Applications; Configuration Example - ZyXEL Communications ZYWALL 1050 Support Notes

applications?

ZyWALL provides best solution to solve the rigidity of the "all-or-nothing" approach and can
meet customer's expectation.
1. Application patrol: it can "recognize" IM/P2P applications and IT administrators can
leverage it to restrict access to IM/P2P applications
2. Access granularity: combined with access granularity, IT admin can enforce flexible policy
against IM/P2P applications.
ZyWALL's access granularity for controlling hazardous IM/P2P applications:
By User/Group
By Time of access
By Bandwidth

2.1.3 Configuration Example

Application patrol provides a convenient way to manage the use of various applications on the
network. It manages general protocols (for example, http and ftp) and instant messenger (IM),
peer-to-peer (P2P), Voice over IP (VoIP), and streaming (RSTP) applications. You can even
control the use of a particular application's individual features (like text messaging, voice,
video conferencing, and file transfers). Application patrol also has powerful bandwidth
management including traffic prioritization to enhance the performance of delay-sensitive
applications like voice and video.
Zone Design is Now Available
Zone design is now supported in ZLD 2.0x series. The major enhancement in ZLD2.0x series
solutions enables the ZyWALL to correctly differentiate the traffic from different sources.
With ZLD1.0x the ZyWALL can decide whether the specific traffic can be forwarded or not,
but it does not differentiate the traffic from different sources. As a result, it may accidentally
drop the packet. For example, both the malicious/suspicious packets from WAN to LAN
(known as a attack) and the traffic coming from DMZ to LAN (normal traffic) will be treated
as an attack.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL 1050/ZyWALL USG 300 Support Notes
201