NETGEAR SRX5308 Router Manual PDF (Setup & Configuration Guide)

Page 151 / 469 Scroll up to view Page 146 - 150

Firewall Protection

151

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

The following configurations are optional:

•

Translate to Port Number

•

QoS Profile

•

Bandwidth Profile

3.

Click

Apply

to save your changes. The new rule is now added to the Inbound Services

table.

IPv6 LAN WAN Inbound Rules



To create an IPv6 LAN WAN inbound rule:

1.

In the upper right of the LAN WAN Rules screen, select the

IPv6

radio button. The screen

displays the IPv6 settings (see

Figure

76

on page

146).

2.

Click the

Add

table button under the Inbound Services table. The Add LAN WAN Inbound

Service screen for IPv6 displays:

Figure 80.

3.

Enter the settings as described in

Table

34

on page

141. In addition to selections from the

Service, Action, and Log drop-down lists, you need to make selections from the following

drop-down lists:

•

LAN Users

•

WAN Users

Unless your selection from the Action drop-down list is BLOCK always, you also need to

make a selection from the following drop-down list:

•

Select Schedule

4.

Click

Apply

to save your changes. The new rule is now added to the Inbound Services

table.

Page 152 / 469

Firewall Protection

152

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

Configure DMZ WAN Rules

•

Create DMZ WAN Outbound Service Rules

•

Create LAN WAN Inbound Service Rules

The firewall rules for traffic between the DMZ and the Internet are configured on the DMZ

WAN Rules screen. The default outbound policy is to block all traffic from and to the Internet.

You can then apply firewall rules to allow specific types of traffic either going out from the

DMZ to the Internet (outbound) or coming in from the Internet to the DMZ (inbound).

There is no drop-down list that lets you set the default outbound policy as there is on the LAN

WAN Rules screen. You can change the default outbound policy by enabling all outbound

traffic and then blocking only specific services from passing through the VPN firewall. You do

so by adding outbound services rules (see

Create DMZ WAN Outbound Service Rules

on

page

154).

Note:

Inbound rules on the LAN WAN Rules screen take precedence over

inbound rules on the DMZ WAN Rules screen. When an inbound

packet matches an inbound rule on the LAN WAN Rules screen, the

packet is not matched against the inbound rules on the DMZ WAN

Rules screen.



To access the DMZ WAN Rules screen for IPv4 or to change existing IPv4 rules:

Select

Security > Firewall > DMZ WAN Rules

.

In the upper right of the screen, the IPv4

radio button is selected by default. The DMZ WAN Rules screen displays the IPv4 settings.

(The following figure contains examples.)

Figure 81.

Page 153 / 469

Firewall Protection

153

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

To change an existing outbound or inbound service rule, in the Action column to the right of

the rule, click one of the following table buttons:

•

Up

. Moves the rule up one position in the table rank.

•

Down

. Moves the rule down one position in the table rank.

•

Edit

.

Lets you change the definition of an existing rule. Depending on your selection, one

of the following screens displays:

-

Edit DMZ WAN Outbound Service screen for IPv4 (identical to

Figure

83

on

page

154)

-

Edit DMZ WAN Inbound Service screen for IPv4 (identical to

Figure

85

on page

156)



To access the DMZ WAN Rules screen for IPv6 or to change existing IPv6 rules:

1.

Select

Security > Firewall > DMZ WAN Rules

. The Firewall submenu tabs display with

the DMZ WAN Rules screen for IPv4 in view.

2.

In the upper right of the screen, select the

IPv6

radio button. The DMZ WAN Rules screen

displays the IPv6 settings. (The following figure contains examples.)

Figure 82.

To change an existing outbound or inbound service rule, in the Action column to the right of

the rule, click one of the following table buttons:

•

Up

. Moves the rule up one position in the table rank.

•

Down

. Moves the rule down one position in the table rank.

•

Edit

.

Lets you change the definition of an existing rule. Depending on your selection, one

of the following screens displays:

-

Edit DMZ WAN Outbound Service screen for IPv6 (identical to

Figure

84

on

page

155)

-

Edit DMZ WAN Inbound Service screen for IPv6 (identical to

Figure

86

on page

157)

Page 154 / 469

Firewall Protection

154

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308



To enable, disable, or delete one or more IPv4 or IPv6 rules:

1.

Select the check box to the left of each rule that you want to enable, disable, or delete,

or click the

Select All

table button to select all rules.

2.

Click one of the following table buttons:

•

Enable

.

Enables the rule or rules. The ! status icon changes from a gray circle to a

green circle, indicating that the selected rule or rules are enabled. (By default, when a

rule is added to the table, it is automatically enabled.)

•

Disable

.

Disables the rule or rules. The ! status icon changes from a green circle to a

gray circle, indicating that the selected rule or rules are disabled.

•

Delete

.

Deletes the selected rule or rules.

Create DMZ WAN Outbound Service Rules

You can change the default outbound policy or define rules that specify exceptions to the

default outbound policy. By adding custom rules, you can block or allow access based on the

service or application, source or destination IP addresses, and time of day. An outbound rule

can block or allow traffic between the DMZ and any external WAN IP address according to

the schedule created on the Schedule screen.

IPv4 DMZ WAN Outbound Service Rules



To create an IPv4 DMZ WAN outbound rule:

1.

In the upper right of the DMZ WAN Rules screen, the IPv4 radio button is selected by

default. The screen displays the IPv4 settings (see

Figure

81

on page

152).

Click the

Add

table button under the Outbound Services table. The Add DMZ WAN

Outbound Service screen for IPv4 displays:

Figure 83.

Page 155 / 469

Firewall Protection

155

ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308

2.

Enter the settings as described in

Table

33

on page

137. In addition to selections from the

Service, Action, and Log drop-down lists, you need to make selections from the following

drop-down lists:

•

DMZ Users

•

WAN Users

Unless your selection from the Action drop-down list is BLOCK always, you also need to

make selections from the following drop-down lists:

•

Select Schedule

•

NAT IP (This drop-down list is available only when the WAN mode is NAT.)

The following configuration is optional:

•

QoS Profile

3.

Click

Apply

. The new rule is now added to the Outbound Services table. The rule is

automatically enabled.

IPv6 DMZ WAN Outbound Service Rules



To create an IPv6 DMZ WAN outbound rule:

1.

In the upper right of the DMZ WAN Rules screen, select the

IPv6

radio button. The screen

displays the IPv6 settings (see

Figure

82

on page

153).

2.

Click the

Add

table button under the Outbound Services table. The Add DMZ WAN

Outbound Service screen for IPv6 displays:

Figure 84.

3.

Enter the settings as described in

Table

33

on page

137. In addition to selections from the

Service, Action, and Log drop-down lists, you need to make selections from the following

drop-down lists:

•

DMZ Users

•

WAN Users

Rate

Popular NETGEAR Models

Famous Router IPs

Famous Router Companies

Bookmark Our Site

Share