Chapter 5 Configuration Basics

5.4.13 Application Patrol

Use application patrol to control which individuals can use which services through the ZyWALL (and when they can do so). You can also specify allowed amounts of bandwidth and priorities. You must subscribe to use application patrol. You can subscribe using the Licensing > Registration screens or one of the wizards.

MENU ITEM(S)

AppPatrol

 

Registration, zones, Schedules, users, user groups, addresses (source,

PREREQUISITES

destination), address groups (source, destination). These are only used as

 

criteria in exceptions and conditions.

Example: Suppose you want to allow vice president Bob to use BitTorrent and block everyone else from using it.

1Create a user account for Bob (User/Group).

2Click AppPatrol > Peer to Peer to go to the application patrol configuration screen. Click the BitTorrent application patrol entry’s Edit icon.

•Set the default policy’s access to Drop.

•Add another policy.

•Select the user account that you created for Bob.

•You can leave the source, destination and log settings at the default.

"With this example, Bob would have to log in using his account. If you do not want him to have to log in, you might create an exception policy with Bob’s computer IP address as the source.

5.4.14Anti-Virus

Use anti-virus to detect and take action on viruses. You must subscribe to use anti-virus. You can subscribe using the Licensing > Registration screens or one of the wizards.

MENU ITEM(S)

Anti-X > AV

PREREQUISITES

Registration, zones

 

 

5.4.15 IDP

Use IDP to detect and take action on malicious or suspicious packets. You must subscribe to use IDP. You can subscribe using the Licensing > Registration screens or one of the wizards.

MENU ITEM(S)

Anti-X > IDP

PREREQUISITES

Registration, zones

 

 

118

 

ZyWALL USG 100/200 Series User’s Guide