NETGEAR FVS318G manual Services-Based Rules, Outbound Rules Service Blocking

ProSafe Gigabit 8 Port VPN Firewall FVS318G Reference Manual

Services-Based Rules

The rules to block traffic are based on the traffic’s category of service.

•Outbound Rules (service blocking). Outbound traffic is normally allowed unless the VPN firewall is configured to disallow it.

•Inbound Rules (port forwarding). Inbound traffic is normally blocked by the VPN firewall unless the traffic is in response to a request from the LAN side. The VPN firewall can be configured to allow this otherwise blocked traffic.

•Customized Services. Additional services can be added to the list of services in the factory default list. These added services can then have rules defined for them to either allow or block that traffic (see “Adding Customized Services” on page 4-24).

•Quality of Service (QoS) priorities. Each service has its own native priority that impacts its quality of performance and tolerance for jitter or delays. You can change the QoS priority which will change the traffic mix through the system (see “Specifying Quality of Service (QoS) Priorities” on page 4-26).

Outbound Rules (Service Blocking)

The VPN firewall allows you to block the use of certain Internet services by PCs on your network. This is called service blocking or port filtering.

Note: See “Configuring Source MAC Filtering” on page 4-33for yet another way to block outbound traffic from selected PCs that would otherwise be allowed by the VPN firewall.

Table 4-1. Outbound Rules

Item	Description
Service	Select the desired service or application to be covered by this rule. If the desired service
	or application does not appear in the list, you must define it using the Services menu (see
	“Adding Customized Services” on page 4-24).
Action	Select the desired action for outgoing connections covered by this rule:
	• BLOCK always.
	• BLOCK by schedule, otherwise Allow .
	• ALLOW always.
	• ALLOW by schedule, otherwise Block.
	Note: Any outbound traffic that is not blocked by rules you create will be allowed by the
	default rule.
	ALLOW rules are only useful if the traffic is already covered by a BLOCK rule. That is,
	you wish to allow a subset of traffic that is currently blocked by another rule.
Firewall Protection and Content Filtering		4-3

v1.1, August 2010