On the Partners tab, the LAN to Internet Access partner allows you to enable a Corente Virtual Services Gateway-based Internet firewall for your LAN. When this 'partner' is selected, the Use Connection Sharing (Port NAT) option can be selected and Tubes can be defined for this connection.

The Use Connection Sharing option will allow all computers on the internal network to use the Corente Virtual Services Gateway's WAN IP address as the source address for any traffic destined for the Internet. When packets return to the Location gateway from an external address, the destination address and port are converted back to the original source address and port number pair. Effectively, this creates a private internal network that is protected from the Internet by a public shield.

When the Tubes button is selected, you can enable a Firewall Policy between each of your User Groups/applications and the Internet to control both public access to your LAN and access to the Internet by users in each User Group.