Firewall Protection - NETGEAR FVS336Gv3 Reference Manual

ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv3

Firewall Protection

A firewall protects one network (the trusted network, such as your LAN) from another (the
untrusted network, such as the Internet) while allowing communication between the two. You
can further segment keyword blocking to certain known groups such as LAN groups and IP
groups.
For IPv4, a firewall incorporates the functions of a Network Address Translation (NAT) router,
protects the trusted network from hacker intrusions or attacks, and controls the types of traffic
that can flow between the Internet, DMZ, and LAN. Unlike simple NAT routers, a firewall uses
a process called stateful packet inspection to protect your network from attacks and
intrusions. NAT performs a limited stateful inspection in that it considers whether the
incoming packet is in response to an outgoing request, but true stateful packet inspection
goes far beyond NAT.
For IPv6, which in itself provides stronger security than IPv4, a firewall in particular controls
the exchange of traffic between the Internet, DMZ, and LAN.
Although firewall rules (also refereed to as service rules) are the basic way of managing the
traffic through your system (see
on page 212), you can further refine your control by using the following features and
capabilities of the VPN firewall:
• Groups and hosts (see
• Firewall objects (see
• Allowing or blocking sites (see
• Source MAC filtering (see
• Port triggering (see
Some firewall settings might affect the performance of the VPN firewall. For more
information, see Performance Management
You can configure the VPN firewall to log and email denial of access, general attack, and
other information to a specified email address. For information about how to configure
logging and notifications, see
WARNING:
Make sure that you first configure the IPv4 WAN routing mode (see
Manage the IPv4 WAN Routing Mode
configure custom firewall rules. If you change the IPv4 WAN routing
mode, all LAN WAN and DMZ WAN inbound rules revert to default
settings.
Overview of Rules to Block or Allow Specific Kinds of Traffic
Manage IPv4 LAN Groups and Hosts
Manage Firewall Objects
Manage Content Filtering
Enable Source MAC Filtering
Manage Port Triggering
on page 531.
Manage Logging, Alerts, and Event Notifications
Customize Firewall Protection
211
on page 133)
on page 281)
on page 308)
on page 314)
on page 327)
on page 30) before you
on page 571.