Service-Based Rules - NETGEAR UTM5 Reference Manual

ProSecure Unified Threat Management (UTM) Appliance
The firewall rules for blocking and allowing traffic on the UTM can be applied to LAN WAN
traffic, DMZ WAN traffic, and LAN DMZ traffic.
Table 26. Number of supported firewall rule configurations
Traffic rule Maximum number of
outbound rules
LAN WAN 300
DMZ WAN 50
LAN DMZ 50
Total Rules 400

Service-Based Rules

The rules to block traffic are based on the traffic's category of service:
• Outbound rules (service blocking). Outbound traffic is usually allowed unless the
firewall is configured to disallow it.
• Inbound rules (port forwarding). Inbound traffic is usually blocked by the firewall unless
the traffic is in response to a request from the LAN side. The firewall can be configured to
allow this otherwise blocked traffic.
• Customized services. Additional services can be added to the list of services in the
factory defaults list. These added services can then have rules defined for them to either
allow or block that traffic (see
• Quality of Service (QoS) priorities. Each service has its own native priority that impacts
its quality of performance and tolerance for jitter or delays. You can change the QoS
priority, which changes the traffic mix through the system (see
Profiles on page 160).
Outbound Rules (Service Blocking)
The UTM allows you to block the use of certain Internet services by PCs on your network.
This is called service blocking or port filtering.
Note: See Enable Source MAC Filtering
to block outbound traffic from selected PCs that would otherwise be
allowed by the firewall.
WARNING:
Allowing inbound services opens security holes in your UTM.
Enable only those ports that are necessary for your network.
Maximum number of
inbound rules
300
50
50
400
Add Customized Services
on page 170 for yet another way
Firewall Protection
122
Maximum number of
supported rules
600
100
100
800
on page 154).
Create Quality of Service