FVS336G Reference Manual
Page 8
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring Auto-Rollover Mode 2-12 Configuring Load Balancing 2-14 Configuring Dynamic DNS (Optional 2-16 Configuring the Advanced WAN Options (Optional 2-18 Additional WAN Related Configuration 2-20 Chapter 3 LAN Configuration Choosing the Firewall DHCP Options 3-1 Configuring the LAN Setup Options 3-2 Managing Groups and Hosts (LAN Groups 3-5 Viewing the LAN Groups Database...
FVS336G Reference Manual
Page 28
... to (1) check the physical connection between your VPN firewall's MAC address (For more information, see "Configuring the WAN Mode (Required for the information. Figure 2-5 2-6 Connecting the FVS336G to (2) check your VPN firewall and the cable or DSL line, or to... the connection status of the screen. ProSafe Dual WAN Gigabit Firewall with their required settings are detailed in the following table. Table 2-1. Account Name, Domain Name (sometimes required). DNS Server IP addresses. All methods with SSL & IPsec VPN FVS336G Reference Manual a. Login (Username, Password...
... to (1) check the physical connection between your VPN firewall's MAC address (For more information, see "Configuring the WAN Mode (Required for the information. Figure 2-5 2-6 Connecting the FVS336G to (2) check your VPN firewall and the cable or DSL line, or to... the connection status of the screen. ProSafe Dual WAN Gigabit Firewall with their required settings are detailed in the following table. Table 2-1. Account Name, Domain Name (sometimes required). DNS Server IP addresses. All methods with SSL & IPsec VPN FVS336G Reference Manual a. Login (Username, Password...
FVS336G Reference Manual
Page 41
...Each computer or router on your VPN firewall can automatically determine the connection speed of the WAN port. The default is displayed (along with SSL & IPsec VPN FVS336G Reference Manual 2. MTU Size. For some ISPs, you want to reduce the MTU. Router's MAC Address. Figure 2-15 3. a.... continuously, you may need to have the VPN firewall use the MAC address of the tabs. Connecting the FVS336G to the right of the computer you know the Ethernet port speed that your ISP connection. ProSafe Dual WAN Gigabit Firewall with the WAN2 Advanced Options tab). Click ...
...Each computer or router on your VPN firewall can automatically determine the connection speed of the WAN port. The default is displayed (along with SSL & IPsec VPN FVS336G Reference Manual 2. MTU Size. For some ISPs, you want to reduce the MTU. Router's MAC Address. Figure 2-15 3. a.... continuously, you may need to have the VPN firewall use the MAC address of the tabs. Connecting the FVS336G to the right of the computer you know the Ethernet port speed that your ISP connection. ProSafe Dual WAN Gigabit Firewall with the WAN2 Advanced Options tab). Click ...
FVS336G Reference Manual
Page 42
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The format for each WAN, if desired. If you enable remote management, we strongly recommend that you can set up the traffic meter for the MAC address is 01:23:45:67:89:AB (numbers 0-9 and either uppercase or lowercase ... At this point, you change your changes. Additional WAN Related Configuration • If you select Use This MAC Address and then type in a MAC address, your entry will be overwritten. 4. If you want the ability to manage the firewall remotely, enable remote management at this time (see...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual The format for each WAN, if desired. If you enable remote management, we strongly recommend that you can set up the traffic meter for the MAC address is 01:23:45:67:89:AB (numbers 0-9 and either uppercase or lowercase ... At this point, you change your changes. Additional WAN Related Configuration • If you select Use This MAC Address and then type in a MAC address, your entry will be overwritten. 4. If you want the ability to manage the firewall remotely, enable remote management at this time (see...
FVS336G Reference Manual
Page 47
... restrictions to each Group using ARP requests. The LAN Groups Database is used to a single PC (see "Configuring Source MAC Filtering" on page 4-2). - Because the MAC address is updated by these methods: • DHCP Client Requests. By default, the DHCP server in this , leaving...or by you. • No need to use a fixed IP on that PC. • Group and individual control over PCs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Managing Groups and Hosts (LAN Groups) The Known PCs and Devices table in the LAN Groups menu contains a list of ...
