Page 136 / 414 Scroll up to view Page 131 - 135
Firewall Protection
136
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Edit
.
Allows you to make any changes to the definition of an existing rule. Depending on
your selection, one of the following screens displays:
-
Edit LAN WAN Outbound Service screen for IPv4 (identical to
Figure 63
on page 138)
-
Edit LAN WAN Inbound Service screen for IPv4 (identical to
Figure 65
on page 140)
To change the default outbound policy for IPv6 traffic or to make changes to existing
IPv6 rules:
1.
Select
Security > Firewall
. The Firewall submenu tabs display with the LAN WAN
Rules screen for IPv4 in view
2.
In the upper right of the screen, select the
IPv6
radio button. The LAN WAN Rules screen
displays the IPv6 settings. (The following figure contains examples.)
Figure 62.
3.
From the Default Outbound Policy drop-down list, select
Block Always
. (By default, Allow
Always is selected.)
4.
Next to the drop-down list, click the
Apply
table button.
To make changes to an existing outbound or inbound service rule, in the Action column to the
right of to the rule, click one of the following table buttons:
Up
. Moves the rule up one position in the table rank.
Down
. Moves the rule down one position in the table rank.
Edit
.
Allows you to make any changes to the definition of an existing rule. Depending on
your selection, one of the following screens displays:
-
Edit LAN WAN Outbound Service screen for IPv6 (identical to
Figure 64
on page 139)
-
Edit LAN WAN Inbound Service screen for IPv6 (identical to
Figure 66
on page 141)
Page 137 / 414
Firewall Protection
137
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
To enable, disable, or delete one or more IPv4 or IPv6 rules:
1.
select the check box to the left of each rule that you want to enable, disable, or delete,
or click the
Select All
table button to select all rules.
2.
Click one of the following table buttons:
Enable
.
Enables the rule or rules. The ! status icon changes from a gray circle to a
green circle, indicating that the selected rule or rules are enabled. (By default, when a
rule is added to the table, it is automatically enabled.)
Disable
.
Disables the rule or rules. The ! status icon changes from a green circle to a
gray circle, indicating that the selected rule or rules are disabled.
Delete
.
Deletes the selected rule or rules.
Create LAN WAN Outbound Service Rules
You can define rules that specify exceptions to the default rules. By adding custom rules, you
can block or allow access based on the service or application, source or destination IP
addresses, and time of day. An outbound rule can block or allow traffic between an internal IP
LAN address and any external WAN IP address according to the schedule created on the
Schedule screen.
WARNING:
Make sure that you understand the consequences of a LAN WAN
outbound rule before you apply the rule. Incorrect configuration
might cause serious connection problems.
You can also tailor these rules to your specific needs (see
Administrator Tips
on page 126).
IPv4 LAN WAN Outbound Rules
To create a new IPv4 LAN WAN outbound rule:
1.
In the upper right of the LAN WAN Rules screen, select the
IPv4
radio button. The screen
displays the IPv4 settings (see
Figure 61
on page 135).
2.
Click the
Add
table button under the Outbound Services table. The Add LAN WAN
Outbound Service screen for IPv4 displays:
Page 138 / 414
Firewall Protection
138
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
Figure 63.
3.
Enter the settings as explained in
Table 32
on page 128. In addition to selections from the
Service, Action, and Log drop-down lists, you need to make selections from the following
drop-down lists:
LAN Users
WAN Users
Unless your selection from the Action drop-down list is BLOCK always, you also need to
make selections from the following drop-down lists:
Select Schedule
QoS Priority
Bandwidth Profile
NAT IP (This drop-down list is available only when the WAN mode is NAT. If you
select Single Address, the IP address specified should fall under the WAN subnet.)
4.
Click
Apply
to save your changes. The new rule is now added to the Outbound Services
table.
Page 139 / 414
Firewall Protection
139
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
IPv6 LAN WAN Outbound Rules
To create a new IPv6 LAN WAN outbound rule:
1.
In the upper right of the LAN WAN Rules screen, select the
IPv6
radio button. The screen
displays the IPv6 settings (see
Figure 62
on page 136).
2.
Click the
Add
table button under the Outbound Services table. The Add LAN WAN
Outbound Service screen for IPv6 displays:
Figure 64.
3.
Enter the settings as explained in
Table 32
on page 128. In addition to selections from the
Service, Action, and Log drop-down lists, you need to make selections from the following
drop-down lists:
LAN Users
WAN Users
Unless your selection from the Action drop-down list is BLOCK always, you also need to
make a selection from the following drop-down lists:
Select Schedule
QoS Priority
4.
Click
Apply
to save your changes. The new rule is now added to the Outbound Services
table.
Create LAN WAN Inbound Service Rules
The Inbound Services table lists all existing rules for inbound traffic. If you have not defined
any rules, no rules are listed. By default, all inbound traffic (from the Internet to the LAN) is
Page 140 / 414
Firewall Protection
140
ProSafe Wireless-N 8-Port Gigabit VPN Firewall FVS318N
blocked. Remember that allowing inbound services opens potential security holes in your
firewall. Enable only those ports that are necessary for your network.
WARNING:
Make sure that you understand the consequences of a LAN WAN
inbound rule before you apply the rule. Incorrect configuration
might cause serious connection problems. If you are configuring
the wireless VPN firewall from a remote connection, you might be
locked out.
IPv4 LAN WAN Inbound Service Rules
To create a new IPv4 LAN WAN inbound rule:
1.
In the upper right of the LAN WAN Rules screen, select the
IPv4
radio button. The screen
displays the IPv4 settings (see
Figure 61
on page 135).
2.
Click the
Add
table button under the Inbound Services table. The Add LAN WAN Inbound
Service screen for IPv4 displays:
Figure 65.

Rate

4.5 / 5 based on 2 votes.

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top