NETGEAR FVS318G User Manual

Firewall Protection
130
NETGEAR ProSAFE VPN Firewall FVS318G v2
For yet another way to block outbound traffic from selected computers that would otherwise
be allowed by the firewall, see Enable Source MAC Filtering on page
196.
The steps to configure outbound rules are described in the following sections:
• Config
ure LAN WAN Rules
• Configure DMZ WAN Rules
• Configure LAN DMZ Rules
Inbound Rules
If you enabled Network Address Translation (NAT), your network presents one IP address
only to the Internet, and outside users cannot directly access any of your local computers
(LAN users). For information about configuring NAT, see Network Address Translation on
p
age 27.
However, by defining an inbound rule you can make a local server
(fo
r example, a web server
or game server) visible and available to the Internet. The rule informs the firewall to direct
inbound traffic for a particular service to one local server based on the destination port
number. This process is also known as port forwarding.
WARNING:
Allowing inbound services opens security holes in your network.
Enable only those ports that are necessary for your network.
Log Select whether packets covered by this rule are logged:
• Always. Always log traffic that matches this rule. This is
useful when you are debugging your rules.
• Ne
ver.
Never log traffic that matches this rule.
All rules
NAT
IP Select whether the source address of the outgoing packets on the
WAN are assigned the address of the WAN interface or the
address of a different interface. You can specify the following
settings only for outbound traffic of the WAN interface:
• WAN Interface Address.
All the outgoing packets on the
WAN are assigned to the address of the specified WAN
interface.
• Single Address.
All the outgoing packets on the WAN are
assigned to the specified IP address, for example, a
secondary WAN address that you configured.
Note: The NAT IP list is available only when the WAN mode is
NAT. If you select Single Address, the IP address specified must
fall under the WAN subnet.
IPv4 LAN WAN rules
IPv4 DMZ WAN rules
Table 29. Outbound rules overview (continued)
Setting Description Outbound Rules

NETGEAR FVS318G Specifications

General

Power requirements	12V DC, 1.5A
Firewall throughput	250 Mbit/s
Maximum data transfer rate	1000 Mbit/s
HTTP performance	6000 transactions/sec
Wi-Fi	No
DHCP server	Yes
Number of VLANs	256
VPN tunnels quantity	12
WAN connection	Ethernet (RJ-45)
Connectivity technology	Wired
Ethernet LAN (RJ-45) ports	9
Ethernet DMZ ports quantity	1
Routing protocols	RIP-1, RIP-2
Supported network protocols	TCP/IP, UDP, ICMP, PPPoE
VPN support	IPsec (ESP), IKE, PKI, HTTPS
Security algorithms	128-bit AES, 192-bit AES, 256-bit AES, 3DES, DES, MD5, SHA-1
Internal memory	128 MB
Flash memory	32 MB
Storage media type	Flash
Processor frequency	300 MHz
Storage temperature (T-T)	-20 - 70 °C
Operating temperature (T-T)	0 - 45 °C
Cables included	LAN (RJ-45)

Weight and Dimensions

Weight	590 g
Dimensions (WxDxH)	190 x 125 x 35 mm