Netgear FVS336Gv2 – ProSafe Dual WAN Gigabit Firewall with SSL & IPSec VPN 참조 매뉴얼

다운로드
페이지 691
Optimize Performance and Manage Your System 
530
ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
To further narrow down the content filtering, you can configure groups to which the 
content-filtering rules apply and trusted domains for which the content-filtering rules do not 
apply.
Source MAC Filtering
If you want to reduce outgoing traffic by preventing Internet access by certain computers on 
the LAN, you can use the source MAC filtering feature to drop the traffic received from the 
computers with the specified MAC addresses. By default, this feature is disabled; all traffic 
received from computers with any MAC address is allowed. For information about how to use 
this feature, see 
Features That Increase Traffic
The following sections provide information about features of the VPN firewall that might 
cause the traffic load on the WAN side to increase:
LAN WAN Inbound Rules and DMZ WAN Inbound Rules — Port Forwarding
Any inbound rule that you create allows additional incoming traffic (from WAN to LAN and 
from WAN to the DMZ) and therefore increases the traffic load on the WAN side.
If you have not defined any LAN WAN inbound rules, only the default rule applies, which 
blocks all access from outside except responses to requests from the LAN side. 
WARNING:
Incorrect configuration of inbound firewall rules can cause serious 
connection problems.
Each of the following rules lets you specify the desired action for the connections covered by 
the rule:
BLOCK always 
BLOCK by schedule, otherwise allow 
ALLOW always 
ALLOW by schedule, otherwise block 
This section summarizes the various criteria that you can apply to inbound rules and that 
might increase traffic. For more information about inbound rules, see 
215. For detailed information about how to configure inbound rules, see