Chapter 10 Firewall Screens; Access Methods; Firewall Policies Overview - ZyXEL Communications ZyWALL 5 User Manual

10.1 Access Methods

The web configurator is, by far, the most comprehensive firewall configuration tool your ZyWALL
has to offer. For this reason, it is recommended that you configure your firewall using the web
configurator. SMT screens allow you to activate the firewall. CLI commands provide limited
configuration options and are only recommended for advanced users, please refer to the appendix for
firewall CLI commands.

10.2 Firewall Policies Overview

Firewall rules are grouped based on the direction of travel of packets to which they apply:
•
LAN to LAN/ZyWALL
•
LAN to WAN
•
LAN to DMZ
The LAN includes both the LAN port and the WLAN.
By default, the ZyWALL's stateful packet inspection allows packets traveling in the following
directions:
•
LAN to LAN/ZyWALL
This allows computers on the LAN to manage the ZyWALL and communicate between
networks or subnets connected to the LAN interface.
•
LAN to WAN
•
LAN to DMZ
•
WAN to DMZ
•
DMZ to WAN
By default, the ZyWALL's stateful packet inspection blocks packets traveling in the following
directions:
•
WAN to LAN
•
WAN to WAN/ZyWALL
This prevents computers on the WAN from using the ZyWALL as a gateway to communicate
with other computers on the WAN and/or managing the ZyWALL.
•
DMZ to LAN
Firewall Screens
This chapter shows you how to configure your ZyWALL firewall.
•
WAN to LAN
•
WAN to
WAN/ZyWALL
•
WAN to DMZ
ZyWALL 5 Internet Security Appliance
Chapter 10
Firewall Screens
•
DMZ to LAN
•
DMZ to WAN
•
DMZ to
DMZ/ZyWALL
10-1