ZyXEL Communications ZyWall USG 2000 User Manual page 458

Chapter 29 Application Patrol
Edit icon. Then click the Add icon or an Edit icon in the Policy table. The screen
displayed here is for the MSN instant messenger service.
Figure 335 Application Policy Edit
The following table describes the labels in this screen.
Table 131 Application Policy Edit
LABEL
Enable Policy
Port
Schedule
User
From
To
Source
Destination
Access
458
DESCRIPTION
Select this check box to turn on this policy for the application.
Use this field to specify a specific port number to which to apply this
policy. Type zero, if this policy applies for every port number.
Select a schedule that defines when the policy applies or select Create
Object to configure a new one (see
Otherwise, select none to make the policy always effective.
Select a user name or user group to which to apply the policy. Select
Create Object to configure a new user account (see
page 618 for details). Select any to apply the policy for every user.
Select the source zone of the traffic to which this policy applies.
Select the destination zone of the traffic to which this policy applies.
Select a source address or address group for whom this policy applies.
Select Create Object to configure a new one. Select any if the policy is
effective for every source.
Select a destination address or address group for whom this policy
applies. Select Create Object to configure a new one. Select any if the
policy is effective for every destination.
This field controls what the ZyWALL does with packets for this
application that match this policy. Choices are:
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and
does not notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and
notifies the client of its decision.
Chapter 40 on page 643
Section 37.2.1 on
ZyWALL USG 2000 User's Guide
for details).