ZyXEL Communications ZyXEL ZyWALL P1 - Manual (Page 104)

ZyWALL P1 User’s Guide
Chapter 7 Firewall Screens 103
C
H A P T E R
7
Firewall Screens
This chapter shows you how to configure your ZyWALL firewall.
7.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your
ZyWALL has to offer. For this reason, it is recommended that you configure your firewall
using the web configurator. CLI commands provide limited configuration options and are only
recommended for advanced users, please refer to
Appendix J on page 331 for firewall CLI
commands.
7.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
By default, the ZyWALL’s stateful packet inspection allows packets traveling in the following
directions:
• LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between
networks or subnets connected to the LAN interface.
• LAN to WAN
By default, the ZyWALL’s stateful packet inspection blocks packets traveling in the following
directions:
• WAN to LAN
• WAN to WAN/ZyWALL
This prevents computers on the WAN from using the ZyWALL as a gateway to
communicate with other computers on the WAN and/or managing the ZyWALL.
You may define additional rules and sets or modify existing ones but please exercise extreme
caution in doing so.
• LAN to LAN/ZyWALL • WAN to LAN
• LAN to WAN • WAN to WAN/ZyWALL