ZyXEL Communications ZYWALL USG 1000 Support Notes page 320

ZyWALL USG 1000 Support Notes
In total there are two Virtual Server rules in this case.
If you put the Web Server on DMZ and access from the LAN, this configuration will do as
you requested. However, if you put the Web Server on LAN and access from the LAN, you
need another Policy Route rule to realize it.
This Policy Route rule makes all the internal access must do the SNAT translation. This will
force all the traffic to go back to the ZyWALL USG and avoid the triangle route problem.
320
All contents copyright (c) 2007 ZyXEL Communications Corporation.