Features That Increase Traffic - NETGEAR ProSafe SRX5308 Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Source MAC Filtering
If you want to reduce outgoing traffic by preventing Internet access by certain PCs on the
LAN, you can use the source MAC filtering feature to drop the traffic received from the PCs
with the specified MAC addresses. By default, this feature is disabled; all traffic received from
PCs with any MAC address is allowed. See
procedure on how to use this feature.

Features That Increase Traffic

The following features of the VPN firewall tend to increase the traffic load on the WAN side:
• LAN WAN inbound rules (also referred to as port forwarding)
• DMZ WAN inbound rules (also referred to as port forwarding)
• Port triggering
• Enabling the DMZ port
• Configuring exposed hosts
• Configuring VPN tunnels
LAN WAN Inbound Rules and DMZ WAN Inbound Rules (Port Forwarding)
The LAN WAN Rules screen and the DMZ WAN Rules screen list all existing rules for
inbound traffic (from WAN to LAN and from WAN to the DMZ). If you have not defined any
rules, only the default rule is listed. The default rule blocks all access from outside except
responses to requests from the LAN side. Any inbound rule that you create allows additional
incoming traffic and therefore increases the traffic load on the WAN side.
WARNING!
This feature is for advanced administrators only! Incorrect
configuration might cause serious problems.
Each rule lets you specify the desired action for the connections covered by the rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
The following section summarizes the various criteria that you can apply to inbound rules and
that might increase traffic. For more information about inbound rules, see
(Port Forwarding) on page 86. For detailed procedures on how to configure inbound rules,
see Set LAN WAN Rules
Enable Source MAC Filtering
on page 91 and Set DMZ WAN Rules
Network and System Management
245
on page 126 for the
Inbound Rules
on page 95.