Draytek Vigor2136 Series User Manual page 201

Schedule
Allowed Resources
Firewall
If Customize Group firewall filters is selected as the Firewall
Outbound IPv4 Filters
IP Filters Default
Action
Content Filters
Always On - The function of group policy is running all the time.
Scheduled On - The function of group policy is activated based on the
schedule profile.
Allowed Resources
Select resources profile(s) and apply to this policy profile.
+Add – Click to add a new resource profile.
Resource – Use the drop-down menu to select IP or MAC resource
profile.
Access Condition –Use the drop-down menu to select access
condition profile.
Log – Select Pass or Block. Corresponding records (related to passing
or blocking packets) will be stored as a log.
Option (Delete) – Click to remove the entry.
Firewall Policies
Use Network Default – Select this item to use the default group
firewall filter settings.
Customize Group firewall filters – Select this item to customize the
group firewall filter settings. The firewall policy will be applied to
allowed resources defined above.
+Add – Click to add new IPv4 filter profiles (up to 10) for outgoing
traffic.
Name – Set a name that identifies the IP filter profile. The maximum
length of the Profile Name is 15 characters.
Destination IP Start – Enter an IP address as the starting IP address.
Destination IP End – Enter an IP address as the ending IP address. If
only one static IP address will be filtered by this profile, enter the
same IP address as the value in Destination IP Start.
Protocol – Specify the protocol(s) which this filter rule will apply to.
Dest Port Start – Specify the target port range (starting point) if the
protocol is TCP or UDP.
Dest Port End – Specify the target port range (ending point) if the
protocol is TCP or UDP.
Action –Select Pass to allow access to the IP address; select Block to
disallow access to the IP address.
Option(Delete) - Click to remove the selected entry.
Any packet that does not comply with the rules set in Outbound IPv4
Filters will be processed according to the default action.
Pass - Allow access to the IP address.
Block - Disallow access to the IP address.
The system will check the outgoing sessions additionally with the
selected content filters profile(s).
+Add – Click to add a new content filter profile (up to 10).
Profile Name – Set a name that identifies the content filter profile.
The maximum length of the Profile Name is 15 characters.
Scheduled On - The filter profile will be valid based on the time
schedule specified here.
Destination – Select specific WCF and/or APPE and/or UCF (keyword
191