Chapter 28 Application Patrol

Table 134 AppPatrol > Other > Edit (continued)

LABEL

DESCRIPTION

Schedule

Select a schedule that defines when the policy applies or select Create

 

Object to configure a new one (see Chapter 38 on page 611 for details).

 

Otherwise, select any to make the policy always effective.

 

 

User

Select a user name or user group to which to apply the policy. Use

 

Create new Object if you need to configure a new user account (see

 

Section 35.2.1 on page 586 for details). Select any to apply the policy

 

for every user.

 

 

From

Select the source zone of the traffic to which this policy applies.

 

 

To

Select the destination zone of the traffic to which this policy applies.

 

 

Source

Select a source address or address group for whom this policy applies.

 

Use Create new Object if you need to configure a new one. Select any

 

if the policy is effective for every source.

 

 

Destination

Select a destination address or address group for whom this policy

 

applies. Use Create new Object if you need to configure a new one.

 

Select any if the policy is effective for every destination.

 

 

Protocol

Select the protocol for which this condition applies. Choices are: TCP

 

and UDP. Select any to apply the policy to both TCP and UDP traffic.

 

 

Access

This field controls what the ZyWALL does with packets that match this

 

policy. Choices are:

 

forward - the ZyWALL routes the packets.

 

Drop - the ZyWALL does not route the packets and does not notify the

 

client of its decision.

 

Reject - the ZyWALL does not route the packets and notifies the client

 

of its decision.

 

 

DSCP Marking

Set how the ZyWALL handles the DSCP value of the outgoing packets

 

that match this policy. Inbound refers to the traffic the ZyWALL sends to

 

a connection’s initiator. Outbound refers to the traffic the ZyWALL sends

 

out from a connection’s initiator.

 

Select one of the pre-defined DSCP values to apply or select User

 

Defined to specify another DSCP value. The “af” choices stand for

 

Assured Forwarding. The number following the “af” identifies one of four

 

classes and one of three drop preferences. See Assured Forwarding (AF)

 

PHB for DiffServ on page 293 for more details.

 

Select preserve to have the ZyWALL keep the packets’ original DSCP

 

value.

 

Select default to have the ZyWALL set the DSCP value of the packets to

 

0.

 

 

Bandwidth

Configure these fields to set the amount of bandwidth the application

Management

can use. These fields only apply when Access is set to forward.

 

 

460

 

ZyWALL USG 50 User’s Guide