ZyXEL Communications Unified Security Gateway ZyWALL 300, User Manual

Page: 574 / 1156

Chapter 32 Application Patrol
ZyWALL USG 300 User’s Guide
574
Destination This is the destination address or address group for whom this policy
applies. If
any
displays, the policy is effective for every destination.
Protocol This is the protocol of the traffic to which this policy applies.
Access This field displays what the ZyWALL does with packets that match this
policy.
forward
- the ZyWALL routes the packets.
Drop - the ZyWALL does not route the packets and does not notify the
client of its decision.
Reject - the ZyWALL does not route the packets and notifies the client
of its decision.
DSCP Marking This is how the ZyWALL handles the DSCP value of the outgoing packets
that match this policy.
In
- Inbound, the traffic the ZyWALL sends to a connection’s initiator.
Out - Outbound, the traffic the ZyWALL sends out from a connection’s
initiator.
If this field displays a DSCP value, the ZyWALL applies that DSCP value
to the route’s outgoing packets.
preserve means the ZyWALL does not modify the DSCP value of the
route’s outgoing packets.
default means the ZyWALL sets the DSCP value of the route’s outgoing
packets to 0.
The “ af ” choices stand for Assured Forwarding. The number following
the “
af
” identifies one of four classes and one of three drop preferences.
See Assured Forwarding (AF) PHB for DiffServ on page 391 for more
details.
BWM These fields show the amount of bandwidth the traffic can use. These
fields only apply when Access is set to forward .
In
- This is how much inbound bandwidth, in kilobits per second, this
policy allows the matching traffic to use. Inbound refers to the traffic the
ZyWALL sends to a connection’s initiator. If
no
displays here, this policy
does not apply bandwidth management for the inbound traffic.
Out
- This is how much outgoing bandwidth, in kilobits per second, this
policy allows the matching traffic to use. Outbound refers to the traffic
the ZyWALL sends out from a connection’s initiator. If
no
displays here,
this policy does not apply bandwidth management for the outbound
traffic.
Pri - This is the priority for the traffic that matches this policy. The
smaller the number, the higher the priority. Traffic with a higher priority
is given bandwidth before traffic with a lower priority. The ZyWALL
ignores this number if the incoming and outgoing limits are both set to
0. In this case the traffic is automatically treated as being set to the
lowest priority (7) regardless of this field’s configuration.
Table 151 AppPatrol > Other (continued)
LABEL DESCRIPTION