NETGEAR SRX5308 Reference Manual page 88

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
LAN Groups screen to keep the computer's IP address constant (see
Reservation on page 72).
• Local computers need to access the local server using the computers' local LAN address.
Attempts by local computers to access the server using the external WAN IP address will
fail.
Note: See Configure Port Triggering
allow certain types of inbound traffic that would otherwise be blocked
by the firewall.
Note: The VPN firewall always blocks denial of service (DoS) attacks. A
DoS attack does not attempt to steal data or damage your
computers, but overloads your Internet connection so you cannot
use it (that is, the service becomes unavailable).
Note: When the Block TCP Flood and Block UDP Flood check boxes are
selected on the Attack Checks screen (see
page 107), multiple concurrent connections of the same application
from one host or IP address (such as multiple DNS queries from one
computer) trigger the VPN firewall's DoS protection.
The following table describes the fields that define the rules for inbound traffic and that are
common to most Inbound Service screens (see
and Figure 50 on page 101).
The steps to configure inbound rules are described in the following sections:
• Set LAN WAN Rules
• Set DMZ WAN Rules
• Set LAN DMZ Rules
on page 131 for yet another way to
Attack Checks
Figure 44 on page 95,
Firewall Protection
88
Set Up Address
on
Figure 47 on page 98,