ZyXEL Communications ZyXEL ZyWALL P1, Руководство пользователя

Страница: 108 / 369

ZyWALL P1 User’s Guide
Chapter 7 Firewall Screens 107
7.6 Configuring Firewall
Click FIREWALL to open the Default Rule screen. Enable (or activate) the firewall by
selecting the Enable Firewall check box as seen in the following screen.
Figure 37 Firewall: Default Rule
The following table describes the labels in this screen.
7.6.1 Rule Summary
Note: The ordering of your rules is very important as rules are applied in turn.
Table 30 Firewall: Default Rule
LABEL DESCRIPTION
Enable Firewall Select this check box to activate the firewall. The ZyWALL performs access control
and protects against Denial of Service (DoS) attacks when the firewall is activated.
Allow
Asymmetrical
Route
Select this check box to have the ZyWALL firewall permit the use of triangle route
topology on the network. See Appendix E on page 295 for more on triangle route
topology.
Packet Direction This is the direction of travel of packets ( LAN to LAN/ZyWALL , LAN to WAN , WAN
to LAN , WAN to WAN/ZyWALL ).
Firewall rules are grouped based on the direction of travel of packets to which they
apply. For example, LAN to LAN/ZyWALL means packets traveling from a
computer/subnet on the LAN to either another computer/subnet on the LAN interface
of the ZyWALL or the ZyWALL itself.
Default Action Use the drop-down list boxes to select whether to Block (silently discard) or
Forward (allow the passage of) packets that are traveling in the selected direction.
Log Select the check box to create a log (when the above action is taken) for packets
that are traveling in the selected direction and do not match any of the rules below.
Apply Click Apply to save your changes back to the ZyWALL.
Cancel Click Cancel to begin configuring this screen afresh.