Netgear FVS318N – Prosafe Wireless N VPN Firewall 参照マニュアル

ページ / 426
Firewall Protection
131
 ProSAFE Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Overview of Rules to Block or Allow Specific Kinds of 
Traffic
Firewall rules are used to block or allow specific traffic passing through from one side to the 
other. You can configure up to 800 firewall rules on the wireless VPN firewall (see the 
following table). Inbound rules (WAN to LAN) restrict access by outsiders to private 
resources, selectively allowing only specific outside users to access specific resources. 
Outbound rules (LAN to WAN) determine what outside resources local users can have 
access to.
A firewall has two default rules, one for inbound traffic and one for outbound. The default 
rules of the wireless VPN firewall are:
Inbound. Block all access from outside except responses to requests from the LAN side.
Outbound. Allow all access from the LAN side to the outside.
The firewall rules for blocking and allowing traffic on the wireless VPN firewall can be applied 
to LAN WAN traffic, DMZ WAN traffic, and LAN DMZ traffic.
The rules to block or allow traffic are based on the traffic’s category of service:
Outbound rules (service blocking). Outbound traffic is allowed unless you configure 
the firewall to block specific or all outbound traffic.
Inbound rules (port forwarding). Inbound traffic is blocked unless the traffic is in 
response to a request from the LAN side. You can configure the firewall to allow specific 
or all inbound traffic.
Customized services. You can add additional services to the list of services in the 
factory defaults list. You can then define rules for these added services to either allow or 
block that traffic (see 
Quality of Service (QoS) priorities. Each service has its own native priority that impacts 
its quality of performance and tolerance for jitter or delays. You can change the QoS 
priority, which changes the traffic mix through the system (see 
Table 32.  Number of supported firewall rule configurations
 
Traffic Rule
Maximum Number of 
Outbound Rules
Maximum Number of 
Inbound Rules
Maximum Number of 
Supported Rules
LAN WAN
300
300
600
DMZ WAN
50
50
100
LAN DMZ
50
50
100
Total Rules
400
400
800