Vpn Firewall Features That Reduce Traffic; Service Blocking - NETGEAR FVX538 - ProSafe VPN Firewall 200 Router Reference Manual

Reference Manual for the ProSafe VPN Firewall 200 FVX538
As a result and depending on the traffic being carried, the WAN side of the firewall will be the
limiting factor to throughput for most installations.
Using the dual WAN ports in load balancing mode increases the bandwidth capacity of the WAN
side of the FVX538 VPN firewall. But there is no backup in case one of the WAN ports fail. In
such an event and with one exception, the traffic that would have been sent on the failed WAN port
gets diverted to the WAN port that is still working, thus increasing its loading. The exception is
traffic that is bound by protocol to the WAN port that failed. This protocol-bound traffic is not
diverted.

VPN Firewall Features That Reduce Traffic

Features of the VPN firewall that can be called upon to decrease WAN-side loading are as follows:
•

Service blocking

• Block sites
• Source MAC filtering
Service Blocking
Note: This feature is for Advanced Administrators only! Incorrect configuration will cause serious
problems.
You can control specific outbound traffic (i.e., from LAN to WAN and from DMZ to WAN).
Outbound Services lists all existing rules for outbound traffic. If you have not defined any rules,
only the default rule will be listed. The default rule allows all outgoing traffic.
Each rule lets you specify the desired action for the connections covered by the rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
As you define your firewall rules, you can further refine their application according to the
following criteria:
• LAN users—These settings determine which computers on your network are affected by this
rule. Select the desired options:
– Any: All PCs and devices on your LAN.
8-2 Router and Network Management
January 2005