Advanced Configuration; Configuring Advanced Security; Setting Up A Default Dmz Server - NETGEAR FVM318 Reference Manual

This chapter describes how to configure the advanced features of your FVM318 Cable/DSL
ProSafe Wireless VPN Security Firewall.

Configuring Advanced Security

The FVM318 Cable/DSL ProSafe Wireless VPN Security Firewall provides a variety of advanced
features, such as:
• Setting up a Demilitarized Zone (DMZ) Server
• The flexibility of configuring your LAN TCP/IP settings
These features are discussed below.

Setting Up A Default DMZ Server

The Default DMZ Server feature is helpful when using some online games and videoconferencing
applications that are incompatible with NAT. The firewall is programmed to recognize some of
these applications and to work properly with them, but there are other applications that may not
function well. In some cases, one local PC can run the application properly if that PC's IP address
is entered as the Default DMZ Server.
Note: When you need to assure secure network services, do not use the Default DMZ
Server feature. When a computer is designated as the Default DMZ Server, it loses much
of the protection of the firewall, and is exposed to many exploits from the Internet. If
compromised, the computer can be used to attack your network.
Incoming traffic from the Internet is normally discarded by the firewall unless the traffic is a
response to one of your local computers or a service that you have configured in the Ports menu.
Instead of discarding this traffic, you can have it forwarded to one computer on your network. This
computer is called the Default DMZ Server.

Advanced Configuration

Advanced Configuration
Chapter 7
7-1