ZyXEL Communications USG-300 - V2.20 ED 2, Руководство пользователя

Страница: 931 / 1149

Chapter 56 Troubleshooting
ZyWALL USG 300 User’s Guide
931
option. The ZyWALL classifies the firmware package as not being able to be
decompressed and deletes it.
You can upload the firmware package to the ZyWALL with the option enabled, so
you only need to clear the
Destroy compressed files that could not be
decompressed option while you download the firmware package. See Section
33.2.1 on page 591 for more on the anti-virus Destroy compressed files that
could not be decompressed option.
I changed the LAN IP address and can no longer access the Internet.
The ZyWALL automatically updates address objects based on an interface’s IP
address, subnet, or gateway if the interface’s IP address settings change.
However, you need to manually edit any address objects for your LAN that are not
based on the interface.
I configured application patrol to allow and manage access to a specific service
but access is blocked.
• If you want to use a service, make sure both the firewall and application patrol
allow the service’s packets to go through the ZyWALL.
• The ZyWALL checks firewall rules before it checks application patrol rules for
traffic going through the ZyWALL.
I configured application patrol to block use of a specific service but a few packet’s
still get through.
The ZyWALL allows the first eight packets to go through the firewall, regardless of
the application patrol policy for the application. The ZyWALL examines these first
eight packets to identify the application.
I configured policy routes to manage the bandwidth of TCP and UDP traffic but the
bandwidth management is not being applied properly.
It is recommended to use application patrol instead of policy routes to manage the
bandwidth of TCP and UDP traffic.