ZyXEL Communications ZYWALL USG 2000 Support Notes page 126

2.1.2 What does ZyWALL USG 2000 provide for managing IM/P2P
applications?
ZyWALL provides best solution to solve the rigidity of the "all-or-nothing" approach and can
meet customer's expectation.
1. Application patrol: it can "recognize" IM/P2P applications and IT administrators can
leverage it to restrict access to IM/P2P applications
2. Access granularity: combined with access granularity, IT admin can enforce flexible policy
against IM/P2P applications.
ZyWALL USG 2000's access granularity for controlling hazardous IM/P2P applications:
By User/Group
By Time of access
By Bandwidth
2.1.3 Configuration Example
Application patrol provides a convenient way to manage the use of various applications on the
network. It manages general protocols (for example, http and ftp) and instant messenger (IM),
peer-to-peer (P2P), Voice over IP (VoIP), and streaming (RSTP) applications. You can even
control the use of a particular application's individual features (like text messaging, voice,
video conferencing, and file transfers). Application patrol also has powerful bandwidth
management including traffic prioritization to enhance the performance of delay-sensitive
applications like voice and video.
Zone Design is Now Available
Zone design is now supported in ZLD 2.x 2000. The major enhancement in ZLD2.x 2000
solutions enables the ZyWALL to correctly differentiate the traffic from different sources.
With ZLD1.0x the ZyWALL can decide whether the specific traffic can be forwarded or not,
but it does not differentiate the traffic from different sources. As a result, it may accidentally
drop the packet. For example, both the malicious/suspicious packets from WAN to LAN
All contents copyright (c) 2008 ZyXEL Communications Corporation.
ZyWALL USG 2000 Support Notes
126