ZyXEL Communications USG 2000 User Manual

Chapter 32 Application Patrol

ZyWALL USG 2000 User’s Guide

• FTP traffic from the LAN to the DMZ can use more bandwidth since the 

interfaces support up to 1 Gbps connections, but it must be the lowest priority 

and limited so it does not interfere with SIP and HTTP traffic.

Figure 385   Application Patrol Bandwidth Management Example    

Use the interface screens to set the WAN zone interface’s upstream bandwidth to 
be equal to (or slightly less than) what the connected device can support. This 
example uses 1000 Kbps.

• Manage SIP traffic going to the WAN zone from a VIP user on the LAN or DMZ. 
• Outbound traffic (to the WAN from the LAN and DMZ) is limited to 200 kbps. The 

ZyWALL applies this limit before sending the traffic to the WAN.

• Inbound traffic (to the LAN and DMZ from the WAN) is also limited to 200 kbps. 

The ZyWALL applies this limit before sending the traffic to LAN or DMZ.

• Highest priority (1). Set policies for other applications to lower priorities so the 

SIP traffic always gets the best treatment.