Figure 77 Configuration >Firewall; Table 64 Configuration >Firewall - ZyXEL Communications VANTAGE CNM User Manual

Figure 77 Configuration >Firewall
The following table describes the labels in this screen.
Table 64 Configuration >Firewall
LABEL
Enable Firewall
Bypass Triangle Route
Attack Detected Alert
DoS Settings
Packet Direction
Log packets that don't match
these rules.
Action for packets that don't
match firewall rules
The following read-only fields summarize the rules you have created that apply to traffic traveling in the
selected packet direction. The firewall rules that you configure (summarized below) take priority over
the general firewall action settings above. Select an ACL hyperlink to edit that ACL rule.
Index
Source
Destination
Chapter 12 Configuration > Firewall
DESCRIPTION
Select this check box to activate the firewall. The ZyXEL device
performs access control and protects against Denial of Service (DoS)
attacks when the firewall is activated.
Select this check box to have the ZyXEL device firewall ignore the use
of triangle route topology on the network. See the Appendices for more
on triangle route topology.
Select this checkbox to have the ZyXEL device generate an alert when
it identifies an attack.
Click the DoS settings link to configure global firewall Denial of Services
settings.
Use the drop-down list box to select a direction of travel of packets for
which you want to configure firewall rules.
Select the check box to create a log (when the above action is taken)
for packets that are traveling in the selected direction and do not match
any of the rules below.
Select whether to Block (silently discard) or Forward (allow the
passage of) packets that don't match any of the firewall rules you
configured.
This is your firewall rule number. Select a rule hyperlink to edit that rule.
The ordering of your rules is important as rules are applied in turn. The
Move field below allows you to reorder your rules.
This field lists the source IP address of the incoming packet.
This field lists the destination IP address of the outgoing packet.
Vantage CNM User's Guide
182