ZyXEL Communications Vantage CNM 2.3 User Manual page 446

Chapter 17 Configuration Management
The following table describes the fields in this screen
Table 198 Device Operation > Configuration Management > ZLD Firewall Rule
Group Configuration > Add/Edit
TYPE
Group Firewall Rule Configuration
Group Firewall
Rule Name
Description
Firewall Rule
Enable
From
To
Schedule
User
446
DESCRIPTION
Enter a descriptive name of up to 32 characters for this firewall rule.
You can use alphanumeric characters, underline (_) and hyphen (-).
Enter a description for this firewall rule. You can enter up to 255
printable ASCII characters and spaces.
Configure the settings for this firewall rule in this section.
Select this check box to activate this firewall rule.
For through-ZyWALL rules, type a zone's name in the From field and
another zone's name in the To field. These specify the direction of
travel of packets to which the rule applies.
Use this field to select a schedule that defines when the rule applies
loaded from a schedule object or schedule BB.
If you want to use a user object that has been configured on the
ZyWALL, select Use Schedule object in device and type the
object's name.
If you want to use a schedule BB configured on Vantage CNM, select
Use Schedule BB in CNM and select the BB. Select Create Object
to configure a new one.
Otherwise, select Use Schedule object in device and type none if
there is no need to apply a schedule.
Use this field to select a user name or user group to which to apply
the rule loaded from a user object or user BB. The firewall rule is
activated only when the specified user logs into the system and the
rule will be disabled when the user logs out.
If you want to use a user object that has been configured on the
ZyWALL, select Use User object in device and type the object's
name (case sensitive).
If you want to use a user BB configured on Vantage CNM, select Use
User BB in CNM and select the BB. Select Create Object to
configure a new one.
Otherwise, select Use User object in device and type any if there
is no need for user logging.
Note: If you specified a source IP address (group) instead of
any in the field below, the user's IP address should be
within the IP address range.
Vantage CNM User's Guide