NETGEAR ProSafe SRX5308 Reference Manual page 244

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
on the Services screen (see
Services on page 112).
• LAN users. You can specify which computers on your network are affected by an
outbound rule. There are several options:
- Any. The rule applies to all PCs and devices on your LAN.
- Single address. The rule applies to the address of a particular PC.
- Address range. The rule applies to a range of addresses.
- Groups. The rule is applied to a group of PCs. (You can configure groups for LAN
WAN outbound rules but not for DMZ WAN outbound rules.) The Known PCs and
Devices table is an automatically maintained list of all known PCs and network
devices and is generally referred to as the network database, which is described in
Manage the Network Database
into the network database by various methods that are described in
and Hosts (LAN Groups)
• WAN users. You can specify which Internet locations are covered by an outbound rule,
based on their IP address:
- Any. The rule applies to all Internet IP addresses.
- Single address. The rule applies to a single Internet IP address.
- Address range. The rule applies to a range of Internet IP addresses.
• Schedule. You can configure three different schedules to specify when a rule is applied.
Once a schedule is configured, it affects all rules that use this schedule. You specify the
days of the week and time of day for each schedule. For more information, see
Schedule to Block or Allow Specific Traffic
• QoS profile. You can define QoS profiles and then apply them to outbound rules to
regulate the priority of traffic. For information about how to define QoS profiles, see
Create Quality of Service (QoS) Profiles
• Bandwidth profile. You can define bandwidth profiles and then apply them to outbound
rules to limit traffic. For information about how to define bandwidth profiles, see
Bandwidth Profiles
Content Filtering
If you want to reduce traffic by preventing access to certain sites on the Internet, you can use
the VPN firewall's content filtering feature. By default, this feature is disabled; all requested
traffic from any website is allowed.
• Web object blocking. You can block the following web component types: embedded
objects (ActiveX, Java, Flash), proxies, and cookies.
• Keyword and file extension blocking. You can specify words that, should they appear
in the website name (URL), file extension, or newsgroup name, cause that site, file, or
newsgroup to be blocked by the VPN firewall.
• URL blocking. You can specify URLs that are blocked by the VPN firewall.
For more information, see
Services-Based Rules
on page 68. PCs and network devices are entered
on page 67.
on page 116.
on page 118.
Content Filtering on page 123.
Network and System Management
244
on page 83 and
on page 121.
Add Customized
Manage Groups
Set a
Create