Home » Netgear Manuals » Network Security & Firewall Devices » Netgear FVS338NA » Manual Viewer

Netgear FVS338NA Reference Manual - Page 74

Outbound Rules Example - Blocking Instant Messenger

Add to My Manuals
Save this manual to your list of manuals

Page 74 highlights

FVS338 ProSafe VPN Firewall 50 Reference Manual 1. Select All protocols and ALLOW Always (or Allow by Schedule) 2. Place rule below all other inbound rules Figure 4-10 Outbound Rules Example - Blocking Instant Messenger Outbound rules let you prevent users from using applications such as AOL Instant Messenger, Real Audio or other non-essential sites. If you want to block AOL Instant Messenger usage by employees during working hours, you can create an outbound rule to block that application from any internal IP address to any external address according to the schedule that you have created in the Schedule menu. You can also have the firewall log any attempt to use Instant Messenger during that blocked period. 4-16 Firewall Protection and Content Filtering v1.0, September 2006

Section	Page
FVS338 ProSafe VPN Firewall 50 Reference Manual	1
Contents	7
About This Manual	13
Conventions, Formats and Scope	13
How to Use This Manual	14
How to Print this Manual	14
Revision History	15
Chapter 1 Introduction	17
Key Features	17
Full Routing on Both the Broadband and Serial WAN Ports	18
A Powerful, True Firewall with Content Filtering	18
Security	18
Autosensing Ethernet Connections with Auto Uplink	19
Extensive Protocol Support	19
Trend Micro Integration	20
Easy Installation and Management	20
Maintenance and Support	21
Package Contents	21
Router Hardware Components	21
Router Front Panel	22
Router Rear Panel	23
Rack Mounting Hardware	24
Factory Default Login	24
Chapter 2 Connecting the FVS338 to the Internet	27
Connecting the VPN Firewall to Your Network	27
Logging in to the VPN Firewall	27
Configuring your Internet Connection	28
Setting the Router’s MAC Address (Advanced Options)	33
Manually Configuring Your Internet Connection	35
Programming the Traffic Meter (if Desired)	38
Configuring the WAN Mode	41
Configuring Dynamic DNS (If Needed)	42
Chapter 3 LAN Configuration	45
Configuring Your LAN (Local Area Network)	45
Using the VPN Firewall as a DHCP Server	45
Configuring Multi-Home LAN IPs	48
Managing Groups and Hosts	49
Creating the Network Database	49
Setting Up Address Reservation	52
Configuring Static Routes	52
Static Route Example	53
RIP Configuration	54
Enabling Trend Micro Antivirus Enforcement	56
Chapter 4 Firewall Protection and Content Filtering	59
About Firewall Security	59
Using Rules to Block or Allow Specific Kinds of Traffic	59
Services-Based Rules	60
Order of Precedence for Firewall Rules	64
Setting LAN WAN Rules	65
LAN WAN Outbound Services Rules	66
LAN WAN Inbound Services Rules	67
Attack Checks	68
Inbound Rules Examples	70
Outbound Rules Example - Blocking Instant Messenger	74
Adding Customized Services	75
Specifying Quality of Service (QoS) Priorities	77
Setting a Schedule to Block or Allow Traffic	78
Setting Block Sites (Content Filtering)	79
Enabling Source MAC Filtering	81
Setting Up Port Triggering	82
E-Mail Notifications of Event Logs and Alerts	85
Administrator Information	89
Chapter 5 Virtual Private Networking	91
Dual WAN Port Systems	91
Setting up a VPN Connection using the VPN Wizard	92
Creating a VPN Tunnel to a Gateway	92
Creating a VPN Tunnel Connection to a VPN Client	93
IKE Policies	94
IKE Policy Operation	94
IKE Policy Table	95
VPN Policies	95
VPN Policy Operation	96
VPN Policy Table	96
VPN Tunnel Connection Status	97
Creating a VPN Gateway Connection: Between FVS338 and FVX538	98
Configuring the FVS338	98
Configuring the FVX538	101
Testing the Connection	102
Creating a VPN Client Connection: VPN Client to FVS338	102
Configuring the FVS338	103
Configuring the VPN Client	104
Testing the Connection	109
Extended Authentication (XAUTH) Configuration	110
Configuring XAUTH for VPN Clients	111
User Database Configuration	112
RADIUS Client Configuration	113
Manually Assigning IP Addresses to Remote Users (ModeConfig)	115
ModeConfig Operation	116
Setting Up ModeConfig	116
Configuring the ProSafe VPN Client for ModeConfig	120
Certificates	123
Trusted Certificates (CA Certificates)	123
Self Certificates	124
Managing your Certificate Revocation List (CRL)	127
Chapter 6 Router and Network Management	129
Performance Management	129
VPN Firewall Features That Reduce Traffic	129
VPN Firewall Features That Increase Traffic	132
Using QoS to Shift the Traffic Mix	135
Tools for Traffic Management	135
Administration	135
Changing Passwords and Settings	135
Enabling Remote Management Access	137
Using a SNMP Manager	139
Settings Backup and Firmware Upgrade	140
Setting the Time Zone	143
Monitoring the Router	144
Enabling the Traffic Meter	144
Setting Login Failures and Attacks Notification	146
Monitoring Attached Devices	148
Viewing Port Triggering Status	149
Viewing Router Configuration and System Status	150
Monitoring WAN Ports Status	151
Monitoring VPN Tunnel Connection Status	152
VPN Logs	153
DHCP Log	153
Performing Diagnostics	154
Chapter 7 Troubleshooting	157
Basic Functions	157
Power LED Not On	157
LEDs Never Turn Off	158
LAN or Internet Port LEDs Not On	158
Troubleshooting the Web Configuration Interface	158
Troubleshooting the ISP Connection	160
Troubleshooting a TCP/IP Network Using a Ping Utility	161
Testing the LAN Path to Your Firewall	161
Testing the Path from Your PC to a Remote Device	162
Restoring the Default Configuration and Password	163
Problems with Date and Time	163
Appendix A Default Settings and Technical Specifications	165
Appendix B Related Documents	169

Match case Limit results 1 per page

FVS338 ProSafe VPN Firewall 50 Reference Manual

4-16

Firewall Protection and Content Filtering

v1.0, September 2006

Outbound Rules Example – Blocking Instant Messenger

Outbound rules let you prevent users from using applications such as AOL Instant Messenger,

Real Audio or other non-essential sites.

If you want to block AOL Instant Messenger usage by employees during working hours, you can

create an outbound rule to block that application from any internal IP address to any external

address according to the schedule that you have created in the Schedule menu. You can also have

the firewall log any attempt to use Instant Messenger during that blocked period.

Figure 4-10

1. Select All protocols and ALLOW Always (or Allow by Schedule)

2. Place rule below all other inbound rules