Order Of Precedence For Rules - NETGEAR ProSafe SRX5308 Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Table 19. Inbound rules overview (continued)
Setting Description
Log The setting that determines whether packets covered by this rule are logged. The options
are:
• Always. Always log traffic considered by this rule, whether it matches or not. This is
useful when you are debugging your rules.
• Never. Never log traffic considered by this rule, whether it matches or not.
Bandwidth Profile Bandwidth limiting determines the way in which the data is sent to and from your host.
The purpose of bandwidth limiting is to provide a solution for limiting the outgoing and
incoming traffic, thus preventing the LAN users from consuming all the bandwidth of the
Internet link. For more information, see
Bandwidth limiting occurs in the following ways:
• For outbound traffic. On the available WAN interface in the single WAN port mode and
auto-rollover mode, and on the selected interface in load balancing mode.
• For inbound traffic. On the LAN interface for all WAN modes.
Note:
Note: Some residential broadband ISP accounts do not allow you to run
any server processes (such as a web or FTP server) from your
location. Your ISP might periodically check for servers and might
suspend your account if it discovers any active servers at your
location. If you are unsure, see the Acceptable Use Policy of your
ISP.

Order of Precedence for Rules

As you define a new rule, it is added to a table in a Rules screen as the last item in the list, as
shown in the LAN WAN Rules screen example in
For any traffic attempting to pass through the firewall, the packet information is subjected to
the rules in the order shown in the Rules table, beginning at the top and proceeding to the
bottom. In some cases, the order of precedence of two or more rules might be important in
determining the disposition of a packet. For example, you should place the most strict rules at
the top (those with the most specific services or addresses). The Up and Down table buttons
in the Action column allow you to relocate a defined rule to a new position in the table.
Bandwidth limiting does not apply to the DMZ interface.
Firewall Protection
90
Create Bandwidth Profiles
Figure 41 on page 91.
on page 118.