Quick Reference Guide

4-1
v1.0, January 2010
Chapter 4
Firewall Protection and Content Filtering
The ProSafe VPN Firewall 50 FVS338 provides you with Web content filtering options such as
block sites and keyword blocking. This chapter includes the following sections:
“About Firewall Security and Content Filtering” on this page
“Using Rules to Block or Allow Specific Kinds of Traffic” on page 4-2
“Configuring Other Firewall Features” on page 4-15
“Creating Services, QoS Profiles, and Bandwidth Profiles” on page 4-20
“Setting a Schedule to Block or Allow Specific Traffic” on page 4-25
“Blocking Internet Sites (Content Filtering)” on page 4-26
“Configuring Source MAC Filtering” on page 4-29
“Configuring IP/MAC Address Binding” on page 4-31
“Configuring Port Triggering” on page 4-33
“E-Mail Notifications of Event Logs and Alerts” on page 4-36
“Administrator Tips” on page 4-36
About Firewall Security and Content Filtering
The VPN firewall provides you with Web content filtering options, plus browsing activity
reporting and instant alerts via e-mail. Parents and network administrators can establish restricted
access policies based on time-of-day, Web addresses and Web address keywords. You can also
block Internet access by applications and services, such as chat or games.
A firewall is a special category of router that protects one network (the “trusted” network, such as
your LAN) from another (the untrusted network, such as the Internet), while allowing
communication between the two. You can further segment keyword blocking to certain known
groups (see “Managing Groups and Hosts” on page 3-6 to set up LAN Groups).
A firewall incorporates the functions of a NAT (Network Address Translation) router, while
adding features for dealing with a hacker intrusion or attack, and for controlling the types of traffic
that can flow between the two networks. Unlike simple Internet sharing NAT routers, a firewall
uses a process called stateful packet inspection to protect your network from attacks and