NETGEAR FVX538v2 - ProSafe VPN Firewall Dual WAN Reference Manual page 68

ProSafe VPN Firewall 200 FVX538 Reference Manual
Table 4-3. Inbound Rules
Item Description
Services Select the desired service or application to be covered by this rule. If the desired service
or application does not appear in the list, you must define it using the Services screen
(see
Action Select the desired action for packets covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
Note: Any inbound traffic which is not allowed by rules you create will be blocked by the
Default rule.
Select Schedule Select the desired time schedule (that is, Schedule1, Schedule2, or Schedule3) that will
be used by this rule (see
29).
• This pull-down menu gets activated only when "BLOCK by schedule, otherwise Allow"
or "ALLOW by schedule, otherwise Block" is selected as Action.
• Use the schedule screen to configure the time schedules.
Send to LAN This field appears only with NAT routing (not classical routing). This LAN address or
Server range of LAN addresses determines which computer or computers on your network are
hosting this service rule. (You can also translate these addresses to a port number.)
Send to DMZ The DMZ server address determines which computer on your network is hosting this
Server service rule. (You can also translate this address to a port number.)
Translate to Port Check the "Translate to Port Number" and enter a port number if you want to assign the
Number LAN Server to a specific port.
WAN This setting determines the destination IP address applicable to incoming traffic.
Destination IP This is the public IP address that will map to the internal LAN server; it can either be the
Address address of the WAN1 or WAN2 ports or another public IP address
LAN Users These settings determine which computers on your network are affected by this rule.
Select the desired options:
• Any – All PCs and devices on your LAN.
• Single address – Enter the required address and the rule will be applied to that
particular PC.
• Address range – If this option is selected, you must enter the start and finish fields.
• Groups – Select the Group to which this rule will apply. Use the LAN Groups screen
(under Network Configuration) to assign PCs to Groups. See
Hosts (LAN Groups)" on page
WAN Users These settings determine which Internet locations are covered by the rule, based on their
IP addresses. Select the desired option:
• Any – All Internet IP address are covered by this rule.
• Single address – Enter the required address in the start field.
• Address range – If this option is selected, you must enter the start and end fields.
4-6
"Adding Customized Services" on page
"Setting a Schedule to Block or Allow Specific Traffic" on page 4-
v1.0, January 2010
4-24).
3-6.
Firewall Protection and Content Filtering
.
"Managing Groups and