ZyXEL Communications Unified Security Gateway ZyWALL 300, User Manual

Page: 576 / 1156

Chapter 32 Application Patrol
ZyWALL USG 300 User’s Guide
576
Schedule Select a schedule that defines when the policy applies or select Create
Object
to configure a new one (see Chapter 43 on page 751 for details).
Otherwise, select any to make the policy always effective.
User Select a user name or user group to which to apply the policy. Use
Create new Object
if you need to configure a new user account (see
Section 40.2.1 on page 726 for details). Select any to apply the policy
for every user.
From Select the source zone of the traffic to which this policy applies.
To Select the destination zone of the traffic to which this policy applies.
Source Select a source address or address group for whom this policy applies.
Use Create new Object if you need to configure a new one. Select any
if the policy is effective for every source.
Destination Select a destination address or address group for whom this policy
applies. Use Create new Object if you need to configure a new one.
Select
any
if the policy is effective for every destination.
Protocol Select the protocol for which this condition applies. Choices are:
TCP
and UDP . Select any to apply the policy to both TCP and UDP traffic.
Access This field controls what the ZyWALL does with packets that match this
policy. Choices are:
forward - the ZyWALL routes the packets.
Drop
- the ZyWALL does not route the packets and does not notify the
client of its decision.
Reject
- the ZyWALL does not route the packets and notifies the client
of its decision.
DSCP Marking Set how the ZyWALL handles the DSCP value of the outgoing packets
that match this policy. Inbound refers to the traffic the ZyWALL sends to
a connection’s initiator. Outbound refers to the traffic the ZyWALL sends
out from a connection’s initiator.
Select one of the pre-defined DSCP values to apply or select User
Defined
to specify another DSCP value. The “
af
” choices stand for
Assured Forwarding. The number following the “ af ” identifies one of four
classes and one of three drop preferences. See Assured Forwarding (AF)
PHB for DiffServ on page 391 for more details.
Select
preserve
to have the ZyWALL keep the packets’ original DSCP
value.
Select
default
to have the ZyWALL set the DSCP value of the packets to
0.
Bandwidth
Management
Configure these fields to set the amount of bandwidth the application
can use. These fields only apply when
Access
is set to
forward
.
Table 152 AppPatrol > Other > Edit (continued)
LABEL DESCRIPTION