ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 User Manual page 118

Chapter 5 Configuration Basics
PREREQUISITES
ADP
Use ADP to detect and take action on traffic and protocol anomalies.
MENU ITEM(S)
PREREQUISITES
Content Filter
Use content filtering to block or allow access to specific categories of web site content,
individual web sites and web features (such as cookies). You can define which user accounts
(or groups) can access what content and at what times. You must have a subscription in order
to use the category-based content filtering. You can subscribe using the menu item or one of
the wizards.
MENU ITEM(S)
PREREQUISITES
Example: You can configure a policy that blocks Bill's access to arts and entertainment web
pages during the workday. You must have already subscribed to the content filter service.
1 Create a user account for Bill if you have not done so already (User/Group).
2 Create a schedule for the work day (Object > Schedule).
3 Click Anti-X > Content Filter > Filter Profile. Click the Add icon to go to the screen
where you can configure a category-based profile.
4 Name the profile and enable it.
5 Enable the external web filter service.
6 Decide what to do for matched web sites (Block in this example), unrated web sites and
what to do when the category-based content filtering service is not available.
7 Select the Arts/Entertainment category (you need to click Advanced to display it).
8 Click OK.
9 Click General to go to the content filter general configuration screen.
10 Enable the content filter.
11 Add a policy that uses the schedule, the filtering profile and the user that you created.
Virtual Server (Port Forwarding)
Use this to change the address and/or port number of packets coming in from a specified
interface. This is also known as port forwarding.
The ZyWALL does not check to-ZyWALL firewall rules for packets that are redirected by
virtual server. It does check regular (through-ZyWALL) firewall rules.
MENU ITEM(S)
PREREQUISITES
Example: Suppose you have an FTP server with a private IP address connected to a DMZ
port. You could configure a virtual server rule to forwards FTP sessions from the WAN to the
DMZ.
118
Registration, zones
Anti-X > ADP
Zones
Anti-X > Content Filter
Registration, addresses (source), schedules, users, user groups
Network > Virtual Server
Interfaces, addresses (HOST)
ZyWALL 1050 User's Guide