ZyXEL Communications NXC5200 User Manual page 261

Table 93 Configuration > Firewall > Add/Edit (continued)
LABEL
Schedule
User
Source
Destination
Service
Access
Log
OK
Cancel
NXC5200 User's Guide
DESCRIPTION
Select a schedule that defines when the rule applies. Otherwise, select
none and the rule is always effective.
This field is not available when you are configuring a to-NXC rule.
Select a user name or user group to which to apply the rule. The firewall
rule is activated only when the specified user logs into the system and
the rule will be disabled when the user logs out.
Otherwise, select any and there is no need for user logging.
Note: If you specified a source IP address (group) instead of any in
the field below, the user's IP address should be within the IP
address range.
Select a source address or address group for whom this rule applies.
Select any if the policy is effective for every source.
Select a destination address or address group for whom this rule
applies. Select any if the policy is effective for every destination.
Select a service or service group from the drop-down list box.
Use the drop-down list box to select what the firewall is to do with
packets that match this rule.
Select deny to silently discard the packets without sending a TCP reset
packet or an ICMP destination-unreachable message to the sender.
Select reject to deny the packets and send a TCP reset packet to the
sender. Any UDP packets are dropped without sending a response
packet.
Select allow to permit the passage of the packets.
Select whether to have the NXC generate a log (log), log and alert (log
alert) or not (no) when the rule is matched.
Click OK to save your customized settings and exit this screen.
Click Cancel to exit this screen without saving.
Chapter 18 Firewall
261