Service Control Rules - ZyXEL Communications ZyWall ATP series User Manual

Table 314 Configuration > System > SSH (continued)
LABEL
Server Certificate
Service Control
Add
Edit
Remove
Move
#
Zone
Address
Action
Apply
Reset

37.8.5 Service Control Rules

Click the Add or Edit icon in the Service Control table to add a service control rule.
Figure 492 Configuration > System > SSH > Service Control Rule Add/Edit
The following table describes the labels in this screen.
Table 315 Configuration > System > SSH > Service Control Rule Add/Edit
LABEL
Create new
Object
Address Object
Zone
Chapter 37 System
DESCRIPTION
Select the certificate whose corresponding private key is to be used to identify the Zyxel
Device for SSH connections. You must have certificates already configured in the My
Certificates screen.
This specifies from which computers you can access which Zyxel Device zones.
Click this to create a new entry. Select an entry and click Add to create a new entry after the
selected entry. Refer to Table 312 on page 711
Double-click an entry or select it and click Edit to be able to modify the entry's settings.
To remove an entry, select it and click Remove. The Zyxel Device confirms you want to remove
it before doing so. Note that subsequent entries move up by one when you take this action.
To change an entry's position in the numbered list, select the method and click Move to
display a field to type a number for where you want to put it and press [ENTER] to move the rule
to the number that you typed.
This the index number of the service control rule.
This is the zone on the Zyxel Device the user is allowed or denied to access.
This is the object name of the IP address(es) with which the computer is allowed or denied to
access.
This displays whether the computer with the IP address specified above can access the Zyxel
Device zone(s) configured in the Zone field (Accept) or not (Deny).
Click Apply to save your changes back to the Zyxel Device.
Click Reset to return the screen to its last-saved settings.
DESCRIPTION
Use this to configure any new settings objects that you need to use in this screen.
Select ALL to allow or deny any computer to communicate with the Zyxel Device using SSH.
Select a predefined address object to just allow or deny the computer with the IP address that
you specified to access the Zyxel Device using SSH.
Select ALL to allow or prevent any Zyxel Device zones from being accessed using SSH.
Select a predefined Zyxel Device zone on which a incoming service is allowed or denied.
ZyWALL ATP Series User's Guide
for details on the screen that opens.
726