Configuring Basic Firewall Settings; Figure 58 Firewall: Default Policy; Table 42 Firewall: Default Policy - ZyXEL Communications Prestige 2602R Series User Manual

13.5 Configuring Basic Firewall Settings

Click Firewall and then Default Policy to display the following screen. Activate the firewall
by selecting the Firewall Enabled check box as seen in the following screen.

Figure 58 Firewall: Default Policy

The following table describes the labels in this screen.

Table 42 Firewall: Default Policy

LABEL
Enable Firewall
Allow
Asymmetrical
Route
Packet Direction
Default Action
Log
Back
Chapter 13 Firewall Configuration
DESCRIPTION
Select this check box to activate the firewall. The Prestige performs access control
and protects against Denial of Service (DoS) attacks when the firewall is activated.
Select this check box to have the Prestige firewall permit the use of triangle route
topology on the network.
Note: Allowing asymmetrical routes may let traffic from the WAN go
directly to a LAN computer without passing through the
Prestige. See Appendix E on page 389
route topology and how to deal with this problem.
This is the direction of travel of packets (LAN to LAN/Router, LAN to WAN, WAN
to WAN/Router or WAN to LAN.
Firewall rules are grouped based on the direction of travel of packets to which they
apply. For example, LAN to LAN/Router means packets traveling from a
computer/subnet on the LAN to either another computer/subnet on the LAN
interface of the Prestige or the Prestige itself.
Use the radio buttons to select whether to Block (silently discard) or Forward
(allow the passage of) packets that are traveling in the selected direction.
Select the check box to create a log (when the above action is taken) for packets
that are traveling in the selected direction and do not match any of the rules below.
Click Back to return to the previous screen.
Prestige 2602R Series User's Guide
for more on triangle
153