NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 96

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
Table 4-2. Outbound Rules Overview (continued)
Setting Description (or Subfield and Description)
Bandwidth Profile Bandwidth limiting determines the way in which the data is sent to and from your
host. The purpose of bandwidth limiting is to provide a solution for limiting the
outgoing and incoming traffic, thus preventing the LAN users from consuming all the
bandwidth of the Internet link. Bandwidth limiting occurs in the following ways:
• For outbound traffic. On the available WAN interface in the single WAN port mode
• For inbound traffic. On the LAN interface for all WAN modes.
For more information, see
Note: Bandwidth limiting does not apply to the DMZ interface.
Log The setting that determines whether packets covered by this rule are logged. The
options are:
• Always. Always log traffic considered by this rule, whether it matches or not. This
• Never. Never log traffic considered by this rule, whether it matches or not.
NAT IP The setting that specifies whether the source address of the outgoing packets on the
WAN should be auto-detected, should be assigned the address of a WAN interface,
or should be assigned the address of a different interface. The options are:
• Auto. The source address of the outgoing packets is auto-detected via the
• WAN Interface Address. All the outgoing packets on the WAN are assigned to the
• Single Address. All the outgoing packets on the WAN are assigned to the
Note: This option is available only when the WAN mode is NAT. The IP address
specified should fall under the WAN subnet.
Inbound Rules (Port Forwarding)
If you have enabled Network Address Translation (NAT), your network presents only one IP
address to the Internet, and outside users cannot directly access any of your local computers.
However, by defining an inbound rule you can make a local server (for example, a Web server or
game server) visible and available to the Internet. The rule informs the firewall to direct inbound
traffic for a particular service to one local server based on the destination port number. This
process is also known as port forwarding.
Whether or not DHCP is enabled, how a PC accesses the server's LAN address impacts the
inbound rules. For example:
4-6
and auto-rollover mode, and on the selected interface in load balancing mode.
is useful when you are debugging your rules.
configured routing and load balancing rules.
address of the specified WAN interface.
specified IP address, for example, a secondary WAN address that you have
configured.
v1.0, April 2010
"Creating Bandwidth Profiles" on page 4-37.
Firewall Protection