ZyXEL Communications P-660W-T1 v2, Руководство пользователя

Страница: 109 / 244

P-660W-Tx v2 User’s Guide
109
C
H A P T E R
11
Firewall Configuration
11.1 Overview
This chapter shows you how to enable and configure the ZyXEL Device firewall. Use these
screens to enable and configure the firewall that protects your ZyXEL Device and network
from attacks by hackers on the Internet and control access to it. By default the firewall:
• allows traffic that originates from your LAN computers to go to all other networks.
• blocks traffic that originates on other networks from going to the LAN.
The following figure illustrates the default firewall action. User A can initiate an IM (Instant
Messaging) session from the LAN to the WAN (1). Return traffic for this session is also
allowed (2). However other traffic initiated from the WAN is blocked (3 and 4).
Figure 46 Default Firewall Action
11.1.1 What You Can Do in the Firewall Screens
• Use the main Firewall screen ( Section 11.2 on page 114 ) to enter the Default Policy , Rule
Summary , Anti Probing or Threshold screens.
• Use the Default Policy screen ( Section 11.3 on page 115 ) to activate the firewall.
• Use the Rule Summary screen ( Section 11.4 on page 116 ) to configure the firewall rules.
• Use the Anti Probing screen ( Section 11.5 on page 122 ) to set up anti-probing protection
for your ZyXEL Device.
• Use the Threshold screen ( Section 11.6 on page 123 ) to specify the TCP Maximum
Incomplete threshold and the action taken when the threshold is reached.
WAN
LAN
Internet
3
4
1
2
A