NETGEAR SRX5308 - ProSafe® Quad WAN Gigabit SSL VPN Firewall Reference Manual page 97

• If your external IP address is assigned dynamically by your ISP (DHCP enabled), the IP
address might change periodically as the DHCP lease expires. Consider using Dyamic DNS so
that external users can always find your network (see
page 2-27).
• If the IP address of the local server PC is assigned by DHCP, it might change when the PC is
rebooted. To avoid this, use the Reserved (DHCP Client) feature in the LAN Groups screen to
keep the PC's IP address constant (see
• Local PCs must access the local server using the PCs' local LAN address. Attempts by local
PCs to access the server using the external WAN IP address will fail.
Note: See "Configuring Port Triggering" on page 4-48
certain types of inbound traffic that would otherwise be blocked by the firewall.
Note: The VPN firewall always blocks denial of service (DoS) attacks. A DoS attack
does not attempt to steal data or damage your PCs, but overloads your Internet
connection so you cannot use it (that is, the service becomes unavailable).
Note: When the Block TCP Flood and Block UDP Flood check boxes are selected on the
Attack Checks screen (see
connections of the same application from one host or IP address (such as multiple
DNS queries from one PC) trigger the VPN firewall's DoS protection.
Table 4-3 on page 4-8
common to most Inbound Service screens (see
and Figure 4-10 on page
The steps to configure inbound rules are described in the following sections:
• "Setting LAN WAN Rules" on page 4-11
• "Setting DMZ WAN Rules" on page 4-14
Firewall Protection
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308 Reference Manual
"Setting Up Address Reservation" on page
"Attack Checks" on page
describes the fields that define the rules for inbound traffic and that are
4-20).
v1.0, April 2010
"Configuring Dynamic DNS" on
for yet another way to allow
4-26), multiple concurrent
Figure 4-4 on page 4-14,
3-19).
Figure 4-7 on page 4-17,
4-7