Reference Manual for th e Pr oSafe VPN F irewall 25 with 4 Gigabi t LAN a nd Dual WAN Por ts

Firewall Protection and Content Filtering 6-13

202-10085-01, March 2005

Note: See “Source MAC Filtering” on page 6-27 for yet another way to block outbound

traffic from selected PCs that would otherwise be allowed by the firewall.

Table 6-1. Outbound Services

Item Description
Services Select the desired Service or appli c ation to be covered by this rule. If the desired
service or application does not appear in the list, you must define it using the
Services menu (see “Customized Services” on page 6-16).
Action Select the desired ac tion for outgoing connections covered by this rule:
BLOCK always
BLOCK by schedule, otherwise Allow
ALLOW always
ALLOW by schedule, otherwise Block
Note: Any outbound traffic which is not blocked by rules you create will be allowed by
the Default rule.
ALLOW rules are only useful if the traffic is already covered by a BLOCK rule. That
is, you wish to allow a subset of traffic that is currently blocked by another rule.
Select Schedule Select the desired time schedule (i.e., Schedule1, Schedule2, or Schedule3) that will
be used by this rule.
This drop down menu gets activate d only when "BLOCK by schedule, otherwise
Allow" or "ALLOW by schedule, otherwise Block" is selected as Action.
Use schedule page to configure the time schedules (see “Using a Schedule to
Block or Allow Specific Traffic” on page 6-22).
LAN users These settings determine which computers on your network are affected by this rule.
Select the desired options:
Any - All PCs and devices on your LAN.
Single address - Enter the required address and the rule will be applied to that
particular PC.
Address range - If this option is selected, you must enter the start and finish fields.
Groups- Select the Group you wish this rule to apply to. You can use the Network
Database screen to assign PCs to Groups. See “Managing Groups and Hosts” on
page 6-20.
WA N Use r s These settings determine which Internet locations are covered by the rule, based on
their IP address. Select the desired optio n:
Any - All Internet IP address are covered by this rule.
Single address - Enter the required address in the start fields.
Address range - If this option is selected, you must enter the start and finish fields.