Chapter 28 Application Patrol

Table 132 Application Policy Edit (continued)

LABEL

DESCRIPTION

Schedule

Select a schedule that defines when the policy applies or select Create

 

Object to configure a new one (see Chapter 38 on page 611 for details).

 

Otherwise, select none to make the policy always effective.

 

 

User

Select a user name or user group to which to apply the policy. Use

 

Create new Object if you need to configure a new user account (see

 

Section 35.2.1 on page 586 for details). Select any to apply the policy

 

for every user.

 

 

From

Select the source zone of the traffic to which this policy applies.

 

 

To

Select the destination zone of the traffic to which this policy applies.

 

 

Source

Select a source address or address group for whom this policy applies.

 

Use Create new Object if you need to configure a new one. Select any

 

if the policy is effective for every source.

 

 

Destination

Select a destination address or address group for whom this policy

 

applies. Use Create new Object if you need to configure a new one.

 

Select any if the policy is effective for every destination.

 

 

Access

This field controls what the ZyWALL does with packets for this

 

application that match this policy. Choices are:

 

forward - the ZyWALL routes the packets for this application.

 

Drop - the ZyWALL does not route the packets for this application and

 

does not notify the client of its decision.

 

Reject - the ZyWALL does not route the packets for this application and

 

notifies the client of its decision.

 

 

DSCP Marking

Set how the ZyWALL handles the DSCP value of the outgoing packets

 

that match this policy. Inbound refers to the traffic the ZyWALL sends to

 

a connection’s initiator. Outbound refers to the traffic the ZyWALL sends

 

out from a connection’s initiator.

 

Select one of the pre-defined DSCP values to apply or select User

 

Defined to specify another DSCP value. The “af” choices stand for

 

Assured Forwarding. The number following the “af” identifies one of four

 

classes and one of three drop preferences. See Assured Forwarding (AF)

 

PHB for DiffServ on page 293 for more details.

 

Select preserve to have the ZyWALL keep the packets’ original DSCP

 

value.

 

Select default to have the ZyWALL set the DSCP value of the packets to

 

0.

 

 

454

 

ZyWALL USG 50 User’s Guide