Security Policy Example Applications - ZyXEL Communications ZyWALL 1100 User Manual

Table 141 Configuration > Security Policy > Session Control > Add / Edit (continued)
LABEL
Description
User
Address
IPv6 Address
Session Limit per
Host
OK
Cancel

19.5 Security Policy Example Applications

Suppose you decide to block LAN users from using IRC (Internet Relay Chat) through the Internet.
To do this, you would configure a LAN to WAN Security Policy that blocks IRC traffic from any source
IP address from going to any destination address. You do not need to specify a schedule since you
need the Security Policy to always be in effect. The following figure shows the results of this policy.
Figure 227 Blocking All LAN to WAN IRC Traffic Example
Your Security Policy would have the following settings.
Table 142 Blocking All LAN to WAN IRC Traffic Example
# USER
1 Any
2 Any
• The first row blocks LAN access to the IRC service on the WAN.
Chapter 19 Security Policy
DESCRIPTION
Enter information to help you identify this rule. Use up to 60 printable ASCII characters.
Spaces are allowed.
Select a user name or user group to which to apply the rule. The rule is activated only
when the specified user logs into the system and the rule will be disabled when the user
logs out.
Otherwise, select any and there is no need for user logging.
Note: If you specified an IP address (or address group) instead of any in the field below, the
user's IP address should be within the IP address range.
Select the IPv4 source address or address group to which this rule applies. Select any to
apply the rule to all IPv4 source addresses.
Select the IPv6 source address or address group to which this rule applies. Select any to
apply the rule to all IPv6 source addresses.
Use this field to set a limit to the number of concurrent NAT/Security Policy sessions this
rule's users or addresses can have.
For this rule's users and addresses, this setting overrides the Default Session per Host
setting in the general Security Policy Session Control screen.
Click OK to save your customized settings and exit this screen.
Click Cancel to exit this screen without saving.
SOURCE DESTINATION
Any Any
Any Any
ZyWALL/USG Series User's Guide
342
SCHEDULE UTM PROFILE
Any IRC
Any Any
ACTION
Deny
Allow