ZyXEL Communications ZyWall USG 50-H Series, Руководство пользователя

Страница: 413 / 704

Chapter 26 Application Patrol/BWM
ZyWALL USG 50-H User’s Guide
413
The following table describes the labels in this screen. See Section 26.4.1 on page 414 for
more information as well.
Table 143 AppPatrol/BWM > Other
LABEL DESCRIPTION
# This field is a sequential value, and it is not associated with a specific condition.
Note: The ZyWALL checks conditions in the order they appear in
the list. While this sequence does not affect the functionality,
you might improve the performance of the ZyWALL by putting
more common conditions at the top of the list.
Port This field displays the specific port number to which this policy applies.
Schedule This is the schedule that defines when the policy applies. any means the policy
always applies.
User This is the user name or user group to which the policy applies. If any displays, the
policy applies to all users.
From This is the source zone of the traffic to which this policy applies.
To This is the destination zone of the traffic to which this policy applies.
Source This is the source address or address group for whom this policy applies. If any
displays, the policy is effective for every source.
Destination This is the destination address or address group for whom this policy applies. If any
displays, the policy is effective for every destination.
Protocol This is the protocol of the traffic to which this policy applies.
Access This field displays what the ZyWALL does with packets that match this policy.
forward - the ZyWALL routes the packets.
Drop - the ZyWALL does not route the packets and does not notify the client of its
decision.
Reject - the ZyWALL does not route the packets and notifies the client of its
decision.
DSCP Marking These fields show how the ZyWALL handles the DSCP value of the application’s
traffic that matches the policy (see
page 227 for details on DSCP). These fields
only apply when Access is set to forward . preserve means this policy does not
have the ZyWALL modify the DSCP value. default means the ZyWALL sets the
DSCP value to 0.
In - For the application’s traffic that matches the policy, this is how the ZyWALL
handles the DSCP value on the inbound traffic (the traffic the ZyWALL sends to a
connection’s initiator).
Out - For the application’s traffic that matches the policy, this is how the ZyWALL
handles the DSCP value on the outbound traffic (the traffic the ZyWALL sends out
from a connection’s initiator).