Set Lan Dmz Rules - NETGEAR ProSafe SRX5308 Reference Manual

Set LAN DMZ Rules

The LAN DMZ Rules screen allows you to create rules that define the movement of traffic
between the LAN and the DMZ. The default outbound and inbound policies are to allow all
traffic between the local LAN and DMZ network. You can then apply firewall rules to block
specific types of traffic from either going out from the LAN to the DMZ (outbound) or coming
in from the DMZ to the LAN (inbound).
There is no drop-down list that lets you set the default outbound policy as there is on the LAN
WAN Rules screen. You can change the default outbound policy by blocking all outbound
traffic and then enabling only specific services to pass through the VPN firewall. You do so by
adding outbound services rules (see

To access the LAN DMZ Rules screen:
1. Select Security > Firewall > LAN DMZ Rules. The LAN DMZ Rules screen displays:
Figure 48.

To make changes to an existing outbound or inbound service rule:
In the Action column to the right of the rule, click one of the following table buttons:
• Edit. Allows you to make any changes to the rule definition of an existing rule. Depending
on your selection, either the Edit LAN DMZ Outbound Service screen (identical to
Figure 49 on page 99) or Edit LAN DMZ Inbound Service screen (identical to
on page 100) displays, containing the data for the selected rule.
• Up. Moves the rule up one position in the table rank.
• Down. Moves the rule down one position in the table rank.
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
LAN DMZ Outbound Services Rules
Firewall Protection
98
on page 99).
Figure 50