ZyXEL Communications UAG5100 User Manual page 293

Figure 207 Configuration > Security Policy > Policy Control
The following table describes the labels in this screen.
Table 130 Configuration > Security Policy > Policy Control
LABEL DESCRIPTION
General Settings
Enable Policy Select this check box to activate security policy control. The UAG performs access control
Control when this is activated.
IPv4
Configuration
Allow If an alternate gateway on the LAN has an IP address in the same subnet as the UAG's LAN
Asymmetrical IP address, return traffic may not go through the UAG. This is called an asymmetrical or
Route "triangle" route. This causes the UAG to reset the connection, as the connection has not
been acknowledged.
Select this check box to have the UAG permit the use of asymmetrical route topology on
the network (not reset the connection).
Note: Allowing asymmetrical routes may let traffic from the WAN go directly to the LAN
without passing through the UAG. A better solution is to use virtual interfaces to put the
UAG and the backup gateway on separate subnets.
Add Click this to create a new entry. Select an entry and click Add to create a new entry after
the selected entry.
Edit Double-click an entry or select it and click Edit to open a screen where you can modify the
entry's settings.
Remove To remove an entry, select it and click Remove. The UAG confirms you want to remove it
before doing so.
Activate To turn on an entry, select it and click Activate.
Chapter 25 Security Policy
UAG Series User's Guide
293