ZyXEL Communications ZyWALL USG 200 Series User Manual page 570

Chapter 32 Application Patrol
Table 149 Application Policy Edit (continued)
LABEL
Schedule
User
From
To
Source
Destination
Access
DSCP Marking
570
DESCRIPTION
Select a schedule that defines when the policy applies or select Create
Object to configure a new one (see
Otherwise, select none to make the policy always effective.
Select a user name or user group to which to apply the policy. Use
Create new Object if you need to configure a new user account (see
Section 40.2.1 on page 724
for every user.
Select the source zone of the traffic to which this policy applies.
Select the destination zone of the traffic to which this policy applies.
Select a source address or address group for whom this policy applies.
Use Create new Object if you need to configure a new one. Select any
if the policy is effective for every source.
Select a destination address or address group for whom this policy
applies. Use Create new Object if you need to configure a new one.
Select any if the policy is effective for every destination.
This field controls what the ZyWALL does with packets for this
application that match this policy. Choices are:
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and
does not notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and
notifies the client of its decision.
Set how the ZyWALL handles the DSCP value of the outgoing packets
that match this policy. Inbound refers to the traffic the ZyWALL sends to
a connection's initiator. Outbound refers to the traffic the ZyWALL sends
out from a connection's initiator.
Select one of the pre-defined DSCP values to apply or select User
Defined to specify another DSCP value. The "af" choices stand for
Assured Forwarding. The number following the "af" identifies one of four
classes and one of three drop preferences. See
PHB for DiffServ on page 389
Select preserve to have the ZyWALL keep the packets' original DSCP
value.
Select default to have the ZyWALL set the DSCP value of the packets to
0.
Chapter 43 on page 749
for details). Select any to apply the policy
Assured Forwarding (AF)
for more details.
ZyWALL USG 100/200 Series User's Guide
for details).