The Zone Control Screen - ZyXEL Communications SBG3500-N000 User Manual

17.6 The Zone Control Screen

Use this screen to set the security level of the firewall on the SBG3500-N Series. Firewall rules are
grouped based on the direction of travel of packets to which they apply.
Click Security > Firewall > Zone Control to display the following screen.
Figure 129 Security > Firewall > Zone Control
The following table describes the labels in this screen.
Table 91 Security > Firewall > Zone Control
LABEL
From/To
Permit
Log
Apply
Cancel
Chapter 17 Firewall
DESCRIPTION
The firewall rules are grouped by the direction of packet travel and their zones (WAN, LAN,
WLAN, DMZ, EXTRA and Router). By default, the firewall allows passage of packets traveling
in the same zone (a LAN to a LAN, a WAN to a WAN). Here are some example descriptions
of the directions of travel.
From LAN To LAN means packets traveling from a computer on one LAN subnet to a
computer on another LAN subnet on the LAN interface of the device.
You can define the EXTRA zone to include the VPN connection. The Router zone can only be
controlled in ingress direction "to" because it is reserved for the router's CPU. However,
packets sent from the router zone are always permitted. For example, if your packet come
from a LAN zone and is going to the Router zone. The SBG3500-N Series will apply the
firewall rules to the LAN packets if you did not click the Permit check box.
When Permit box is unchecked and Log box is checked, it means the "dropped" packets
will be logged. When both Permit and Log boxes are checked, it means the "permitted"
packets will be logged.
Click the check box Permit to allow the passage of the packets.
Click the check box Log to create a log when an action from Firewall rule is taken.
Click Apply to save your changes.
Click Cancel to restore your previously saved settings.
SBG3500-N Series User's Guide
260