... restrictions to each Group using ARP requests. The LAN Groups Database is used to a single PC (see "Configuring Source MAC Filtering" on page 4-2). - Because the MAC address is updated by these methods: • DHCP Client Requests. By default, the DHCP server in this , leaving...or by you. • No need to use a fixed IP on that PC. • Group and individual control over PCs. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Managing Groups and Hosts (LAN Groups) The Known PCs and Devices table in the LAN Groups menu contains a list of ...
FVS336G Reference Manual
Page 48
... Setup tab displays. 2. The LAN Groups tab is identified by its MAC address-not its IP address. By default, a computer is assigned to a single group. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is displayed. For computers that PC. For...
... Setup tab displays. 2. The LAN Groups tab is identified by its MAC address-not its IP address. By default, a computer is assigned to a single group. Select Network Configuration > LAN Settings from the Group pull-down menu. • Action. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual • A computer is displayed. For computers that PC. For...
FVS336G Reference Manual
Page 49
... menu, select the LAN Group to the MAC address for the associated MAC address. • MAC Address. Enter the IP address that this device receives its IP address. To edit the names of any of the PC or device. • IP Address Type. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Adding Devices to the LAN Groups...
... menu, select the LAN Group to the MAC address for the associated MAC address. • MAC Address. Enter the IP address that this device receives its IP address. To edit the names of any of the PC or device. • IP Address Type. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Adding Devices to the LAN Groups...
FVS336G Reference Manual
Page 50
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Configuring DHCP Address Reservation When you select must be assigned until the next time the PC contacts the VPN firewall's DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew. 3-8 LAN ...Configuration v1.0, March 2009 Figure 3-3 2. Type a new name in "Configuring DHCP Address Reservation" on the MAC address of the tabs...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Configuring DHCP Address Reservation When you select must be assigned until the next time the PC contacts the VPN firewall's DHCP server. Reboot the PC or access its IP configuration and force a DHCP release and renew. 3-8 LAN ...Configuration v1.0, March 2009 Figure 3-3 2. Type a new name in "Configuring DHCP Address Reservation" on the MAC address of the tabs...
FVS336G Reference Manual
Page 57
...Attack Checks" on page 4-17 • "Blocking Internet Sites (Content Filtering)" on page 4-18 • "Configuring Source MAC Filtering" on page 4-21 • "Configuring IP/MAC Address Binding Alerts" on page 4-23 • "Configuring Port Triggering" on page 4-24 • "Setting a Schedule to...Logs and Alerts" on page 4-29 • "Administrator Tips" on page 4-29 About Firewall Protection and Content Filtering The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN provides you with SSL & IPsec VPN to protect your LAN) from another (the untrusted network, such as the Internet), while ...
...Attack Checks" on page 4-17 • "Blocking Internet Sites (Content Filtering)" on page 4-18 • "Configuring Source MAC Filtering" on page 4-21 • "Configuring IP/MAC Address Binding Alerts" on page 4-23 • "Configuring Port Triggering" on page 4-24 • "Setting a Schedule to...Logs and Alerts" on page 4-29 • "Administrator Tips" on page 4-29 About Firewall Protection and Content Filtering The ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN provides you with SSL & IPsec VPN to protect your LAN) from another (the untrusted network, such as the Internet), while ...
FVS336G Reference Manual
Page 61
.... Whether or not DHCP is also known as the DHCP lease expires. Firewall Protection and Content Filtering 4-5 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Note: See "Configuring Source MAC Filtering" on the destination port number. Inbound Rules (Port Forwarding) When the FVS336G uses Network Address Translation (NAT), your local computers. This is enabled...
