ZyWALL 5/35/70 Series User’s Guide

CH A P T E R 11

Firewall Screens

This chapter shows you how to configure your ZyWALL firewall.

11.1 Access Methods

The web configurator is, by far, the most comprehensive firewall configuration tool your ZyWALL has to offer. For this reason, it is recommended that you configure your firewall using the web configurator. SMT screens allow you to activate the firewall. CLI commands provide limited configuration options and are only recommended for advanced users, please refer to Appendix N on page 752 for firewall CLI commands.

11.2 Firewall Policies Overview

Firewall rules are grouped based on the direction of travel of packets to which they apply:

• LAN to LAN/ZyWALL

• WAN to LAN

• DMZ to LAN

• LAN to WAN

• WAN to WAN/ZyWALL

• DMZ to WAN

• LAN to DMZ

• WAN to DMZ

• DMZ to DMZ/ZyWALL

LAN to WLAN

WAN to WLAN

DMZ to WLAN

WLAN to LAN

WLAN to WAN

WLAN to DMZ

• WLAN to WLAN/ZyWALL

Note: You can only use the wireless LAN feature if a compatible ZyXEL wireless LAN card is installed.

By default, the ZyWALL’s stateful packet inspection allows packets traveling in the following directions:

LAN to LAN/ZyWALL

This allows computers on the LAN to manage the ZyWALL and communicate between networks or subnets connected to the LAN interface.

LAN to WAN

LAN to DMZ

LAN to WLAN

WAN to DMZ

DMZ to WAN

Chapter 11 Firewall Screens

210