ZyXEL UAG4100 User Guide - Page 293

Chapter 25 Security Policy Figure 207 Configuration > Security Policy > Policy Control The following table describes the labels in this screen. Table 130 Configuration > Security Policy > Policy Control LABEL DESCRIPTION General Settings Enable Policy Control Select this check box to activate security policy control. The UAG performs access control when this is activated. IPv4 Configuration Allow Asymmetrical Route If an alternate gateway on the LAN has an IP address in the same subnet as the UAG's LAN IP address, return traffic may not go through the UAG. This is called an asymmetrical or "triangle" route. This causes the UAG to reset the connection, as the connection has not been acknowledged. Select this check box to have the UAG permit the use of asymmetrical route topology on the network (not reset the connection). Add Edit Remove Activate Note: Allowing asymmetrical routes may let traffic from the WAN go directly to the LAN without passing through the UAG. A better solution is to use virtual interfaces to put the UAG and the backup gateway on separate subnets. Click this to create a new entry. Select an entry and click Add to create a new entry after the selected entry. Double-click an entry or select it and click Edit to open a screen where you can modify the entry's settings. To remove an entry, select it and click Remove. The UAG confirms you want to remove it before doing so. To turn on an entry, select it and click Activate. UAG Series User's Guide 293