The Firewall Screen - ZyXEL Communications SBG3500-N000 User Manual

Chapter 15 Firewall

15.2 The Firewall Screen

Use this screen to set the security level of the firewall on the SBG3500-N. Firewall rules are
grouped based on the direction of travel of packets to which they apply.
Click Security > Firewall to display the General screen.
Figure 98 Security > Firewall > General
The following table describes the labels in this screen.
Table 72 Security > Firewall > General
LABEL
Firewall
From/To
Permit
Log
Apply
Cancel
236
DESCRIPTION
Select Enable to activate the firewall feature on the SBG3500-N.
The firewall rules are grouped by the direction of packet travel and their zones (WAN, LAN,
WLAN, DMZ, EXTRA and Router). By default, the firewall allows passage of packets traveling
in the same zone (a LAN to a LAN, a WAN to a WAN). Here are some example descriptions
of the directions of travel.
From LAN To LAN means packets traveling from a computer on one LAN subnet to a
computer on another LAN subnet on the LAN interface of the device.
You can define the EXTRA zone to include the VPN connection. The Router zone can only be
controlled in ingress direction "to" because it is reserved for the router's CPU. However,
packets sent from the router zone are always permitted. For example, if your packet come
from a LAN zone and is going to the Router zone. The SBG3500-N will apply the firewall
rules to the LAN packets if you did not click the Permit check box.
When Permit box is unchecked and Log box is checked, it means the "dropped" packets
will be logged. When both Permit and Log boxes are checked, it means the "permitted"
packets will be logged.
Click the check box Permit to allow the passage of the packets.
Click the check box Log to create a log when an action from Firewall rule is taken.
Click Apply to save your changes.
Click Cancel to restore your previously saved settings.
SBG3500-N000 User's Guide