Draytek Vigor2920 Series User Manual page 209

Item
Branch to other Filter
Set
Sessions Control
MAC Bind IP
Quality of Service
Load-Balance policy
User Management
APP Enforcement
Description
Pass Immediately - Packets matching the rule will be passed
immediately.
Block If No Further Match - A packet matching the rule, and
that does not match further rules, will be dropped.
Pass If No Further Match - A packet matching the rule, and
that does not match further rules, will be passed through.
If the packet matches the filter rule, the next filter rule will
branch to the specified filter set. Select next filter rule to
branch from the drop-down menu. Be aware that the router will
apply the specified filter rule for ever and will not return to
previous filter rule any more.
The number typed here is the total sessions of the packets that
do not match the filter rule configured in this page. The default
setting is 60000.
Strict –Make the MAC address and IP address settings
configured in IP Object for Source IP and Destination IP be
bound for applying such filter rule.
No-Strict - no limitation.
Choose one of the QoS rules to be applied as firewall rule. For
detailed information of setting QoS, please refer to the related
section later.
Choose the WAN interface for applying Load-Balance Policy.
Such item is available only when Rule-Based is selected in
User Management>>General Setup. The general firewall rule
will be applied to the user/user group/all users specified here.
Note: When there is no user profile or group profile existed,
Create New User or Create New Group item will appear for
you to click to create a new one.
Select an APP Enforcement profile for global IM/P2P
application blocking. If there is no profile for you to select,
please choose [Create New] from the drop down list in this
page to create a new profile. All the hosts in LAN must follow
the standard configured in the APP Enforcement profile
selected here. For detailed information, refer to the section of
199
Vigor2920 Series User's Guide