Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Customize Firewall Protection 
270 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
•Manage VPN Pass-Through in the IPv4 Network
•Manage VPN Pass-Through in the IPv6 Network
VPN Pass-Through
When the VPN firewall functions in NAT mode, all packets going to a remote VPN gateway 
are first filtered through NAT and then encrypted according to the VPN policy. For example, if 
a VPN client or gateway on the LAN side of the VPN firewall must connect to another VPN 
endpoint on the WAN side (placing the...

Customize Firewall Protection 
271  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
7. To block VPN pass-through, clear any of the following check boxes, which are selected by 
default to allow VPN pass-through:
•IPSec. Clearing this check box disables NAT filtering for IPSec tunnels.
•PPTP. Clearing this check box disables NAT filtering for PPTP tunnels.
•L2TP. Clearing this check box disables NAT filtering for L2TP tunnels.
8. Click the Apply button.
Your settings are saved.
Manage VPN...

Customize Firewall Protection 
272 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Security > Firewall > Attack Checks.
The Attack Checks screen displays the IPv4 settings.
7. In the upper right, select the IPv6 radio...

Customize Firewall Protection 
273  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
For the default administrative account, the default user name is admin and the default 
password is password.
4. If you changed the default domain or were assigned a domain, from the Domain menu, 
select the domain.
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Security > Firewall >...

Customize Firewall Protection 
274 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8. Enter the settings as described in the following table.
9. Click the Apply button.
Your settings are saved.
Manage Time-Out Periods for TCP, UDP, and ICMP Sessions
For IPv4 traffic, a TCP, UDP, or ICMP session expires if the VPN firewall does not process 
data for the session during the time-out period.
To manage the time-out periods for TCP, UDP, and ICMP sessions:
1. On your computer, launch an Internet...

Customize Firewall Protection 
275  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name...

Customize Firewall Protection 
276 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
•ICMP Timeout. 
For ICMP traffic, the default time-out period is 8 seconds.
8. Click the Apply button.
Your settings are saved.
Manage Multicast Pass-Through
Multicast pass-through is supported for IPv4 traffic only. The following sections provide 
information about managing multicast pass-through:
•Multicast Pass-Through
•Enable and Configure Multicast Pass-Through
•Remove One or More Multicast Source Addresses...

Customize Firewall Protection 
277  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
If you did not change the domain or were not assigned a domain, leave the menu 
selection at geardomain.
5. Click the Login button.
The Router Status screen displays.
6. Select Security > Firewall > IGMP. 
The IGMP screen displays. The following figure shows one alternate network as an 
example.
7. Select the Ye s radio button.
8. If you configured load balancing (see Configure Load Balancing Mode and Optional...

Customize Firewall Protection 
278 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
b. Click the Add button.
The multicast source address is added to the Alternate Networks table.
c. Repeat Step a and Step b for each multicast source address that you must add to 
the Alternate  Networks  table.
Remove One or More Multicast Source Addresses
The following procedure describes how to remove one or more multicast source addresses 
that you no longer need for a PPPoE or PPTP configuration.
To remove...

Customize Firewall Protection 
279  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
To enable ALG for SIP:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type...