Chapter 56 Troubleshooting

option. The ZyWALL classifies the firmware package as not being able to be decompressed and deletes it.

You can upload the firmware package to the ZyWALL with the option enabled, so you only need to clear the Destroy compressed files that could not be decompressed option while you download the firmware package. See Section

33.2.1on page 579 for more on the anti-virusDestroy compressed files that could not be decompressed option.

I changed the LAN IP address and can no longer access the Internet.

The ZyWALL automatically updates address objects based on an interface’s IP address, subnet, or gateway if the interface’s IP address settings change. However, you need to manually edit any address objects for your LAN that are not based on the interface.

I configured application patrol to allow and manage access to a specific service but access is blocked.

•If you want to use a service, make sure both the firewall and application patrol allow the service’s packets to go through the ZyWALL.

•The ZyWALL checks firewall rules before it checks application patrol rules for traffic going through the ZyWALL.

I configured application patrol to block use of a specific service but a few packet’s still get through.

The ZyWALL allows the first eight packets to go through the firewall, regardless of the application patrol policy for the application. The ZyWALL examines these first eight packets to identify the application.

I configured policy routes to manage the bandwidth of TCP and UDP traffic but the bandwidth management is not being applied properly.

It is recommended to use application patrol instead of policy routes to manage the bandwidth of TCP and UDP traffic.

 

907

ZyWALL USG 300 User’s Guide