ZyXEL Communications Unified Security Gateway ZyWALL 300, Руководство пользователя

Страница: 830 / 1156

Chapter 50 System
ZyWALL USG 300 User’s Guide
830
The following table describes the labels in this screen.
50.7 WWW Overview
The following figure shows secure and insecure management of the ZyWALL
coming in from the WAN. HTTPS and SSH access are secure. HTTP, Telnet, and
dial-in management access are not secure.
Figure 545 Secure and Insecure Service Access From the WAN
• See Section 6.7.1 on page 113 for related information on these screens.
Note: To allow the ZyWALL to be accessed from a specified computer using a service,
make sure you do not have a service control rule or to-ZyWALL firewall rule to
block that traffic.
Table 243 Configuration > System > DNS > Service Control Rule Add
LABEL DESCRIPTION
Create new
Object
Use this to configure any new settings objects that you need to use in
this screen.
Address
Object
Select
ALL
to allow or deny any computer to send DNS queries to the
ZyWALL.
Select a predefined address object to just allow or deny the computer
with the IP address that you specified to send DNS queries to the
ZyWALL.
Zone Select
ALL
to allow or prevent DNS queries through any zones.
Select a predefined zone on which a DNS query to the ZyWALL is allowed
or denied.
Action Select
Accept
to have the ZyWALL allow the DNS queries from the
specified computer.
Select
Deny
to have the ZyWALL reject the DNS queries from the
specified computer.
OK Click OK to save your customized settings and exit this screen.
Cancel Click Cancel to exit this screen without saving