The Session Limit Screen - ZyXEL Communications ZyWALL USG 100 Series User Manual

Table 119 Firewall > Edit (continued)
LABEL
Description
Schedule
User
Source
Destination
Service
Access
Log
OK
Cancel

20.3 The Session Limit Screen

Click Firewall > Session Limit to display the Firewall Session Limit screen. Use this screen
to limit the number of concurrent NAT/firewall sessions a client can use. You can apply a
default limit for all users and individual limits for specific users, addresses, or both. The
individual limit takes priority if you apply both.
ZyWALL USG 100/200 Series User's Guide
DESCRIPTION
Enter a descriptive name of up to 60 printable ASCII characters for the firewall rule.
Spaces are allowed.
Select a schedule that defines when the rule applies or select Create Object to
configure a new one (see Chapter 39 on page 629
none and the rule is always effective.
This field is not available when you are configuring a to-ZyWALL rule.
Select a user name or user group to which to apply the rule. Select Create Object
to configure a new user account (see
firewall rule is activated only when the specified user logs into the system and the
rule will be disabled when the user logs out.
Otherwise, select any and there is no need for user logging.
Note: If you specified a source IP address (group) instead of any in
the field below, the user's IP address should be within the IP
address range.
Select a source address or address group for whom this rule applies. Select
Create Object to configure a new one. Select any if the policy is effective for every
source.
Select a destination address or address group for whom this rule applies. Select
Create Object to configure a new one. Select any if the policy is effective for every
destination.
Select a service or service group from the drop-down list box. Select Create
Object to add a new service. See
Use the drop-down list box to select what the firewall is to do with packets that
match this rule.
Select deny to silently discard the packets without sending a TCP reset packet or
an ICMP destination-unreachable message to the sender.
Select reject to deny the packets and send a TCP reset packet to the sender. Any
UDP packets are dropped without sending a response packet.
Select allow to permit the passage of the packets.
Select whether to have the ZyWALL generate a log (log), log and alert (log alert)
or not (no) when the rule is matched. See
logs.
Click OK to save your customized settings and exit this screen.
Click Cancel to exit this screen without saving.
Chapter 20 Firewall
for details). Otherwise, select
Section 36.2.1 on page 606
Chapter 38 on page 623 for more information.
Chapter 46 on page 725
for details). The
for more on
355