Administrator Tips; Rules To Block Or Allow Specific Kinds Of Traffic - NETGEAR FVS318N Reference Manual

can flow between the two networks. Unlike simple NAT routers, a firewall uses a process
called Stateful Packet Inspection to protect your network from attacks and intrusions. NAT
performs a very limited stateful inspection in that it considers whether the incoming packet is
in response to an outgoing request, but true Stateful Packet Inspection goes far beyond NAT.

Administrator Tips

Consider the following operational items:
1. As an option, you can enable remote management if you have to manage distant sites
from a central location (see
page 247 and
2. Although rules are the basic way of managing the traffic through your system (see
Block or Allow Specific Kinds of Traffic
using the following features and capabilities of the wireless VPN firewall:
- Groups and hosts (see
page 59)
- Services (see
- Schedules (see
- Allowing or blocking sites (see
- Source MAC filtering (see
- Port triggering (see
3. Some firewall settings might affect the performance of the wireless VPN firewall. For more
information, see
4. The firewall logs can be configured to log and then email denial of access, general attack,
and other information to a specified email address. For information about how to configure
logging and notifications, see
page 293.

Rules to Block or Allow Specific Kinds of Traffic

Firewall rules are used to block or allow specific traffic passing through from one side to the
other. You can configure up to 300 inbound rules plus up to 300 outbound rules on the
wireless VPN firewall (see the following table). Inbound rules (WAN to LAN) restrict access
by outsiders to private resources, selectively allowing only specific outside users to access
specific resources. Outbound rules (LAN to WAN) determine what outside resources local
users can have access to.
A firewall has two default rules, one for inbound traffic and one for outbound. The default
rules of the wireless VPN firewall are:
• Inbound. Block all access from outside except responses to requests from the LAN side.
• Outbound. Allow all access from the LAN side to the outside.
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Configure Authentication Domains, Groups, and Users
Configure Remote Management Access
Manage IPv4 Groups and Hosts (IPv4 LAN Groups)
Service-Based Rules
Set a Schedule to Block or Allow Specific Traffic
Configure Content Filtering
Enable Source MAC Filtering
Configure Port Triggering
Performance Management
Configure Logging, Alerts, and Event Notifications
IPv4 Firewall Protection
on page 278).
on page 108), you can further refine your control
on page 109)
on page 151)
on page 270.
108
Rules to
on
on page 146)
on page 142)
on page 147)
on
on