Overview Of Rules To Block Or Allow Specific Kinds Of Traffic - NETGEAR ProSAFE SRX5308 Reference Manual

Overview of Rules to Block or Allow Specific Kinds of
Traffic
• Outbound Rules (Service Blocking)
• Inbound Rules (Port Forwarding)
• Order of Precedence for Rules
Firewall rules are used to block or allow specific traffic passing through from one side to the
other. You can configure up to 600 firewall rules on the VPN firewall (see the following table).
Inbound rules (WAN to LAN) restrict access by outsiders to private resources, selectively
allowing only specific outside users to access specific resources. Outbound rules (LAN to
WAN) determine what outside resources local users can have access to.
A firewall has two default rules, one for inbound traffic and one for outbound. The default
rules of the VPN firewall are:
• Inbound. Block all access from outside except responses to requests from the LAN side.
• Outbound. Allow all access from the LAN side to the outside.
The firewall rules for blocking and allowing traffic on the VPN firewall can be applied to LAN
WAN traffic, DMZ WAN traffic, and LAN DMZ traffic.
Table 32. Number of supported firewall rule configurations
Traffic Rule
LAN WAN
DMZ WAN
LAN DMZ
Total Rules
The rules to block or allow traffic are based on the traffic's category of service:
• Outbound rules (service blocking). Outbound traffic is allowed unless you configure
the firewall to block specific or all outbound traffic.
• Inbound rules (port forwarding). Inbound traffic is blocked unless the traffic is in
response to a request from the LAN side. You can configure the firewall to allow specific
or all inbound traffic.
• Customized services. You can add additional services to the list of services in the
factory defaults list. You can then define rules for these added services to either allow or
block that traffic (see
• Quality of Service (QoS) priorities. Each service has its own native priority that impacts
its quality of performance and tolerance for jitter or delays. You can change the QoS
priority, which changes the traffic mix through the system (see
Profiles for IPv4 Firewall Rules
Firewall Rules
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
Maximum Number of
Outbound Rules
300
50
50
400
Add Customized Services
on page 184 and
on page 186).
Firewall Protection
Maximum Number of Maximum Number of
Inbound Rules Combined Supported Rules
300 600
50 100
50 100
400 800
on page 177).
Quality of Service Priorities for IPv6
136
Create Quality of Service