ZyXEL Communications ZyWALL USG-Series - VPN Concentrator Example

70
Scenario 11 – Configure Unified Policy (Firewall Policy + UTM Profile)
Introduction:
The unified policy is merging with firewall rule and UTM functions. The flow will check the firewall rule first,
and then check the UTM function. If the packets are already dropped by the firewall rule, then it will not
check the UTM rule any more. The behavior of policy control is to check for the Initiator source IP address.
For example, if you would like to block LAN1 users from downloading file from the Internet, then you
should block From: LAN, To: WAN, Service: FTP, Action: deny.
If the packets are already dropped by the firewall rule, then it will not check the UTM rule any more.
If the packets are allowed by the firewall rule, then you can select the UTM profile to control sessions.