Set Up The Security Policy On The Zywall/Usg For Employees - ZyXEL Communications ZyWALL 110 Handbook

Figure 110 Exempt Specific Users From Security Control Example
Note: All network IP addresses and subnet masks are used as examples in this article.
Please replace them with your actual network IP addresses and subnet masks. This
example was tested using USG310 (Firmware Version: ZLD 4.13).

3.3.1 Set Up the Security Policy on the ZyWALL/USG for Employees

In the ZyWALL/USG, go to CONFIGURATION > Object > Address > Add Address Rule to
1
create address range for employees.
Figure 111 CONFIGURATION > Object > Address > Add Address Rule
Set up Security Policy for employees, go to CONFIGURATION > Security Policy > Policy
2
Control > Add corresponding, configure a Name for you to identify the employees' Security
Policy profile.
For From and To policies, select the direction of travel of packets to which the policy applies. Select
3
Source to be the Employees to apply the policy to all traffic coming from them. In order to view
the test result later on, set Log matched traffic to be log.
Scroll down to UTM Profile, select the general policy that allows employees to access the Internet.
4
(Using built-in Office profile in this example blocks the non-productive services, such as
Advertisement & Pop-Ups, Gambling and Peer to Peer services...etc.).
Chapter 3 Protect Your Network with UTM
ZyWALL/USG Series User's Guide
60