Netgear FVS318N User Manual

Page of 425
Network and System Management
323
 ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Features That Reduce Traffic
You can adjust the following features of the wireless VPN firewall in such a way that the traffic 
load on the WAN side decreases:
LAN WAN outbound rules (also referred to as service blocking)
DMZ WAN outbound rules (also referred to as service blocking)
Content filtering
Source MAC filtering
LAN WAN Outbound Rules and DMZ WAN Outbound Rules (Service Blocking)
You can control specific outbound traffic (from LAN to WAN and from the DMZ to WAN). The 
LAN WAN Rules screen and the DMZ WAN Rules screen list all existing rules for outbound 
traffic. Any outbound rule that you create restricts outgoing traffic and therefore decreases 
the traffic load on the WAN side.
On the LAN WAN screen, if you have not defined any rules, only the default rule is listed. The 
default LAN WAN outbound rule allows all outgoing traffic. 
WARNING:
Incorrect configuration of outbound firewall rules can cause 
serious connection problems.
Each rule lets you specify the desired action for the connections that are covered by the rule:
BLOCK always 
BLOCK by schedule, otherwise allow 
ALLOW always 
ALLOW by schedule, otherwise block 
The following section summarizes the various criteria that you can apply to outbound rules in 
order to reduce traffic. For more information about outbound rules, see 
on page 130. For detailed procedures about how to configure outbound 
When you define outbound firewall rules, you can further refine their application according to 
the following criteria:
Services. You can specify the services or applications to be covered by an outbound 
rule. If the desired service or application does not display in the list, you need to define it 
using the Services screen (se
LAN users (or DMZ users). You can specify which computers on your network are 
affected by an outbound rule. There are several options:
-
Any. The rule applies to all computers and devices on your LAN.