Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Customize Firewall Protection 
280 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
•Manage Quality of Service Profiles for IPv4 Firewall Rules
•Default Quality of Service Priorities for IPv6 Firewall Rules
•Manage Bandwidth Profiles for IPv4 Traffic
Firewall Objects
When you create inbound and outbound firewall rules, you use firewall objects such as 
services, groups, schedules, QoS profiles, and bandwidth profiles to narrow down the firewall 
rules:
•Services. A service narrows down a firewall...

Customize Firewall Protection 
281  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Services Overview
Examples of web servers that provide web services include the following: web servers 
provide web pages, time servers provide time and date information, and game hosts provide 
data about players’ moves. When a computer on the Internet sends a request for service to a 
server computer, the requested service is identified by a service or port number. This number 
appears as the destination port...

Customize Firewall Protection 
282 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
6. Select Security > Services. 
The Services screen displays. The Custom Services Table shows the user-defined 
services. The following figure shows some examples.
7. In the Add Customer Service section, enter the settings as described in the following table.
8. Click the Apply button.
Your settings are saved. The new custom service is added to the Custom Services table.
Change a Customized Service
The following...

Customize Firewall Protection 
283  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password / Passcode field, type 
your password.
For the default administrative account, the default user name...

Customize Firewall Protection 
284 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
To remove one or more customized services:
1. On your computer, launch an Internet browser.
2. In the address field of your browser, enter the IP address that was assigned to the VPN 
firewall during the installation process.
The VPN firewall factory default IP address is 192.168.1.1.
The NETGEAR Configuration Manager Login screen displays.
3. In the Username field, type your user name and in the Password /...

Customize Firewall Protection 
285  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
single firewall rule. For example, in a configuration with 10 web servers, each of which 
requires the same three port-forwarding rules, you can create a service group for the 
port-forwarding rules and an IP group for the web servers (see 
Manage IP Address Groups 
on page 288) and then create only one firewall rule.
Add a Service Group
The following procedure describes how to add a service group that you then...

Customize Firewall Protection 
286 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
8.In the Name field, enter a name for the service.
9.Specify the services for the group by use the move buttons (>) to move services 
between the Available Services field and the List of Selected Services field.
Note:You cannot combine TCP and UDP services in the same group.
10. Click the Apply button.
Your settings are saved. The new service group displays in the Custom Services Group 
table on the Service Groups...

Customize Firewall Protection 
287  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
6. Select Network Security > Services > Service Groups. 
The Service Group screen displays.
7. In the Custom Service Group Table, click the Edit button for the service group that you want 
to change. 
The Edit Service Group screen displays.
8. Change the settings.
For information about the settings, see Add a Service Group on page 285.
9. Click the Apply button.
Your settings are saved. The modified service group...

Customize Firewall Protection 
288 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Manage IP Address Groups
You can combine individual IP addresses into IP address groups. The following sections 
provide information about managing IP address groups:
•IP Address Groups Overview
•Add an IP Address Group
•Change an IP Address Group
•Remove One or More IP Address Groups
IP Address Groups Overview
An IP address group, or just IP group, contains a collection of individual IP addresses that do 
not...

Customize Firewall Protection 
289  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
6. Select Security > Services > IP Groups. 
The IP Groups screen displays. The following figure shows two groups in the Custom IP 
Groups Table as examples.
7. In the Add New Custom IP Group section, do the following:
•In the IP Group Name field, enter a name for the group.
•From the IP Group Type menu, select LAN Group or WAN Group.
8. Click the Apply button.
Your settings are saved. The new IP group is displayed...