ZyXEL Communications ZyWall USG 2000 User Manual page 456

Chapter 29 Application Patrol
Table 130 Application Edit (continued)
LABEL
Name
Classificatio
n
Service Port This is available if the Classification is Service Ports. You can view
Add icon
Policy
#
Port
Schedule
User
From
To
Source
Destination
Access
456
DESCRIPTION
This field displays the name of the application.
Specify how the ZyWALL should identify this application. Choices are:
Auto - the ZyWALL identifies this application by matching the IP payload
with the application's pattern(s).
Service Ports - the ZyWALL identifies this application by looking at the
destination port in the IP header.
and edit the ports used to identify this application.
When the Classification is Service Ports, this column provides icons
to add and remove port numbers used to identify the application.
Click Add add a port number. Type the destination port number in the
Service Port field.
Click Remove to delete a port number. The Web Configurator confirms
that you want to delete the port number before doing so.
This field is a sequential value, and it is not associated with a specific
condition.
Note: The ZyWALL checks conditions in the order they appear in
the list. While this sequence does not affect the functionality,
you might improve the performance of the ZyWALL by putting
more common conditions at the top of the list.
This field displays the specific port number to which this policy applies.
This is the schedule that defines when the policy applies. any means the
policy is active at all times if enabled.
This is the user name or user group to which the policy applies. If any
displays, the policy applies to all users.
This is the source zone of the traffic to which this policy applies.
This is the destination zone of the traffic to which this policy applies.
This is the source address or address group for whom this policy applies.
If any displays, the policy is effective for every source.
This is the destination address or address group for whom this policy
applies. If any displays, the policy is effective for every destination.
This field displays what the ZyWALL does with packets for this
application that match this policy.
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and
does not notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and
notifies the client of its decision.
ZyWALL USG 2000 User's Guide