ZyXEL Communications VANTAGE CNM User Manual page 179

• LAN to WAN• WAN to WAN/ZyWALL• DMZ to WAN
• LAN to DMZ
• WAN to DMZDMZ to DMZ/ZyWALL
By default, the ZyXEL device's stateful packet inspection allows packets traveling in the
following directions:
• LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between
networks or subnets connected to the LAN interface.
• LAN to WAN
• LAN to DMZ
• WAN to DMZ
• DMZ to WAN
By default, the ZyXEL device's stateful packet inspection blocks packets traveling in the
following directions:
• WAN to LAN
• WAN to WAN/ZyWALL
This prevents computers on the WAN from using the ZyXEL device as a gateway to
communicate with other computers on the WAN and/or managing the ZyXEL device.
• DMZ to LAN
• DMZ to DMZ/ZyWALL
This prevents computers on the DMZ from communicating between networks or subnets
connected to the DMZ interface and/or managing the ZyXEL device.
You may define additional rules and sets or modify existing ones but please exercise extreme
caution in doing so.
For example, you may create rules to:
Chapter 12 Configuration > Firewall
Note: DMZ is not available on all models. If a device has no DMZ
port, the DMZ configuration menu will be grayed out.
Note: If you configure firewall rules without a good
understanding of how they work, you might inadvertently
introduce security risks to the firewall and to the protected
network. Make sure you test your rules after you configure
them.
Vantage CNM User's Guide
178