Firewall Rule Example Applications - ZyXEL Communications ZYWALL USG 1000 - EDITION 2 Manual

Unified security gateway
Hide thumbs Also See for ZYWALL USG 1000 - EDITION 2:
Table of Contents

Advertisement

Chapter 24 Firewall
traffic blocking to allow or block VPN traffic transmitting between the VPN tunnel
and other interfaces in the LAN zone. If you add the VPN tunnel to a new zone (the
VPN zone for example), you can configure rules for VPN traffic between the VPN
zone and other zones or From VPN To-ZyWALL rules for VPN traffic destined for
the ZyWALL.
Session Limits
Accessing the ZyWALL or network resources through the ZyWALL requires a NAT
session and corresponding firewall session. Peer to peer applications, such as file
sharing applications, may use a large number of NAT sessions. A single client
could use all of the available NAT sessions and prevent others from connecting to
or through the ZyWALL. The ZyWALL lets you limit the number of concurrent NAT/
firewall sessions a client can use.
Finding Out More
• See
Section 6.5.14 on page 107
screens.
• See
Section 7.6.6 on page 139
of configuring user-aware access control
• See
Section 7.10.3 on page 151
allow H.323 traffic from the WAN to the LAN.
• See
Section 7.11.3 on page 154
allow web traffic from the WAN to a server on the DMZ.
• See
Section 7.12.4 on page 159
allow SIP traffic for an IPPBX or SIP server on the DMZ.

24.1.3 Firewall Rule Example Applications

Suppose that your company decides to block all of the LAN users from using IRC
(Internet Relay Chat) through the Internet. To do this, you would configure a LAN
to WAN firewall rule that blocks IRC traffic from any source IP address from going
to any destination address. You do not need to specify a schedule since you need
428
for related information on the Firewall
for an example of creating firewall rules as part
(Section 7.6 on page
for an example of creating a firewall rule to
for an example of creating a firewall rule to
for an example of creating firewall rules to
ZyWALL USG 1000 User's Guide
131).

Advertisement

Table of Contents
loading

This manual is also suitable for:

Zywall 1050

Table of Contents