Service Control Rules - ZyXEL Communications USG40 User Manual

Table 275 Configuration > System > WWW > Service Control (continued)
LABEL
Server Port
Admin/User Service
Control
Add
Edit
Remove
Move
#
Zone
Address
Action
Authentication
Client Authentication
Method
Apply
Reset

33.7.5 Service Control Rules

Click Add or Edit in the Service Control table in a WWW, SSH, Telnet, FTP or SNMP screen to
add a service control rule.
Figure 423 Configuration > System > Service Control Rule > Edit
Chapter 33 System
DESCRIPTION
You may change the server port number for a service if needed, however you must
use the same port number in order to use that service to access the ZyWALL/USG.
Admin Service Control specifies from which zones an administrator can use HTTP to
manage the ZyWALL/USG (using the Web Configurator). You can also specify the IP
addresses from which the administrators can manage the ZyWALL/USG.
User Service Control specifies from which zones a user can use HTTP to log into the
ZyWALL/USG (to log into SSL VPN for example). You can also specify the IP addresses
from which the users can access the ZyWALL/USG.
Click this to create a new entry. Select an entry and click Add to create a new entry
after the selected entry.
Double-click an entry or select it and click Edit to be able to modify the entry's
settings.
To remove an entry, select it and click Remove. The ZyWALL/USG confirms you want
to remove it before doing so. Note that subsequent entries move up by one when you
take this action.
To change an entry's position in the numbered list, select the method and click Move
to display a field to type a number for where you want to put it and press [ENTER] to
move the rule to the number that you typed.
This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the ZyWALL/USG's (non-
configurable) default policy. The ZyWALL/USG applies this to traffic that does not
match any other configured rule. It is not an editable rule. To apply other behavior,
configure a rule that traffic will match so the ZyWALL/USG will not have to use the
default policy.
This is the zone on the ZyWALL/USG the user is allowed or denied to access.
This is the object name of the IP address(es) with which the computer is allowed or
denied to access.
This displays whether the computer with the IP address specified above can access
the ZyWALL/USG zone(s) configured in the Zone field (Accept) or not (Deny).
Select a method the HTTPS or HTTP server uses to authenticate a client.
You must have configured the authentication methods in the Auth. method screen.
Click Apply to save your changes back to the ZyWALL/USG.
Click Reset to return the screen to its last-saved settings.
ZyWALL/USG Series User's Guide
625