Firewall Protection
172
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Services, Bandwidth Profiles, and QoS Profiles•Add Customized Services
•Create Bandwidth Profiles
•Preconfigured Quality of Service Profiles
When you create inbound and outbound firewall rules, you use firewall objects such as
services, QoS profiles, bandwidth profiles, and schedules to narrow down the firewall rules:
•Services. A service narrows down the firewall rule to an application and a port number.
For information about adding services, see Add Customized Services on page 172.
•Bandwidth profiles. A bandwidth profile allocates and limits traffic bandwidth for the LAN
users to which an IPv4 firewall rule is applied. For information about creating bandwidth
profiles, see Create Bandwidth Profiles on page 175.
•QoS profiles. A Quality of Service (QoS) profile defines the relative priority of an IP
packet for traffic that matches the firewall rule. For information about QoS profiles, see
Preconfigured Quality of Service Profiles on page 177.
Note: A schedule narrows down the period during which a firewall rule is
applied. For information about specifying schedules, see Set a
Schedule to Block or Allow Specific Traffic on page 182.
Add Customized Services
Services are functions performed by server computers at the request of client computers. You
can configure up to 124 custom services.
For example, web servers serve web pages, time servers serve time and date information,
and game hosts serve data about other players’ moves. When a computer on the Internet
sends a request for service to a server computer, the requested service is identified by a
service or port number. This number appears as the destination port number in the
transmitted IP packets. For example, a packet that is sent with destination port number 80 is
an HTTP (web server) request.
The service numbers for many common protocols are defined by the Internet Engineering
Task Force (IETF) and published in RFC 1700, Assigned Numbers. Service numbers for
other applications are typically chosen from the range 1024 to 65535 by the authors of the
application. However, on the wireless VPN firewall you can select service numbers in the
range from 1 to 65535.
Although the wireless VPN firewall already holds a list of many service port numbers, you are
not limited to these choices. Use the Services screen to add additional services and
applications to the list for use in defining firewall rules. The Services screen shows a list of
services that you have defined, as shown in the following figure.