ZyXEL P-660HW-T1 v3 User Guide - Page 205
Firewall Technical Reference
View all ZyXEL P-660HW-T1 v3 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 205 highlights
Chapter 10 Firewalls 10.5 Firewall Technical Reference This section provides some technical background information about the topics covered in this chapter. 10.5.1 Firewall Rules Overview Your customized rules take precedence and override the ZyXEL Device's default settings. The ZyXEL Device checks the source IP address, destination IP address and IP protocol type of network traffic against the firewall rules (in the order you list them). When the traffic matches a rule, the ZyXEL Device takes the action specified in the rule. Firewall rules are grouped based on the direction of travel of packets to which they apply: • LAN to LAN/ Router • LAN to WAN • WAN to LAN • WAN to WAN/ Router Note: The LAN includes both the LAN port and the WLAN. By default, the ZyXEL Device's stateful packet inspection allows packets traveling in the following directions: • LAN to LAN/ Router These rules specify which computers on the LAN can manage the ZyXEL Device (remote management) and communicate between networks or subnets connected to the LAN interface (IP alias). Note: You can also configure the remote management settings to allow only a specific computer to manage the ZyXEL Device. • LAN to WAN These rules specify which computers on the LAN can access which computers or services on the WAN. By default, the ZyXEL Device's stateful packet inspection drops packets traveling in the following directions: • WAN to LAN These rules specify which computers on the WAN can access which computers or services on the LAN. Note: You also need to configure NAT port forwarding (or full featured NAT address mapping rules) to allow computers on the WAN to access devices on the LAN. P-660HW-Tx v3 Series User's Guide 205