NETGEAR ProSafe FVS336Gv2 Reference Manual page 533

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Add LAN WAN Rules
When you define inbound firewall rules, you can further refine their application according to
the following criteria:
• Services. You can specify the services or applications to be covered by an inbound rule.
If the desired service or application does not display in the list, you must define it (see
Inbound Rules — Port Forwarding
page 280).
• WAN destination IP address. You can specify the destination IP address for incoming
traffic. Traffic is directed to the specified address only when the destination IP address of
the incoming packet matches the IP address of the selected WAN interface.
• LAN users (or DMZ users). You specify which computers on your network are affected
by an inbound rule only when the IPv4 routing mode is Classical Routing. When Classical
Routing is enabled, you have several options:
- Any. The rule applies to all computers and devices on your LAN or DMZ.
- Single address. The rule applies to the address of a particular computer.
- Address range. The rule applies to a range of addresses.
- Groups. The rule is applied to a group of computers. (You can configure groups for
LAN WAN outbound rules but not for DMZ WAN outbound rules.) The Known PCs
and Devices table is an automatically maintained list of all known computers and
network devices and is generally referred to as the network database (see
the Network Database
into the network database by various methods (see
Hosts on page 132).
- IP Groups. The rule applies to a group of individual LAN IP addresses. For
information about assigning IP addresses to groups, see
on page 288. (LAN IP groups do not apply to DMZ WAN inbound rules.)
• WAN users. You can specify which Internet locations are covered by an inbound rule,
based on their IP address:
- Any. The rule applies to all Internet IP address.
- Single address. The rule applies to a single Internet IP address.
- Address range. The rule applies to a range of Internet IP addresses.
- IP Groups. The rule applies to a group of individual WAN IP addresses. For
information about assigning IP addresses to groups, see
on page 288.
• Schedule. You can configure three different schedules to specify when a rule is applied.
After a schedule is configured, it affects all rules that use this schedule. You specify the
days of the week and time of day for each schedule. For more information, see
Schedule on page 292.
• Bandwidth profile. You can define bandwidth profiles and then apply them to inbound
LAN WAN rules to limit traffic. (You cannot apply bandwidth profiles to DMZ WAN rules.)
For information about how to define bandwidth profiles, see
for IPv4 Traffic on page 299.
on page 223 and Add DMZ WAN Rules
on page 215 and
on page 133). Computers and network devices are entered
Optimize Performance and Manage Your System
531
on page 233.
Manage Customized Services
Manage IPv4 LAN Groups and
Manage IP Address Groups
Manage IP Address Groups
Manage Bandwidth Profiles
on
Manage
Define a