Quick Reference Guide

ProSafe VPN Firewall 200 FVX538 Reference Manual
VPN Firewall and Network Management 6-7
v1.0, January 2010
As such, it would be handled in accordance with the Port Forwarding rules.
– Only one PC can use a port triggering application at any time.
– After a PC has finished using a port triggering application, there is a time-out period
before the application can be used by another PC. This is required because the firewall
cannot be sure when the application has terminated.
See “Configuring Port Triggering” on page 4-37 for the procedure on how to use this feature.
DMZ Port
The DMZ Setup screen allows you to set up the DMZ port. Specifying a Default DMZ server
allows you to set up a computer or server that is available to anyone on the Internet for services
that you haven't defined.
The default setting of the rules is that the DMZ port and both inbound and outbound traffic is
disabled. Enabling the DMZ port increases the traffic through the WAN ports.
The VPN firewall makes LAN port 8 a dedicated hardware DMZ port when DMZ is enabled (see
“VPN Firewall Front and Rear Panels” on page 1-6).
See “Configuring and Enabling the DMZ Port” on page 3-11 and “Configuring DMZ WAN Rules”
on page 4-12 for the procedure on how to use this feature.
VPN Tunnels
The VPN firewall permits up to 200 VPN tunnels at a time. Each tunnel requires extensive
processing for encryption and authentication.
See Chapter 5, “Virtual Private Networking” for the procedure on how to use this feature.
Using QoS to Shift the Traffic Mix
The QoS priority settings determine the priority and, in turn, the quality of service for the traffic
passing through the VPN firewall. The QoS is set individually for each service.
• You can accept the default priority defined by the service itself by not changing its QoS
setting.
• You can change the priority to a higher or lower value than its default setting to give the
service higher or lower priority than it otherwise would have.
The QoS priority settings conform to the IEEE 802.1D-1998 (formerly 802.1p) standard for class
of service tag.