Order Of Precedence For Rules; Set Lan Wan Rules - NETGEAR UTM9S Reference Manual

Order of Precedence for Rules

As you define a new rule, it is added to a table in a Rules screen as the last item in the list, as
shown in the LAN WAN Rules screen example in the following figure:
Figure 64.
For any traffic attempting to pass through the firewall, the packet information is subjected to
the rules in the order shown in the Rules table, beginning at the top and proceeding to the
bottom. In some cases, the order of precedence of two or more rules might be important in
determining the disposition of a packet. For example, you should place the most strict rules at
the top (those with the most specific services or addresses). The Up and Down table buttons
in the Action column allow you to relocate a defined rule to a new position in the table.

Set LAN WAN Rules

The default outbound policy is to allow all traffic to the Internet to pass through. Firewall rules
can then be applied to block specific types of traffic from going out from the LAN to the
Internet (outbound). This feature is also referred to as service blocking. You can change the
default policy of Allow Always to Block Always to block all outbound traffic, which then allows
you to enable only specific services to pass through the UTM.

To change the default outbound policy:
1. Select Network Security > Firewall. The Firewall submenu tabs display, with the LAN
WAN Rules screen in view.
2. Next to Default Outbound Policy, select Block Always from the drop-down list.
ProSecure Unified Threat Management (UTM) Appliance
Firewall Protection
130