Netgear Netgar VPN FIrewall FVS336Gv2 Reference Manual

Optimize Performance and Manage Your System 
529  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
-Address range. The rule applies to a range of addresses.
-Groups. The rule applies to a group of computers. (You can configure groups for 
LAN WAN outbound rules but not for DMZ WAN outbound rules.) The Known PCs 
and Devices table is an automatically maintained list of all known computers and 
network devices and is generally referred to as the network database, (see 
Manage 
the Network Database...

Optimize Performance and Manage Your System 
530 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
To further narrow down the content filtering, you can configure groups to which the 
content-filtering rules apply and trusted domains for which the content-filtering rules do not 
apply.
Source MAC Filtering
If you want to reduce outgoing traffic by preventing Internet access by certain computers on 
the LAN, you can use the source MAC filtering feature to drop the traffic received from the...

Optimize Performance and Manage Your System 
531  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Add LAN WAN Rules on page 223 and Add DMZ WAN Rules on page 233.
When you define inbound firewall rules, you can further refine their application according to 
the following criteria:
•Services. You can specify the services or applications to be covered by an inbound rule. 
If the desired service or application does not display in the list, you must define it (see 
Inbound Rules — Port Forwarding on...

Optimize Performance and Manage Your System 
532 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Port Triggering
Port triggering allows some applications running on a LAN network to be available to external 
applications that would otherwise be partially blocked by the firewall. Using the port triggering 
feature requires that you know the port numbers used by the application. Without port 
triggering, the response from the external application would be treated as a new connection 
request...

Optimize Performance and Manage Your System 
533  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Use QoS and Bandwidth Assignment to Shift the Traffic Mix
By setting the Quality of Service (QoS) priority and assigning bandwidth profiles to firewall 
rules, you can shift the traffic mix to aim for optimum performance of the VPN firewall.
The following sections provide information about using QoS and bandwidth assignment to 
shift the traffic mix:
•Setting QoS Priorities
•Assigning Bandwidth...

Optimize Performance and Manage Your System 
534 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
System Management
The following sections provide information about system management:
•Set Up Remote Management Access
•Use the Command-Line Interface
•Use a Simple Network Management Protocol Manager
•Manage the Configuration File
•Revert to Factory Default Settings
•Configure Date and Time Service 
Set Up Remote Management Access
An administrator can configure, upgrade, and check the status of the...

Optimize Performance and Manage Your System 
535  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
Tip:If you are using a Dynamic DNS service such as TZO, you can 
identify the WAN IP address of your VPN firewall by running tracert 
from the Windows Run menu option. Trace the route to your 
registered FQDN. For example, enter
 tracert VPN 
firewall.mynetgear.net and the WAN IP address that your ISP 
assigned to the VPN firewall is displayed.
Configure Remote Access
The following procedure...

Optimize Performance and Manage Your System 
536 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
7. To configure remote management for IPv6, in the upper right, select the IPv6 radio button.
The Remote Management screen displays the IPv6 settings.
8. Enter the settings as described in the following table.
SettingDescription
Secure HTTP Management
Allow Secure HTTP 
Management?To enable secure HTTP management, select the Ye s radio button, which is the 
default setting. Selecting the No radio...

Optimize Performance and Manage Your System 
537  ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2
WARNING:
If you are remotely connected to the VPN firewall and you select the 
No radio button to disable secure HTTP management, you and all 
other SSL VPN users are disconnected when you click the Apply 
button.
9. Click the Apply button.
Your settings are saved.
Use the Command-Line Interface
You can access the command-line interface (CLI) using the console port on the back panel of 
the VPN...

Optimize Performance and Manage Your System 
538 ProSAFE Dual WAN Gigabit WAN SSL VPN Firewall FVS336Gv2 
Use a Simple Network Management Protocol Manager
Simple Network Management Protocol (SNMP) lets you monitor and manage the VPN 
firewall from an SNMP manager. The following sections provide information about using an 
SNMP manager:
•SNMP Overview
•Set Up an SNMP Configuration and Specify the Trap Events
•Change an SNMP Configuration
•Remove One or More SNMP Configurations
•View SNMPv3 Default Users...