Quick Reference Guide

44 | Chapter 4: Firewall Protection and Content Filtering
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336Gv2 Reference Manual
• Customized Services. Additional services can be added to the list of services in the
factory default list. These added services can then have rules defined for them to either
allow or block that traffic (see “Adding Customized Services” on page 57).
• Quality of Service (QoS) priorities. Each service at its own native priority that impacts
its quality of performance and tolerance for jitter or delays. You can change this QoS
priority if desired to change the traffic mix through the system (see “Setting Quality of
Service (QoS) Priorities” on page 58).
Outbound Rules (Service Blocking)
The VPN firewall allows you to block the use of certain Internet services by PCs on your
network. This is called service blocking or port filtering.
The default policy can be changed to block all outbound traffic and enable only specific
services to pass through the VPN firewall. The following Outbound Rules table lists the
configured rules for outgoing traffic. An outbound rule is defined by the fields shown in the
following table.
Table 4-3. Outbound Rules
Item Description
Service Select the desired service or application to be covered by this rule. If the desired
service or application does not appear in the table, you must define it using the
Services screen (see “Adding Customized Services” on page 57).
Action Select the desired action for outgoing connections covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise Allow
• ALLOW always
• ALLOW by schedule, otherwise Block
Note: Any outbound traffic that is not blocked by rules you create will be allowed by
the default rule.
ALLOW rules are only useful if the traffic is already covered by a BLOCK rule. That
is, you wish to allow a subset of traffic that is currently blocked by another rule.
Select Schedule Select the desired time schedule (Schedule1, Schedule2, or Schedule3) that will be
used by this rule.
• This drop-down list gets activated only when “BLOCK by schedule, otherwise
Allow” or “ALLOW by schedule, otherwise Block” is selected as Action.
• Use schedule screen to configure the time schedules (see “Setting a Schedule to
Block or Allow Specific Traffic” on page 61).
LAN Users Specifies which computers on your network are affected by this rule. Select the
desired options:
• Any – All PCs and devices on your LAN.
• Single address – Enter the required address and the rule will be applied to that
particular PC.
• Address range – If this option is selected, you must enter the start and finish
fields.
• Groups – Select the Group to which this rule will apply. Use the LAN Groups
screen (under Network Configuration) to assign PCs to Groups. See “Managing
Groups and Hosts (LAN Groups)” on page 34.