ZyXEL ISG50-PSTN User Guide - Page 364

Chapter 23 Firewall Table 118 Configuration > Firewall > Add (continued) LABEL Access DESCRIPTION Use the drop-down list box to select what the firewall is to do with packets that match this rule. Select deny to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender. Select reject to deny the packets and send a TCP reset packet to the sender. Any UDP packets are dropped without sending a response packet. Log OK Cancel Select allow to permit the passage of the packets. Select whether to have the ISG50 generate a log (log), log and alert (log alert) or not (no) when the rule is matched. See Chapter 53 on page 705 for more on logs. Click OK to save your customized settings and exit this screen. Click Cancel to exit this screen without saving. 23.3 The Session Limit Screen Click Configuration > Firewall > Session Limit to display the Firewall Session Limit screen. Use this screen to limit the number of concurrent NAT/firewall sessions a client can use. You can apply a default limit for all users and individual limits for specific users, addresses, or both. The individual limit takes priority if you apply both. Figure 244 Configuration > Firewall > Session Limit The following table describes the labels in this screen. Table 119 Configuration > Firewall > Session Limit LABEL General Settings Enable Session limit Default Session per Host DESCRIPTION Select this check box to control the number of concurrent sessions hosts can have. Use this field to set a common limit to the number of concurrent NAT/firewall sessions each client computer can have. If only a few clients use peer to peer applications, you can raise this number to improve their performance. With heavy peer to peer application use, lower this number to ensure no single client uses too many of the available NAT sessions. Create rules below to apply other limits for specific users or addresses. 364 ISG50 User's Guide