ZyXEL Communications ZyWall USG 50-H Series, Руководство пользователя

Страница: 408 / 704

Chapter 26 Application Patrol/BWM
ZyWALL USG 50-H User’s Guide
408
The following table describes the labels in this screen.
Table 141 Application Edit
LABEL DESCRIPTION
Service
Enable
Service Select this check box to turn on patrol for this application.
Service
Identification
Name This field displays the name of the application.
Classification Specify how the ZyWALL should identify this application. Choices are:
Auto - the ZyWALL identifies this application by matching the IP payload with the
application’s pattern(s).
Service Ports - the ZyWALL identifies this application by looking at the destination
port in the IP header.
Service Port This is available if the Classification is Service Ports . You can view and edit the
ports used to identify this application.
Add icon When the Classification is Service Ports , this column provides icons to add and
remove port numbers used to identify the application.
Click
Add add a port number. Type the destination port number in the Service Port
field.
Click
Remove to delete a port number. The web configurator confirms that you
want to delete the port number before doing so.
Policy This table lists the policies configured for this application.
# This field is a sequential value, and it is not associated with a specific condition.
Note: The ZyWALL checks conditions in the order they appear in
the list. While this sequence does not affect the functionality,
you might improve the performance of the ZyWALL by putting
more common conditions at the top of the list.
Port This field displays the specific port number to which this policy applies.
Schedule This is the schedule that defines when the policy applies. any means the policy is
active at all times if enabled.
User This is the user name or user group to which the policy applies. If any displays, the
policy applies to all users.
From This is the source zone of the traffic to which this policy applies.
To This is the destination zone of the traffic to which this policy applies.
Source This is the source address or address group for whom this policy applies. If any
displays, the policy is effective for every source.
Destination This is the destination address or address group for whom this policy applies. If any
displays, the policy is effective for every destination.
Access This field displays what the ZyWALL does with packets for this application that
match this policy.
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and does not
notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and notifies the
client of its decision.