NETGEAR FVS336Gv3 Reference Manual page 213

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3
Default DMZ WAN Rules
For DMZ WAN traffic, the default policy is to block all traffic from and to the Internet.
You can change the default policy by adding DMZ WAN firewall rules that allow specific types
of traffic to go out from the DMZ to the Internet (outbound) or to come in from the Internet to
the DMZ (inbound). Alternately, for outbound traffic, you can allow all outbound traffic and
then block only specific services from passing through the VPN firewall. (Do not use this
approach for inbound traffic.)
Default LAN DMZ Rules
For LAN DMZ traffic, the default policy is to block all traffic between the LAN and the DMZ.
You can change the default policy by adding LAN DMZ firewall rules that allow specific types
of traffic to go out from the LAN to the DMZ (outbound) or to come in from the DMZ to the
LAN (inbound). Alternately, for outbound traffic, you can allow all outbound traffic and then
block only specific services from passing through the VPN firewall. (Do not use this approach
for inbound traffic.)
Number of Rules Supported
You can configure up to 600 firewall rules on the VPN firewall.
Table 4. Number of supported firewall rule configurations
Traffic Rule Maximum Number of
Outbound Rules
LAN WAN 300
DMZ WAN 50
LAN DMZ 50
Total Rules 400
Categories of Service
The rules to block or allow traffic are based on the traffic's category of service:
• Outbound rules (service blocking). Outbound traffic is allowed unless you configure
the firewall to block specific or all outbound traffic.
• Inbound rules (port forwarding). Inbound traffic is blocked unless the traffic is in
response to a request from the LAN side. You can configure the firewall to allow specific
or all inbound traffic.
• Customized services. You can add additional services to the list of services in the
factory defaults list. You can then define rules for these added services to either allow or
block that traffic (see
• Quality of Service (QoS) priorities. Each service has its own native priority that impacts
its quality of performance and tolerance for jitter or delays. You can change the QoS
priority, which changes the traffic mix through the system (see
Maximum Number of
Inbound Rules
300
50
50
400
Manage Customized Services
Customize Firewall Protection
213
Maximum Number of
Combined Supported Rules
600
100
100
800
on page 282).
Manage Quality of Service