NETGEAR UTM5EW-100NAS, STM150EW-100NAS manual 136, Groups and Hosts LAN Groups on

ProSecure Unified Threat Management (UTM) Appliance

Table 28. Inbound rules overview (continued)

Setting	Description	Inbound Rules
LAN Users	The settings that determine which computers on your network are	LAN WAN rules
	affected by this rule. The options are:	LAN DMZ rules
	• Any. All computers and devices on your LAN.
	• Single address. Enter the required address in the Start field to
	apply the rule to a single device on your LAN.
	• Address range. Enter the required addresses in the Start and
	End fields to apply the rule to a range of devices.
	• Group. Select the group to which the rule applies. Use the LAN
	Groups screen to assign computers to groups. See Manage
	Groups and Hosts (LAN Groups) on page 111.
	• IP Group. Select the IP group to which the rule applies. Use the
	IP Groups screen to assign IP addresses to groups. See Create
	IP Groups on page 167.
	Note: For LAN WAN inbound rules, this field is not applicable when
	the WAN mode is NAT because your network presents only one IP
	address to the Internet.
WAN Users	The settings that determine which Internet locations are covered by	LAN WAN rules
	the rule, based on their IP address. The options are:	DMZ WAN rules
	• Any. All Internet IP addresses are covered by this rule.
	• Single address. Enter the required address in the Start field.
	• Address range. Enter the required addresses in the Start and
	End fields.
	• IP Group. Select the IP group to which the rule applies. Use the
	IP Groups screen to assign IP addresses to groups. See Create
	IP Groups on page 167.
DMZ Users	The settings that determine which DMZ computers on the DMZ	DMZ WAN rules
	network are affected by this rule. The options are:	LAN DMZ rules
	• Any. All computers and devices on your DMZ network.
	• Single address. Enter the required address in the Start field to
	apply the rule to a single computer on the DMZ network.
	• Address range. Enter the required addresses in the Start and
	End fields to apply the rule to a range of DMZ computers.
	Note: For DMZ WAN inbound rules, this field is not applicable when
	the WAN mode is NAT because your network presents only one IP
	address to the Internet.
Users Allowed	The settings that determine which user or group on the network is	LAN WAN rules
	affected by this rule. You can select a local user, local group, or	DMZ WAN rules
	customer group. To create a custom group, select + Create New
	from the Users Allowed drop-down list on a firewall screen that lets
	you add or edit a rule (you can find the + Create New link under the
	Custom Groups heading on such a screen). For information about
	setting up custom groups, see Configure Custom Groups on
	page 397.

Firewall Protection

136