ZyXEL Communications ZyWALL USG 300 User Manual page 325

Table 110 Firewall (continued)
LABEL
From Zone
To Zone
The following read-only fields summarize the rules you have created that apply to traffic traveling in the
selected packet direction.
Total
Connection
connection per
page
Page x of x
#
Priority
Schedule
User
Source
Destination
Service
Access
Log
ZyWALL USG 300 User's Guide
DESCRIPTION
This is the direction of travel of packets. Select from which zone the packets come
and to which zone they go.
Firewall rules are grouped based on the direction of travel of packets to which they
apply. For example, from LAN to LAN means packets traveling from a computer or
subnet on the LAN to either another computer or subnet on the LAN.
From any displays all the firewall rules for traffic going to the selected To Zone.
To any displays all the firewall rules for traffic coming from the selected From Zone.
From any to any displays all of the firewall rules.
To ZyWALL rules are for traffic that is destined for the ZyWALL and control which
computers can manage the ZyWALL.
This field displays the total number of firewall rules.
Select how many entries you want to display on each page.
This is the number of the page of entries currently displayed and the total number of
pages of entries. Type a page number to go to or use the arrows to navigate the
pages of entries.
This is the index number of your firewall rule. It is not associated with a specific rule.
The entry with a hyphen (-) instead of a number is the default firewall behavior that
the ZyWALL performs on traffic that does not match any other traffic direction. Only
the access right and log alert are configurable for the default firewall rule. To apply
other behavior, configure a firewall rule that traffic will match so the ZyWALL will not
have to use its default behavior.
This is the position of your firewall rule in the global rule list (including all through-
ZyWALL and to-ZyWALL rules). The ordering of your rules is important as rules are
applied in sequence. Default displays for the default firewall behavior that the
ZyWALL performs on traffic that does not match any other traffic direction. The
ZyWALL checks the traffic against any other applicable rules before applying this
default behavior.
This field tells you the schedule object that the rule uses. none means the rule is
active at all times if enabled.
This is the user name or user group name to which this firewall rule applies.
This displays the source address object to which this firewall rule applies.
This displays the destination address object to which this firewall rule applies.
This displays the service object to which this firewall rule applies.
This field displays whether the firewall silently discards packets (deny), discards
packets and sends a TCP reset packet to the sender (reject) or permits the
passage of packets (allow).
This field shows you whether a log (and alert) is created when packets match this
rule or not.
Chapter 20 Firewall
325