NETGEAR FR328S manual Chapter Advanced Configuration, Configuring Advanced Security

Chapter 7

Advanced Configuration

This chapter describes how to configure the advanced features of your FR328S ProSafe Firewall with Dial Back-Up.

Configuring Advanced Security

The FR328S ProSafe Firewall with Dial Back-Up provides a variety of advanced features, such as:

•Setting up a Demilitarized Zone (DMZ) Server

•The flexibility of configuring your LAN TCP/IP settings

•Connecting a Remote Access Server through the serial port

These features are discussed below.

Setting Up A Default DMZ Server

The Default DMZ Server feature is helpful when using some online games and videoconferencing applications that are incompatible with NAT. The firewall is programmed to recognize some of these applications and to work properly with them, but there are other applications that may not function well. In some cases, one local PC can run the application properly if that PC’s IP address is entered as the Default DMZ Server.

Note: For security, you should avoid using the Default DMZ Server feature. When a computer is designated as the Default DMZ Server, it loses much of the protection of the firewall, and is exposed to many exploits from the Internet. If compromised, the computer can be used to attack your network.

Incoming traffic from the Internet is normally discarded by the firewall unless the traffic is a response to one of your local computers or a service that you have configured in the Ports menu. Instead of discarding this traffic, you can have it forwarded to one computer on your network. This computer is called the Default DMZ Server.

Advanced Configuration 7-1

M-10207-01, Reference Manual v2