ZyXEL Communications ZyWall USG 50-H Series, Руководство пользователя

Страница: 299 / 704

Chapter 18 Firewall
ZyWALL USG 50-H User’s Guide
299
18.2.2 The Firewall Edit Screen
In the Firewall screen, click the Edit or Add icon to display the Firewall Rule Edit screen.
Refer to the following table for information on the labels.
connection per
page Select how many entries you want to display on each page.
Page x of x This is the number of the page of entries currently displayed and the total number of
pages of entries. Type a page number to go to or use the arrows to navigate the
pages of entries.
# This is the index number of your firewall rule. It is not associated with a specific rule.
The entry with a hyphen (-) instead of a number is the default firewall behavior that
the ZyWALL performs on traffic that does not match any other traffic direction. Only
the access right and log alert are configurable for the default firewall rule. To apply
other behavior, configure a firewall rule that traffic will match so the ZyWALL will not
have to use it’s default behavior.
Priority This is the position of your firewall rule in the global rule list (including all through-
ZyWALL and to-ZyWALL rules). The ordering of your rules is important as rules are
applied in sequence. Default displays for the default firewall behavior that the
ZyWALL performs on traffic that does not match any other traffic direction. The
ZyWALL checks the traffic against any other applicable rules before applying this
default behavior.
Schedule This field tells you the schedule object that the rule uses. none means the rule is
active at all times if enabled.
User This is the user name or user group name to which this firewall rule applies.
Source This displays the source address object to which this firewall rule applies.
Destination This displays the destination address object to which this firewall rule applies.
Service This displays the service object to which this firewall rule applies.
Access This field displays whether the firewall silently discards packets ( deny ), discards
packets and sends a TCP reset packet to the sender ( reject ) or permits the
passage of packets ( allow ).
Log This field shows you whether a log (and alert) is created when packets match this
rule or not.
Add icon Click the Add icon in the heading row to add a new first entry.
The Active icon displays whether the rule is enabled or not. Click it to activate or
deactivate the rule. Make sure you click Apply to save and apply the change.
Click the Edit icon to go to the screen where you can edit the rule on the ZyWALL.
Click the Add icon in an entry to add a rule below the current entry.
Click the Remove icon to delete an existing rule from the ZyWALL. A window
displays asking you to confirm that you want to delete the rule. Note that
subsequent firewall rules move up by one when you take this action.
In a numbered list, click the
Move to N icon to display a field to type an index
number for where you want to put that rule and press [ENTER] to move the rule to
the number that you typed. For example, if you type 6, the rule you are moving
becomes number 6 and the previous rule 6 (if there is one) gets pushed up (or
down) one.
The ordering of your rules is important as they are applied in order of their
numbering.
Apply Click Apply to save your changes back to the ZyWALL.
Reset Click Reset to begin configuring this screen afresh.
Table 111 Firewall (continued)
LABEL DESCRIPTION