Services-Based Rules - NETGEAR ProSafe SRX5308 Reference Manual

ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Table 17. Number of supported firewall rule configurations (continued)
Traffic rule Maximum number of
outbound rules
LAN DMZ 200
Maximum Number of 300
Supported Rules
The maximum number of supported outbound rules is 300, and the maximum number of
supported inbound rules is 300. The total number of supported inbound and outbound rules is
therefore 600.
Per traffic rule category (LAN WAN, DMZ WAN, or LAN DMZ), you can configure a total of
200 rules in any combination of outbound and inbound rules. However, the maximum number
of outbound rules for all three categories cannot exceed 300. Similarly, the maximum number
of inbound rules for all three categories cannot exceed 300.

Services-Based Rules

The rules to block traffic are based on the traffic's category of service:
• Outbound rules (service blocking). Outbound traffic is normally allowed unless the
firewall is configured to disallow it.
• Inbound rules (port forwarding). Inbound traffic is normally blocked by the firewall
unless the traffic is in response to a request from the LAN side. The firewall can be
configured to allow this otherwise blocked traffic.
• Customized services. Additional services can be added to the list of services in the
factory default list. These added services can then have rules defined for them to either
allow or block that traffic (see
• Quality of Service (QoS) priorities. Each service has its own native priority that impacts
its quality of performance and tolerance for jitter or delays. You can change the QoS
priority, which changes the traffic mix through the system (see
(QoS) Profiles on page 116).
Outbound Rules (Service Blocking)
The VPN firewall allows you to block the use of certain Internet services by PCs on your
network. This is called service blocking or port filtering.
Note: See Enable Source MAC Filtering
to block outbound traffic from selected PCs that would otherwise be
allowed by the firewall.
Maximum number of
inbound rules
200
300
Add Customized Services
on page 126 for yet another way
Firewall Protection
83
Maximum number of
supported rules
200
600
on page 112).
Create Quality of Service