ZyXEL Communications Wireless Gateway Series 사용자 설명서

다운로드
페이지 420
ZyAIR Wireless Gateway Series User’s Guide 
Firewall Screens 
 
12-1 
Chapter 12 
 Firewall Screens 
This chapter shows you how to configure your ZyAIR firewall. This chapter is not applicable to the 
ZyAIR B-2000. 
12.1 Access Methods 
The web configurator is, by far, the most comprehensive firewall configuration tool your ZyAIR has to offer. 
For this reason, it is recommended that you configure your firewall using the web configurator. SMT screens 
allow you to activate the firewall. 
12.2  Firewall Policies Overview 
Firewall rules are grouped based on the direction of travel of packets to which they apply: 
•  LAN to LAN/ZyAIR 
•  WAN to LAN 
 
•  LAN to WAN 
•  WAN to WAN/ZyAIR 
 
By default, the ZyAIR’s stateful packet inspection allows packets traveling in the following directions: 
•  LAN to LAN/ZyAIR  
This allows computers on the LAN to manage the ZyAIR and communicate between networks or 
subnets connected to the LAN interface. 
•  LAN to WAN 
By default, the ZyAIR’s stateful packet inspection blocks packets traveling in the following directions: 
•  WAN to LAN 
•  WAN to WAN/ZyAIR  
This prevents computers on the WAN from using the ZyAIR as a gateway to communicate with 
other computers on the WAN and/or managing the ZyAIR. 
You may define additional rules and sets or modify existing ones but please exercise extreme caution in 
doing so.