Chapter 27 Application Patrol

Table 140 Application Policy Edit (continued)

LABEL

DESCRIPTION

Outbound

Type how much outbound bandwidth, in kilobits per second, this policy allows the

kbps

application to use. Outbound refers to the traffic the ZyWALL sends out from a

 

connection’s initiator.

 

If you enter 0 here, this policy does not apply bandwidth management for the

 

application’s traffic that the ZyWALL sends out from the initiator. Traffic with

 

bandwidth management disabled (inbound and outbound are both set to 0) is

 

automatically treated as the lowest priority (7).

 

If the sum of the bandwidths for routes using the same next hop is higher than the

 

actual transmission speed, lower priority traffic may not be sent if higher priority

 

traffic uses all of the actual bandwidth.

 

 

Priority

Enter a number between 1 and 7 to set the priority for this application’s traffic that

 

matches this policy. The smaller the number, the higher the priority.

 

The ZyWALL gives traffic of an application with higher priority bandwidth before

 

traffic of an application with lower priority.

 

The ZyWALL uses a fairness-based (round-robin) scheduler to divide bandwidth

 

between applications with the same priority.

 

The number in this field is ignored if the incoming and outgoing limits are both set to

 

0. In this case the traffic is automatically treated as being set to the lowest priority

 

(7) regardless of this field’s configuration.

 

 

Maximize

Enable maximize bandwidth usage to let the traffic matching this policy “borrow”

Bandwidth

any unused bandwidth on the out-going interface.

Usage

After each application gets its configured bandwidth rate, the ZyWALL uses the

 

fairness- based scheduler to divide any unused bandwidth on the out-going

 

interface amongst applications that need more bandwidth and have maximize

 

bandwidth usage enabled.

 

 

Log

Select whether to have the ZyWALL generate a log (log), log and alert (log alert)

 

or neither (no) when the application’s traffic matches this policy. See Chapter 45 on

 

page 715 for more on logs.

 

 

OK

Click OK to save your changes back to the ZyWALL.

 

 

Cancel

Click Cancel to exit this screen without saving your changes.

 

 

27.4 The Other Applications Screen

Sometimes, the ZyWALL cannot identify the application. For example, the application might be a new application, or the packets might arrive out of sequence. (The ZyWALL does not reorder packets when identifying the application.)

The Other (applications) screen controls the default policy for TCP and UDP traffic that the ZyWALL cannot identify. You can use source zone, destination zone, destination port, schedule, user, source, and destination information as criteria to create a sequence of specific conditions, similar to the sequence of rules used by firewalls, to specify what the ZyWALL should do more precisely. You can also control the bandwidth used by these other applications.This screen also allows you to add, edit, and remove conditions to this default policy.

Click AppPatrol > Other to open the Other (applications) screen.

458

 

ZyWALL USG 100/200 Series User’s Guide