Features That Reduce Traffic - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
As a result, and depending on the traffic that is being carried, the WAN side of the VPN firewall is
the limiting factor to throughput for most installations.
Using four WAN ports in load balancing mode increases the bandwidth capacity of the WAN side
of the VPN firewall, but there is no backup in case one of the WAN ports fails. When such a failure
occurs, the traffic that would have been sent on the failed WAN port is diverted to another WAN
port that is still working, thus increasing its load. However, there is one exception: Traffic that is
bound by protocol to the WAN port that failed is not diverted.

Features That Reduce Traffic

You can adjust the following features of the VPN firewall in such a way that the traffic load on the
WAN side decreases:
• LAN WAN outbound rules (also referred to as service blocking)
• DMZ WAN outbound rules (also referred to as service blocking)
• Content filtering
• Source MAC filtering
LAN WAN Outbound Rules and DMZ WAN Outbound Rules (Service Blocking)
You can control specific outbound traffic (from LAN to WAN and from the DMZ to WAN). The
LAN WAN Rules screen and the DMZ WAN Rules screen list all existing rules for outbound
traffic. If you have not defined any rules, only the default rule is listed. The default rule allows all
outgoing traffic. Any outbound rule that you create restricts outgoing traffic and therefore
decreases the traffic load on the WAN side.
Warning: This feature is for advanced administrators only! Incorrect configuration
might cause serious problems.
Each rule lets you specify the desired action for the connections that are covered by the rule:
• BLOCK always
• BLOCK by schedule, otherwise allow
• ALLOW always
• ALLOW by schedule, otherwise block
The following section summarizes the various criteria that you can apply to outbound rules in
order to reduce traffic. For more information about outbound rules, see
Blocking)" on page 4-4. For detailed procedures on how to configure outbound rules, see
LAN WAN Rules" on page 4-11
8-2
and "Setting DMZ WAN Rules" on page
v1.0, April 2010
"Outbound Rules (Service
4-14.
Network and System Management
"Setting