an
outbound rule. There are several options:
- Any. Th
e rule applies to all computers and devices on your LAN.
- Sin
gle address. The rule applies to the address of a particular computer.
- Addres
s range. The rule applies to a range of addresses.
- Group
s. The rule applies to a group of computers. (You can configure groups for LAN
WAN outbound rules but not for DMZ WAN outbound rules.) The Known PCs and
Devices table is an automatically maintained list of all known computers and network
devices and is generally referred to as the network database, which is described in
Manage the Network Database on p
age 65. Computers and network devices are
entered into the network database by various methods, which are described in
Manage IPv4 Groups and Hosts (IPv4 LAN Groups) on p
age 64.