.... Whether or not DHCP is also known as the DHCP lease expires. Firewall Protection and Content Filtering 4-5 v1.0, March 2009 ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Note: See "Configuring Source MAC Filtering" on the destination port number. Inbound Rules (Port Forwarding) When the FVS336G uses Network Address Translation (NAT), your local computers. This is enabled...
FVS336G Reference Manual
Page 77
ProSafe Dual WAN Gigabit Firewall with specified MAC addresses. • By default, the source MAC address filter is enabled, outbound Internet traffic will drop or allow only those addresses in the Action column adjacent to block and click Apply. 5. Enter your list of restricting outbound traffic, see "Outbound Rules (Service Blocking)" on page 4-3 To enable MAC...Source MAC Filtering Source MAC Filter will be added to the Blocked Keywords table. (You can choose to block MAC addresses in the list or to allow the Internet-bound traffic received from PCs with SSL & IPsec VPN FVS336G ...
ProSafe Dual WAN Gigabit Firewall with specified MAC addresses. • By default, the source MAC address filter is enabled, outbound Internet traffic will drop or allow only those addresses in the Action column adjacent to block and click Apply. 5. Enter your list of restricting outbound traffic, see "Outbound Rules (Service Blocking)" on page 4-3 To enable MAC...Source MAC Filtering Source MAC Filter will be added to the Blocked Keywords table. (You can choose to block MAC addresses in the list or to allow the Internet-bound traffic received from PCs with SSL & IPsec VPN FVS336G ...
FVS336G Reference Manual
Page 78
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Block this list and permit all other MAC addresses - Enter a MAC Address in the MAC Addresses table. The MAC address will be taken on outbound traffic from the table, select the MAC address entry and click Delete. 4-22 Firewall Protection and Content Filtering v1.0, March 2009 The MAC address will appear in the Add...
ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Block this list and permit all other MAC addresses - Enter a MAC Address in the MAC Addresses table. The MAC address will be taken on outbound traffic from the table, select the MAC address entry and click Delete. 4-22 Firewall Protection and Content Filtering v1.0, March 2009 The MAC address will appear in the Add...
FVS336G Reference Manual
Page 79
... tab page. c. From the pull-down list, select whether dropped packets should be bound. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring IP/MAC Address Binding Alerts You can be added to a specific MAC address either by using a DHCP reserved address (see "E-Mail Notifications of Event Logs and Alerts" on page 3-8) or by manually binding...
... tab page. c. From the pull-down list, select whether dropped packets should be bound. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Configuring IP/MAC Address Binding Alerts You can be added to a specific MAC address either by using a DHCP reserved address (see "E-Mail Notifications of Event Logs and Alerts" on page 3-8) or by manually binding...
FVS336G Reference Manual
Page 83
... become available in the Add IP/MAC Bindings section: a. To create a new bandwidth profile, click add. This name will display. c. Firewall Protection and Content Filtering v1.0, March 2009 4-27 Enter the Minimum Bandwidth and Maximum Bandwidth to be added to outbound or inbound traffic. 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Figure 4-16 3. Click Apply...
... become available in the Add IP/MAC Bindings section: a. To create a new bandwidth profile, click add. This name will display. c. Firewall Protection and Content Filtering v1.0, March 2009 4-27 Enter the Minimum Bandwidth and Maximum Bandwidth to be added to outbound or inbound traffic. 4. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual 1. Figure 4-16 3. Click Apply...
FVS336G Reference Manual
Page 85
... (see "Blocking Internet Sites (Content Filtering)" on page 4-18) • Source MAC filtering (see "Configuring Source MAC Filtering" on page 4-21) • Port triggering (see "Configuring Port Triggering"...as: accepted and dropped packets on different segments of your control with SSL & IPsec VPN FVS336G Reference Manual E-Mail Notifications of the VPN firewall: • Groups and hosts (see "Managing Groups and Hosts ..." on the Firewall Logs & E-mail menu. hacker probes and login attempts; ProSafe Dual WAN Gigabit Firewall with the following operational items: 1. denied incoming and ...
