ZyXEL Communications Vantage CNM 2.3 User Manual page 447

Table 198 Device Operation > Configuration Management > ZLD Firewall Rule
Group Configuration > Add/Edit (continued)
TYPE
Source Address
Destination
Address
Service
Access
Log
Selected Devices
Page Size
Vantage CNM User's Guide
DESCRIPTION
Select a source address or address group for whom this rule applies.
If you want to use an address object hat has been configured on the
ZyWALL, select Use Address object in device and type the
object's name (case insensitive).
If you want to use an address BB configured on Vantage CNM, select
Use Address BB in CNM and select the BB. Select Create Object
to configure a new one.
Otherwise, Select Use Address object in device and type any if
the policy is effective for every source.
Select a destination address or address group for whom this rule
applies.
If you want to use an address object hat has been configured on the
ZyWALL, select Use Address object in device to and type the
object's name (case insensitive).
If you want to use an address BB configured on Vantage CNM, select
Use Address BB in CNM and select the BB. Select Create Object
to configure a new one.
Otherwise, Select Use Address object in device and type any if
the rule is effective for every destination.
Select a service or service group from the drop-down list box.
If you want to use a service object hat has been configured on the
ZyWALL, select Use Service object in device to and type the
object's name (case insensitive).
If you want to use a service BB configured on Vantage CNM, select
Use Service BB in CNM to and select the service BB. Select Create
Object to add a new service. See
information.
Otherwise, Select Use Service object in device and type any if
the rule is effective for every service.
Use the drop-down list box to select what the firewall is to do with
packets that match this rule.
Select deny to silently discard the packets without sending a TCP
reset packet or an ICMP destination-unreachable message to the
sender.
Select reject to deny the packets and send a TCP reset packet to the
sender. Any UDP packets are dropped without sending a response
packet.
Select allow to permit the passage of the packets.
Select whether to have the Vantage CNM generate a log (log), log
and alert (log alert) or not (no) when the rule is matched. See
Chapter 48 on page 763
This section displays the device(s) to which this rule applies.
Select how many records you want to see in each page.
Chapter 17 Configuration Management
Chapter 39 on page 637
for more on logs.
for more
447