Chapter 27 Application Patrol

The following table describes the labels in this screen. See Section 27.10.1 on page 397 for more information as well.

Table 116 AppPatrol > Other

LABEL

DESCRIPTION

Policy

This table lists the policies configured for traffic which does not match an

 

application.

 

 

#

This field is a sequential value, and it is not associated with a specific condition.

 

Note: The ZyWALL checks conditions in the order they appear in

 

the list. While this sequence does not affect the functionality,

 

you might improve the performance of the ZyWALL by putting

 

more common conditions at the top of the list.

 

 

Port

This field displays the specific port number to which this policy applies.

 

 

Schedule

This is the schedule that defines when the policy applies. any means the policy

 

always applies.

 

 

User

This is the user name or user group to which the policy applies. If any displays, the

 

policy applies to all users.

 

 

From

This is the source zone of the traffic to which this policy applies.

 

 

To

This is the destination zone of the traffic to which this policy applies.

 

 

Source

This is the source address or address group for whom this policy applies. If any

 

displays, the policy is effective for every source.

 

 

Destination

This is the destination address or address group for whom this policy applies. If any

 

displays, the policy is effective for every destination.

 

 

Protocol

This is the protocol of the traffic to which this policy applies.

 

 

Access

This field displays what the ZyWALL does with packets that match this policy.

 

forward - the ZyWALL routes the packets.

 

Drop - the ZyWALL does not route the packets and does not notify the client of its

 

decision.

 

Reject - the ZyWALL does not route the packets and notifies the client of its

 

decision.

 

 

BWM

These fields show the amount of bandwidth the traffic can use. These fields only

 

apply when Access is set to forward.

 

In - This is how much inbound bandwidth, in kilobits per second, this policy allows

 

the matching traffic to use. Inbound refers to the traffic the ZyWALL sends to a

 

connection’s initiator. If no displays here, this policy does not apply bandwidth

 

management for the inbound traffic.

 

Out - This is how much outgoing bandwidth, in kilobits per second, this policy

 

allows the matching traffic to use. Outbound refers to the traffic the ZyWALL sends

 

out from a connection’s initiator. If no displays here, this policy does not apply

 

bandwidth management for the outbound traffic.

 

Pri - This is the priority for the traffic that matches this policy. The smaller the

 

number, the higher the priority. Traffic with a higher priority is given bandwidth

 

before traffic with a lower priority. The ZyWALL ignores this number if the incoming

 

and outgoing limits are both set to 0. In this case the traffic is automatically treated

 

as being set to the lowest priority (7) regardless of this field’s configuration.

 

 

Log

Select whether to have the ZyWALL generate a log (log), log and alert (log alert)

 

or neither (no) when traffic matches this policy. See Chapter 46 on page 625 for

 

more on logs.

396

 

ZyWALL USG 1000 User’s Guide