Exceptions To The Default Action; Bandwidth Management For Applications; Other Applications; Application Patrol Screens - ZyXEL Communications ZyWALL 1050 User Manual

ZyWALL 1050 User's Guide
• Forward - the ZyWALL routes the packets for this application.
• Drop - the ZyWALL does not route the packets for this application, and it does not notify
the client of this decision.
• Reject - the ZyWALL does not route the packets for this application, and it notifies the
client of this decision.

20.1.3 Exceptions to the Default Action

You can also specify exceptions, when the ZyWALL should not follow the default rule for the
application. There are two kinds of exceptions, one identified by the original destination port
of the connection and one identified by schedule, user, source, and destination information.
You can use the first kind to restrict applications to particular ports, and you can use the
second kind to define other exceptions.

20.1.4 Bandwidth Management for Applications

If the ZyWALL is supposed to route packets for an application, you can also restrict the
bandwidth used by each application. This restriction may be ineffective in certain cases,
however, such as using MSN to send files via P2P.

20.1.5 Other Applications

Sometimes, the ZyWALL cannot identify the application. For example, the application might
be a new application, or the packets might arrive out of sequence. (The ZyWALL does not
reorder packets when identifying the application.) In these cases, you can still provide a
default rule for the ZyWALL to follow. In addition, you can use destination port, schedule,
user, source, and destination information to create a sequence of specific conditions, similar to
the sequence of rules used by firewalls, to specify what the ZyWALL should do more
precisely.

20.2 Application Patrol Screens

Use the Configuration summary screen to enable and disable application patrol, look at every
application the ZyWALL can recognize, and review the settings for each one. It also lets you
open the Configuration Edit screen, which enables and disables the rules for each application
and allows you to specify the default policy and exceptions for each application.
The Other Protocol screen controls what the ZyWALL does when it does not recognize the
application, and it identifies the conditions that refine this. It also lets you open the Other
Configuration Add/Edit screen to create new conditions or edit existing ones.
322 Chapter 20 Application Patrol