Firewall Protection
176
NETGEAR ProSAFE VPN Firewall FVS318G v2
Your changes are saved.
Services, Bandwidth Profiles, and QoS Profiles
When you create inbound and outbound firewall rules, you use firewall objects such as
services, QoS profiles, bandwidth profiles, and schedules to narrow down the firewall rules:
• Services. A service narrows down th
e firewall rule to an application and a port number.
For information about adding services, see Add Customized Services on p
age 176.
• Bandwidth profile
s. A bandwidth profile allocates and limits traffic bandwidth for the
LAN users to which an IPv4 firewall rule is applied. For information about creating
bandwidth profiles, see Create Bandwidth Profiles on p
age 180.
• QoS profiles. A Quality o
f Service (QoS) profile defines the relative priority of an IP
packet for traffic that matches the firewall rule. For information about QoS profiles, see
Preconfigured Quality of Service Profiles on page 183
.
A schedule narrows down the period during which
a firewall rule is applied. For information
about specifying schedules, see Set a Schedule to Block or Allow Specific Traffic on
p
age 195.
This section contains the following topics:
• Add Customized Services
• Create Bandwidth Profiles
• Preconfigured Quality of Service Profiles
• Configure Service Groups
• Configure IP Groups
Add Customized Services
Services are functions performed by server computers at the request of client computers.
You can configure up to 124 custom services.
For example, web servers serve web pages, time servers serve time and da
te information,
and game hosts serve data about players’ moves. When a computer on the Internet sends a
request for service to a server computer, the requested service is identified by a service or
port number. This number appears as the destination port number in the transmitted IP
packets. For example, a packet that is sent with destination port number 80 is an HTTP (web
server) request.
The service numbers for many common protocols are defined by the Interne
t Engineering
Task Force (IETF) and published in RFC 1700, Assigned Numbers. Service nu
mbers for
other applications are typically chosen from the range 1024 to 65535 by the authors of the
application. However, on the VPN firewall you can select service numbers in the range from 1
to 65535.
Although the VPN firewall already holds a list
of many service port numbers, you are not
limited to these choices. Use the Services screen to add additional services and applications