Quick Reference Guide

ProSafe VPN Firewall 50 FVS338 Reference Manual
6-2 VPN Firewall and Network Management
v1.0, January 2010
VPN Firewall Features That Reduce Traffic
Features of the VPN firewall that can be called upon to decrease WAN-side loading are as follows:
• Service blocking
• Blocking sites
• Source MAC filtering
Service Blocking
You can control specific outbound traffic (for example, from LAN to WAN). The LAN WAN
Rules screen lists all existing rules for outbound traffic. If you have not defined any rules, only the
default rule will be listed. The default rule allows all outgoing traffic. (See “Using Rules to Block
or Allow Specific Kinds of Traffic” on page 4-2 for the procedure on how to use this feature.)
Each rule lets you specify the desired action for the connections covered by the rule:
•BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
As you define your firewall rules, you can further refine their application according to the
following criteria:
• LAN Users. These settings determine which computers on your network are affected by this
rule. Select the desired options:
– Any. All PCs and devices on your LAN.
– Single address. The rule will be applied to the address of a particular PC.
– Address range. The rule is applied to a range of addresses.
– Groups. The rule is applied to a group (you use the Network Database to assign PCs to
groups—see “Managing Groups and Hosts” on page 3-6).
• WAN Users. These settings determine which Internet locations are covered by the rule, based
on their IP address.
– Any. The rule applies to all Internet IP address.
Warning: This feature is for advanced administrators only! Incorrect configuration will
cause serious problems.