Quick Reference Guide

ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
8-4 VPN Firewall and Network Management
v1.0, January 2010
• Schedule. If you have set firewall rules on the LAN WAN Rules screen, you can configure
three different schedules (for example, schedule 1, schedule 2, and schedule 3) for when a rule
is to be applied. Once a schedule is configured, it affects all rules that use this schedule. You
specify the days of the week and time of day for each schedule. (See “Setting a Schedule to
Block or Allow Specific Traffic” on page 4-24 for the procedure on how to use this feature.)
Blocking Sites
If you want to reduce traffic by preventing access to certain sites on the Internet, you can use the
VPN firewall’s filtering feature. By default, this feature is disabled; all requested traffic from any
website is allowed.
• Keyword (and Domain Name) Blocking. You can specify up to 32 words that, should they
appear in the website name (that is, URL) or in a newsgroup name, will cause that site or
newsgroup to be blocked by the VPN firewall.
You can apply the keywords to one or more groups. Requests from the PCs in the groups for
which keyword blocking has been enabled will be blocked. Blocking does not occur for the
PCs that are in the groups for which keyword blocking has not been enabled.
You can bypass keyword blocking for trusted domains by adding the exact matching domain
to the Trusted Domains table. Access to the domains in this table by PCs even in the groups
for which keyword blocking has been enabled will still be allowed without any blocking.
• Web Component blocking. You can block the following Web component types: Proxy, Java,
ActiveX, and Cookies. Sites on the Trusted Domains table are still subject to Web component
blocking when the blocking of a particular Web component has been enabled.
See “Blocking Internet Sites (Content Filtering)” on page 4-25 for the procedure on how to use
this feature.
Source MAC Filtering
If you want to reduce outgoing traffic by preventing Internet access by certain PCs on the LAN,
you can use the source MAC filtering feature to drop the traffic received from the PCs with the
specified MAC addresses. By default, this feature is disabled; all traffic received from PCs with
any MAC address is allowed.
See “Configuring Source MAC Filtering” on page 4-28 for the procedure on how to use this
feature.