ZyXEL Vantage CNM User Guide - Page 127

Chapter 6 Device Security Settings The following table describes the labels in this screen. Table 43 Device Operation > Device Configuration > Security > Firewall > Rule Summary LABEL DESCRIPTION Direction Summary Firewall rules are grouped based on the direction of travel of packets to which they apply. Select a direction from the dropdown list box. Packet Direction Use the drop-down list box to select a direction of travel of packets for which you want to configure firewall rules. ACL Rule Set Parameters for Packet Direction Chosen Log packets that don't match these rules. Select the check box to create a log (when the above action is taken) for packets that are traveling in the selected direction and do not match any of the rules below. Action for packets that Select what action the device should take for packets that don't match firewall rules don't match any of the firewall rules you configured. Select Drop to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender. Select Reject to deny the packets and send a TCP reset packet (for a TCP packet) or an ICMP destination-unreachable message (for a UDP packet) to the sender. Apply Reset Rule Summary # Rule Name Active Source Address Destination Address Service Type Select Permit to allow the passage of the packets. Click this to save your changes back to the device. Click this to reset this screen to its last saved values. The following fields summarize the rules you have created that apply to traffic traveling in the selected packet direction. The firewall rules that you configure (summarized below) take priority over the general firewall action settings above. Select an ACL hyperlink to edit that ACL rule. This is your firewall rule number. Select a rule hyperlink to edit that rule. The ordering of your rules is important as rules are applied in turn. The Move field below allows you to reorder your rules. This is the name of the firewall rule. This field displays whether a firewall is turned on (true) or not (false). This field lists the source IP address of the incoming packet. Click the list box to see all source address configured for the firewall rule. This field lists the destination IP address of the outgoing packet. Click the list box to see all destination address configured for the firewall rule. This field displays the services to which this firewall rule applies. Click the list box to see all service type configured for the firewall rule. See Figure 51 on page 129 for more information. Vantage CNM User's Guide 127