Firewall Technical Reference; Firewall Rules Overview - ZyXEL Communications P-793H User Manual

9.5 Firewall Technical Reference

This section provides some technical background information about the topics
covered in this chapter.

9.5.1 Firewall Rules Overview

Your customized rules take precedence and override the P-793H v2's default
settings. The P-793H v2 checks the source IP address, destination IP address and
IP protocol type of network traffic against the firewall rules (in the order you list
them). When the traffic matches a rule, the P-793H v2 takes the action specified
in the rule.
Firewall rules are grouped based on the direction of travel of packets to which they
apply:
• LAN to LAN/ Router
• LAN to WAN
By default, the P-793H v2's stateful packet inspection allows packets traveling in
the following directions:
• LAN to LAN/ Router
These rules specify which computers on the LAN can manage the P-793H v2
(remote management) and communicate between networks or subnets
connected to the LAN interface (IP alias).
Note: You can also configure the remote management settings to allow only a specific
computer to manage the P-793H v2.
• LAN to WAN
These rules specify which computers on the LAN can access which computers or
services on the WAN.
By default, the P-793H v2's stateful packet inspection drops packets traveling in
the following directions:
• WAN to LAN
These rules specify which computers on the WAN can access which computers
or services on the LAN.
Note: You also need to configure NAT port forwarding (or full featured NAT address
mapping rules) to allow computers on the WAN to access devices on the LAN.
P-793H v2 User's Guide
• WAN to LAN
• WAN to WAN/ Router
Chapter 9 Firewalls
149