NETGEAR ProSafe FVS124G - Manual (Page 89)

Reference Manual for the ProSafe VPN Firewall 25 with 4 Gigabit LAN and Dual WAN Ports
Firewall Protection and Content Filtering 6-13
202-10085-01, March 2005
Note: See “Source MAC Filtering” on page 6-27 for yet another way to block outbound
traffic from selected PCs that would otherwise be allowed by the firewall.
Table 6-1. Outbound Services
Item Description
Services Select the desired Service or application to be covered by this rule. If the desired
service or application does not appear in the list, you must define it using the
Services menu (see
“Customized Services” on page 6-16 ).
Action Select the desired action for outgoing connections covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
Note: Any outbound traffic which is not blocked by rules you create will be allowed by
the Default rule.
ALLOW rules are only useful if the traffic is already covered by a BLOCK rule. That
is, you wish to allow a subset of traffic that is currently blocked by another rule.
Select Schedule Select the desired time schedule (i.e., Schedule1, Schedule2, or Schedule3) that will
be used by this rule.
• This drop down menu gets activated only when "BLOCK by schedule, otherwise
Allow" or "ALLOW by schedule, otherwise Block" is selected as Action.
• Use schedule page to configure the time schedules (see “Using a Schedule to
Block or Allow Specific Traffic” on page 6-22 ).
LAN users These settings determine which computers on your network are affected by this rule.
Select the desired options:
• Any - All PCs and devices on your LAN.
• Single address - Enter the required address and the rule will be applied to that
particular PC.
• Address range - If this option is selected, you must enter the start and finish fields.
• Groups- Select the Group you wish this rule to apply to. You can use the Network
Database screen to assign PCs to Groups. See “Managing Groups and Hosts” on
page 6-20 .
WAN Users These settings determine which Internet locations are covered by the rule, based on
their IP address. Select the desired option:
• Any - All Internet IP address are covered by this rule.
• Single address - Enter the required address in the start fields.
• Address range - If this option is selected, you must enter the start and finish fields.