ZyXEL Communications ZYWALL USG 2000 Manual page 460

Chapter 28 Application Patrol
The following table describes the labels in this screen.
Table 131 Application Policy Edit
LABEL
Enable Policy
Port
Schedule
User
From
To
Source
Destination
Access
Action Block
Bandwidth
Management
460
DESCRIPTION
Select this check box to turn on this policy for the application.
Use this field to specify a specific port number to which to apply this
policy. Type zero, if this policy applies for every port number.
Select a schedule that defines when the policy applies or select Create
Object to configure a new one (see
Otherwise, select none to make the policy always effective.
Select a user name or user group to which to apply the policy. Select
Create Object to configure a new user account (see
page 616 for details). Select any to apply the policy for every user.
Select the source zone of the traffic to which this policy applies.
Select the destination zone of the traffic to which this policy applies.
Select a source address or address group for whom this policy applies.
Select Create Object to configure a new one. Select any if the policy is
effective for every source.
Select a destination address or address group for whom this policy
applies. Select Create Object to configure a new one. Select any if the
policy is effective for every destination.
This field controls what the ZyWALL does with packets for this
application that match this policy. Choices are:
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and
does not notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and
notifies the client of its decision.
For some applications, you can select individual uses of the application
that the policy will have the ZyWALL block. These fields only apply when
Access is set to forward.
Login - Select this option to block users from logging in to a server for
this application.
Message - Select this option to block users from sending or receiving
instant messages.
Audio - Select this option to block users from sending or receiving audio
traffic.
Video - Select this option to block users from sending or receiving video
traffic.
File Transfer - Select this option to block users from sending or
receiving files.
Configure these fields to set the amount of bandwidth the application
can use. These fields only apply when Access is set to forward.
You must also enable bandwidth management in the main application
patrol screen (AppPatrol > General) in order to apply bandwidth
shaping.
Chapter 39 on page 641
Section 36.2.1 on
ZyWALL USG 2000 User's Guide
for details).