Follow the steps in
3
MSN in application patrol. Make sure to specify the schedule when you configure
the policy for the Sales group's MSN access.
6.5.6 Set Up Firewall Rules
Use the firewall to control access from LAN to the DMZ.
Click Firewall. In From Zone, select LAN; in To Zone, select DMZ and click
1
Refresh. The default rule for LAN-to-DMZ traffic allows all traffic. You want to
limit access to specific groups, so change the default rule first. Click the Add icon
next to it.
Figure 75 Firewall > LAN to DMZ
Set the Access field to deny, and click OK.
2
Figure 76 Firewall > LAN to DMZ > Add
Click the Add icon at the top of the rule list to create a rule for one of the user
3
groups that is allowed to access the DMZ.
ZyWALL USG 2000 User's Guide
Section 6.5.4 on page 118
Chapter 6 Tutorials
to set up the appropriate policies for
121