Quick Reference Guide

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
VPN Firewall and Network Management 8-3
v1.0, January 2010
As you define your firewall rules, you can further refine their application according to the
following criteria:
• LAN Users. These settings determine which computers on your network are affected by this
rule. Select the desired options:
– Any. All PCs and devices on your LAN.
– Single address. The rule will be applied to the address of a particular PC.
– Address range. The rule is applied to a range of addresses.
– Groups. The rule is applied to a group (see “Managing Groups and Hosts (LAN Groups)”
on page 3-6 to assign PCs to a group using the LAN Groups Database).
• WAN Users. These settings determine which Internet locations are covered by the rule, based
on their IP address.
– Any. The rule applies to all Internet IP address.
– Single address. The rule applies to a single Internet IP address.
– Address range. The rule is applied to a range of Internet IP addresses.
• Services. You can specify the desired services or applications to be covered a rule. If the
desired service or application does not appear in the Custom Services Table, you must define
it using the Services screen (see “Adding Customized Services” on page 4-19).
• Groups and Hosts. You can apply these rules selectively to groups of PCs to reduce the
outbound or inbound traffic. The LAN Groups Database is an automatically-maintained list of
all known PCs and network devices. PCs and devices become known by the following
methods:
– DHCP Client Request. By default, the DHCP server in this VPN firewall is enabled, and
will accept and respond to DHCP client requests from PCs and other network devices.
These requests also generate an entry in the LAN Groups Database. Because of this,
leaving the DHCP server feature (on the LAN Setup screen) enabled is strongly
recommended.
– Scanning the Network. The local network is scanned using ARP. requests. The ARP scan
will detect active devices that are not DHCP clients. However, sometimes the name of the
PC or device cannot be accurately determined, and will appear in the database as
Unknown.
– Manual Entry. You can manually enter information about a device.
See “Managing Groups and Hosts (LAN Groups)” on page 3-6 for the procedure on how to
use this feature.