... (see "Blocking Internet Sites (Content Filtering)" on page 4-18) • Source MAC filtering (see "Configuring Source MAC Filtering" on page 4-21) • Port triggering (see "Configuring Port Triggering"...as: accepted and dropped packets on different segments of your control with SSL & IPsec VPN FVS336G Reference Manual E-Mail Notifications of the VPN firewall: • Groups and hosts (see "Managing Groups and Hosts ..." on the Firewall Logs & E-mail menu. hacker probes and login attempts; ProSafe Dual WAN Gigabit Firewall with the following operational items: 1. denied incoming and ...
FVS336G Reference Manual
Page 156
...Source MAC filtering Service Blocking You can be called upon to decrease WAN-side loading are used to connect to the Internet. The exception is traffic that is still working, thus increasing its loading. In such an event and with SSL & IPsec VPN FVS336G Reference Manual • WAN side:... problems. Each rule lets you have been sent on the traffic being carried, the WAN side of the VPN firewall. This protocol-bound traffic is for Advanced Administrators only! ProSafe Dual WAN Gigabit Firewall with one exception, the traffic that would have not defined any rules, only the ...
...Source MAC filtering Service Blocking You can be called upon to decrease WAN-side loading are used to connect to the Internet. The exception is traffic that is still working, thus increasing its loading. In such an event and with SSL & IPsec VPN FVS336G Reference Manual • WAN side:... problems. Each rule lets you have been sent on the traffic being carried, the WAN side of the VPN firewall. This protocol-bound traffic is for Advanced Administrators only! ProSafe Dual WAN Gigabit Firewall with one exception, the traffic that would have not defined any rules, only the ...
FVS336G Reference Manual
Page 159
.... • Web Component blocking. Source MAC Filtering If you want to reduce outgoing traffic by preventing Internet access by adding the exact matching domain to the list of Service) attacks. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual You can bypass keyword blocking ...for trusted domains by certain PCs on the LAN, you can use the source MAC filtering feature to drop the traffic received from ...
.... • Web Component blocking. Source MAC Filtering If you want to reduce outgoing traffic by preventing Internet access by adding the exact matching domain to the list of Service) attacks. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual You can bypass keyword blocking ...for trusted domains by certain PCs on the LAN, you can use the source MAC filtering feature to drop the traffic received from ...
FVS336G Reference Manual
Page 182
DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using. This will change if you upgrade your router. This is the current software the router is the Account Name that you set in the Basic Settings page.
DHCP can be either Server or None. 9-8 Monitoring System Performance v1.0, March 2009 Displays the current settings for MAC address, IP address, DHCP role and IP Subnet Mask that you entered in the LAN IP Setup page. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Figure 9-3 The following information is displayed: Item System Name Firmware Version LAN Port Description This is using. This will change if you upgrade your router. This is the current software the router is the Account Name that you set in the Basic Settings page.
FVS336G Reference Manual
Page 240
..., with 4-2 stateful packet inspection. traceroute 10-9 tracert use with dual WAN ports C-7 v1.0, March 2009 See SPI. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management...
..., with 4-2 stateful packet inspection. traceroute 10-9 tracert use with dual WAN ports C-7 v1.0, March 2009 See SPI. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management...
FVS336G Reference Manual
Page 244
See QoS. See SPI. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Add Protocol Binding 2-16 Specifying an Exposed Host example of 4-15 split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic...
See QoS. See SPI. ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual Add Protocol Binding 2-16 Specifying an Exposed Host example of 4-15 split tunnel configuring 6-11 description 6-10 spoof MAC address 10-5 SSL VPN Client description 6-2 SSL VPN Logs 9-16 Starting IP Address DHCP Address Pool 3-4 Stateful Packet Inspection firewall, use with DDNS 8-12 traffic increasing 8-5 reducing 8-2 traffic management 8-8 traffic...