ZyXEL Communications ZyWall USG20-VPN, Руководство пользователя

Страница: 327 / 683

Chapter 20 Security Policy
USG20(W)-VPN Series User’s Guide
327
20.5 The Session Control Screen
Click Configuration > Security Policy > Session Control to display the Security Policy
Session Control screen. Use this screen to limit the number of concurrent NAT/Security Policy
sessions a client can use. You can apply a default limit for all users and individual limits for specific
users, addresses, or both. The individual limit takes priority if you apply both.
Action Use the drop-down list box to select what the Security Policy is to do with packets that
match this policy.
Select deny to silently discard the packets without sending a TCP reset packet or an ICMP
destination-unreachable message to the sender.
Select reject to discard the packets and send a TCP reset packet or an ICMP destination-
unreachable message to the sender.
Select allow to permit the passage of the packets.
Log matched
traffic Select whether to have the USG generate a log ( log ), log and alert ( log alert ) or not ( no )
when the policy is matched to the criteria listed above..
UTM Profile Use this section to apply anti- x profiles (created in the Configuration > UTM Profile
screens) to traffic that matches the criteria above. You must have created a profile first;
otherwise
none displays.
Use Log to generate a log ( log ), log and alert ( log alert ) or not ( no ) for all traffic that
matches criteria in the profile.
Content
Filter
Select a Content Filter profile from the list box; none displays if no profiles have been
created in the Configuration > UTM Profile > Content Filter screen.
Anti-Spam Select an Anti-Spam profile from the list box; none displays if no profiles have been created
in the Configuration > UTM Profile > Anti-Spam screen.
OK Click OK to save your customized settings and exit this screen.
Cancel Click Cancel to exit this screen without saving.
Table 127
Configuration > Security Policy > Policy Control > Add (continued)
LABEL DESCRIPTION