NAT is available on the DMZ card (eth2). However, the Protector does not behave like a router, there is no DHCP server, so on the natted subnet they must have one, or use static IPs.
PPPoE is not avaiable.
The anti spam filter and the web filter are used by default in transparent mode. The Web Filter can also be used as explicit proxy, if necessary.