ZyXEL Communications Internet Security Gateway ZyWALL 2 Series User Manual

Page 166

Advertising
background image

ZyWALL 2 Series User’s Guide

11-10

Firewall

Screens

The following table describes the fields in this screen.

Table 11-2 Creating/Editing A Firewall Rule

LABEL

DESCRIPTION

Active

Check the Active check box to have the ZyWALL use this rule. Leave it unchecked
if you do not want the ZyWALL to use the rule after you apply it

Packet
Direction

Use the drop-down list box to select the direction of packet travel to which you want
to apply this firewall rule.

Source Address Click SrcAdd to add a new address, SrcEdit to edit an existing one or SrcDelete

to delete one. Please see the next section for more information on adding and
editing source addresses.

Destination
Address

Click DestAdd to add a new address, DestEdit to edit an existing one or
DestDelete to delete one. Please see the following section on adding and editing
destination addresses.

Available/
Selected
Services

Please see Table 11-5 for more information on services available. Highlight a
service from the Available Services box on the left, then click >> to add it to the
Selected Services box on the right. To remove a service, highlight it in the
Selected Services box on the right, then click <<.

Custom Port

Add Click this button to bring up the screen that you use to configure a new custom

service that is not in the predefined list of services.

Edit Select a custom service (denoted by an “*”) from the Available Services list and

click this button to edit the service.

Delete Select a custom service (denoted by an “*”) from the Available Services list and

click this button to remove the service.

Block Services according to this schedule :

Day to Block Select everyday or the day(s) of the week to activate blocking.

Time of Day to

Block (24-Hour

Format)

Select All Day or enter the start and end times in the hour-minute format to activate
blocking.

Action for
Matched
Packets

Use the drop down list box to select whether to discard (Block) or allow the
passage of (Forward) packets that match this rule.

Advertising