SMC Networks SMCBR21VPN - Manual (Page 171)

170
(4) LAN to DMZ: The source IP is in LAN network; the destination is in DMZ
network. The system manager can set all the policy rules of LAN to DMZ
packets in this function
(5) DMZ to LAN: The source IP is in DMZ network; the destination is in LAN
network. The system manager can set all the policy rules of DMZ to LAN
packets in this function
(6) DMZ to WAN: The source IP is in DMZ network; the destination is in
WAN network. The system manager can set all the policy rules of DMZ
to WAN packets in this function
All the packets that go through SMC BR21VPN must pass the policy permission
(except VPN). Therefore, the LAN, WAN, and DMZ network have to set the applicable
policy when establish network connection.