ZyXEL Communications 200 Series User Manual

 Chapter 27 Application Patrol

ZyWALL USG 100/200 Series User’s Guide

Service Port

This is available if the Classification is Service Ports. You can view and edit the 
ports used to identify this application.

Add icon

When the Classification is Service Ports, this column provides icons to add and 
remove port numbers used to identify the application.
Click Add add a port number. Type the destination port number in the Service Port 
field.
Click Remove to delete a port number. The web configurator confirms that you 
want to delete the port number before doing so.

Policy

This table lists the policies configured for this application.

#

This field is a sequential value, and it is not associated with a specific condition.

Note: The ZyWALL checks conditions in the order they appear in 

the list. While this sequence does not affect the functionality, 
you might improve the performance of the ZyWALL by putting 
more common conditions at the top of the list.

Port

This field displays the specific port number to which this policy applies. 

Schedule

This is the schedule that defines when the policy applies. any means the policy is 
active at all times if enabled.

User

This is the user name or user group to which the policy applies. If any displays, the 
policy applies to all users.

From

This is the source zone of the traffic to which this policy applies.

To

This is the destination zone of the traffic to which this policy applies.

Source

This is the source address or address group for whom this policy applies. If any 
displays, the policy is effective for every source.

Destination

This is the destination address or address group for whom this policy applies. If any 
displays, the policy is effective for every destination.

Access

This field displays what the ZyWALL does with packets for this application that 
match this policy.  
forward - the ZyWALL routes the packets for this application.
Drop - the ZyWALL does not route the packets for this application and does not 
notify the client of its decision.
Reject - the ZyWALL does not route the packets for this application and notifies the 
client of its decision.

BWM

These fields show the amount of bandwidth the application’s traffic that matches 
the policy can use. These fields only apply when Access is set to forward.
In - This is how much inbound bandwidth, in kilobits per second, this policy allows 
the application to use. Inbound refers to the traffic the ZyWALL sends to a 
connection’s initiator. If no displays here, this policy does not apply bandwidth 
management for the application’s incoming traffic.
Out - This is how much outbound bandwidth, in kilobits per second, this policy 
allows the application to use. Outbound refers to the traffic the ZyWALL sends out 
from a connection’s initiator. If no displays here, this policy does not apply 
bandwidth management for the application’s outgoing traffic.
Pri - This is the priority for this application’s traffic that matches this policy. The 
smaller the number, the higher the priority. The traffic of an application with higher 
priority is given bandwidth before traffic of an application with lower priority. The 
ZyWALL ignores this number if the incoming and outgoing limits are both set to 0. 
In this case the traffic is automatically treated as being set to the lowest priority (7) 
regardless of this field’s configuration.

Table 139   Application Edit (continued)