ZyXEL Communications P-661HW Series User Manual

Page of 383
P-661H/HW Series User’s Guide
164
Chapter 9 Firewall Configuration
The following table describes the labels in this screen. 
9.7.1  Configuring Firewall Rules   
 for more information. 
Table 61   Firewall Rules
LABEL
DESCRIPTION
Firewall Rules 
Storage Space 
in Use
This read-only bar shows how much of the ZyXEL Device's memory for recording 
firewall rules it is currently using. When you are using 80% or less of the storage 
space, the bar is blue. When the amount of space used is over 80%, the bar is red.
Packet Direction Use the drop-down list box to select a direction of travel of packets for which you 
want to configure firewall rules.
Create a new 
rule after rule 
number 
Select an index number and click Add to add a new firewall rule after the selected 
index number. For example, if you select “6”, your new rule becomes number 7 and 
the previous rule 7 (if there is one) becomes rule 8.
The following read-only fields summarize the rules you have created that apply to 
traffic traveling in the selected packet direction. The firewall rules that you configure 
(summarized below) take priority over the default actions in the General screen.
#
This is your firewall rule number. The ordering of your rules is important as rules are 
applied in turn. 
Active
This field displays whether a firewall is turned on or not. Select the check box to 
enable the rule. Clear the check box to disable the rule.
Source IP
This drop-down list box displays the source addresses or ranges of addresses to 
which this firewall rule applies. Please note that a blank source or destination 
address is equivalent to Any.
Destination IP
This drop-down list box displays the destination addresses or ranges of addresses to 
which this firewall rule applies. Please note that a blank source or destination 
address is equivalent to Any.
Service 
This drop-down list box displays the services to which this firewall rule applies. See 
 for more information.
Action
This field displays whether the firewall silently discards packets (Drop), discards 
packets and sends a TCP reset packet or an ICMP destination-unreachable 
message to the sender (Reject) or allows the passage of packets (Permit).
Schedule
This field tells you whether a schedule is specified (Yes) or not (No).
Log
This field shows you whether a log is created when packets match this rule (Yes) or 
not (No).
Modify
Click the Edit icon to go to the screen where you can edit the rule.
Click the Remove icon to delete an existing firewall rule. A window displays asking 
you to confirm that you want to delete the firewall rule. Note that subsequent firewall 
rules move up by one when you take this action.
Order
Click the Move icon to display the Move the rule to field. Type a number in the Move 
the rule to field and click the Move button to move the rule to the number that you 
typed. The ordering of your rules is important as they are applied in order of their 
numbering.
Apply
Click Apply to save your changes back to the ZyXEL Device.
Cancel
Click Cancel to begin configuring this screen afresh.