ZyXEL Communications ZyXEL ZyWALL 35 - Manual (Page 187)

ZyWALL 35 User’s Guide
Chapter 10 Firewall Screens 185
C
H A P T E R
10
Firewall Screens
This chapter shows you how to configure your ZyWALL firewall.
10.1 Access Methods
The web configurator is, by far, the most comprehensive firewall configuration tool your
ZyWALL has to offer. For this reason, it is recommended that you configure your firewall
using the web configurator. SMT screens allow you to activate the firewall. CLI commands
provide limited configuration options and are only recommended for advanced users, please
refer to
Appendix N Firewall Commands for firewall CLI commands.
10.2 Firewall Policies Overview
Firewall rules are grouped based on the direction of travel of packets to which they apply:
By default, the ZyWALL’s stateful packet inspection allows packets traveling in the following
directions:
• LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between
networks or subnets connected to the LAN interface.
• LAN to WAN
• LAN to DMZ
• WAN to DMZ
• DMZ to WAN
By default, the ZyWALL’s stateful packet inspection blocks packets traveling in the following
directions:
• LAN to LAN/ZyWALL • WAN to LAN • DMZ to LAN
• LAN to WAN • WAN to WAN/ZyWALL • DMZ to WAN
• LAN to DMZ • WAN to DMZ • DMZ to DMZ/ZyWALL
Note: The LAN includes both the LAN port and the WLAN.