About Firewall Protection - NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual

This chapter describes how to use the firewall features of the VPN firewall to protect your
network. This chapter contains the following sections:
• "About Firewall Protection" on this page
• "Using Rules to Block or Allow Specific Kinds of Traffic" on page 4-2
• "Configuring Other Firewall Features" on page 4-26
• "Creating Services, QoS Profiles, and Bandwidth Profiles" on page 4-31
• "Setting a Schedule to Block or Allow Specific Traffic" on page 4-40
• "Content Filtering (Blocking Internet Sites)" on page 4-41
• "Enabling Source MAC Filtering" on page 4-44
• "Setting Up IP/MAC Bindings" on page 4-46
• "Configuring Port Triggering" on page 4-48
• "Configuring Universal Plug and Play" on page 4-51

About Firewall Protection

A firewall protects one network (the "trusted" network, such as your LAN) from another (the
untrusted network, such as the Internet), while allowing communication between the two. You can
further segment keyword blocking to certain known groups. For information about how to set up
LAN groups, see "Managing Groups and Hosts (LAN Groups)" on page
A firewall incorporates the functions of a Network Address Translation (NAT) router, protects the
trusted network from hacker intrusions or attacks, and controls the types of traffic that can flow
between the two networks. Unlike simple Internet-sharing NAT routers, a firewall uses a process
called stateful packet inspection to protect your network from attacks and intrusions. NAT
performs a very limited stateful inspection in that it considers whether the incoming packet is in
response to an outgoing request, but true stateful packet inspection goes far beyond NAT.
Firewall Protection
v1.0, April 2010
Chapter 4
3-14.
4-1