Chapter 11 Firewall Screens; Access Methods; Firewall Policies Overview - ZyXEL Communications ZYWALL2 ET 2WE User Manual

11.1 Access Methods

The web configurator is, by far, the most comprehensive firewall configuration tool your ZyWALL has to
offer. For this reason, it is recommended that you configure your firewall using the web configurator. SMT
screens allow you to activate the firewall. CLI commands provide limited configuration options and are only
recommended for advanced users, please refer to the Appendices for firewall CLI commands.

11.2 Firewall Policies Overview

Firewall rules are grouped based on the direction of travel of packets to which they apply:
•
LAN to LAN/ZyWALL
•
LAN to WAN
By default, the ZyWALL's stateful packet inspection allows packets traveling in the following directions:
•
LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between networks or
subnets connected to the LAN interface.
•
LAN to WAN
By default, the ZyWALL's stateful packet inspection blocks packets traveling in the following directions:
•
WAN to LAN
•
WAN to WAN/ZyWALL
This prevents computers on the WAN from using the ZyWALL as a gateway to communicate with other
computers on the WAN and/or managing the ZyWALL.
You may define additional rules and sets or modify existing ones but please exercise extreme caution in
doing so.
Firewall Screens
This chapter shows you how to configure your ZyWALL firewall.
•
WAN to LAN
•
WAN to WAN/ZyWALL
ZyWALL 2 Series User's Guide
Chapter 11
Firewall Screens
11-1