Set Dmz Wan Rules - NETGEAR ProSafe SRX5308 Reference Manual

Set DMZ WAN Rules

The firewall rules for traffic between the DMZ and the Internet are configured on the DMZ
WAN Rules screen. The default outbound policy is to allow all traffic from and to the Internet
to pass through. You can then apply firewall rules to block specific types of traffic from either
going out from the DMZ to the Internet (outbound) or coming in from the Internet to the DMZ
(inbound).
There is no drop-down list that lets you set the default outbound policy as there is on the LAN
WAN Rules screen. You can change the default outbound policy by blocking all outbound
traffic and then enabling only specific services to pass through the VPN firewall. You do so by
adding outbound services rules (see

To access the DMZ WAN Rules screen:
1. Select Security > Firewall > DMZ WAN Rules. The DMZ WAN Rules screen displays.
(The following figure shows a rule in the Outbound Services table as an example.)
Figure 45.

To make changes to an existing outbound or inbound service rule:
In the Action column to the right of the rule, click one of the following table buttons:
• Edit. Allows you to make any changes to the rule definition of an existing rule. Depending
on your selection, either the Edit DMZ WAN Outbound Service screen (identical to
Figure 46 on page 96) or the Edit DMZ WAN Inbound Service screen (identical to
Figure 47 on page 97) displays, containing the data for the selected rule.
• Up. Moves the rule up one position in the table rank.
• Down. Moves the rule down one position in the table rank.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
DMZ WAN Outbound Services Rules
Firewall Protection
95
on page 96).