ZyXEL Vantage CNM User Guide - Page 131

Chapter 6 Device Security Settings Table 44 Device Operation > Device Configuration > Security > Firewall > Rule Summary > Add/Edit (continued) LABEL DESCRIPTION Log Packet Information When Matched This field determines if a log for packets that match the rule is created (Yes) or not (No). Go to Device Operation > Device Configuration > Device Log > Log and select the Access Control log category to have the device record these logs. Send Alert Message to Administrator When Matched Select the check box to have the device generate an alert when the rule is matched. Action for Matched Packets Use the drop-down list box to select what the firewall is to do with packets that match this rule. Select Drop to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender. Select Reject to deny the packets and send a TCP reset packet (for a TCP packet) or an ICMP destination-unreachable message (for a UDP packet) to the sender. Select Permit to allow the passage of the packets. Note: You also need to configure NAT port forwarding (or full featured NAT address mapping rules) if you want to allow computers on the WAN to access devices on the LAN. Apply Cancel Note: You may also need to configure the remote management settings if you want to allow a WAN computer to manage the device or restrict management from the LAN. Click this to save your customized settings and exit this screen. Click this to exit this screen without saving. 6.1.4 Anti-Probing Click Device Operation in the menu bar and then click Device Configuration > Security > Firewall > Anti-Probing in the navigation panel to open the following screen. Configure this screen to help keep the device hidden from probing attempts. You can specify which of the device's interfaces will respond to Vantage CNM User's Guide 131