Use Qos And Bandwidth Assignment To Shift The Traffic Mix - NETGEAR ProSafe SRX5308 Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
request rather than a response to a requests from the LAN network. As such, it would be
handled in accordance with the inbound port forwarding rules, and most likely would be
blocked.
For the procedure on how to configure port triggering, see
page 130.
DMZ Port
The demilitarized zone (DMZ) is a network that, by default, has fewer firewall restrictions
when compared to the LAN. The DMZ can be used to host servers (such as a web server,
FTP server, or email server) and provide public access to them. The fourth LAN port on the
VPN firewall (the rightmost LAN port) can be dedicated as a hardware DMZ port to safely
provide services to the Internet without compromising security on your LAN. By default, the
DMZ port and both inbound and outbound DMZ traffic are disabled. Enabling the DMZ port
and allowing traffic to and from the DMZ increases the traffic through the WAN ports.
For information about how to enable the DMZ port, see
on page 72. For the procedures on how to configure DMZ traffic rules, see
Rules on page 95.
Exposed Hosts
Specifying an exposed host allows you to set up a computer or server that is available to
anyone on the Internet for services that you have not yet defined. For an example of how to
set up an exposed host, see
Host on page 104.
VPN Tunnels
The VPN firewall supports up to 125 site-to-site IPSec VPN tunnels and up to 50 dedicated
SSL VPN tunnels. Each tunnel requires extensive processing for encryption and
authentication, thereby increasing traffic through the WAN ports.
For information about IPSec VPN tunnels, see
IPSec Connections. For information about SSL VPN tunnels, see
Networking Using SSL

Use QoS and Bandwidth Assignment to Shift the Traffic Mix

By specifying QoS and bandwidth profiles and assigning these profiles to outbound and
inbound firewall rules, you can shift the traffic mix to aim for optimum performance of the VPN
firewall.
Assign QoS Profiles
The QoS profile settings determine the priority and, in turn, the quality of service for the traffic
passing through the VPN firewall. After you have created a QoS profile, you can assign the
LAN WAN or DMZ WAN Inbound Rule: Specifying an Exposed
Connections.
Network and System Management
247
Configure Port Triggering
Configure and Enable the DMZ Port
Chapter 5, Virtual Private Networking Using
Chapter 6, Virtual Private
on
Set DMZ WAN