ZyXEL Communications ZyXEL ZyWALL 5 - Manual (Page 466)

ZyWALL 5 User’s Guide
Chapter 35 Filter Configuration 465
C
H A P T E R
35
Filter Configuration
This chapter shows you how to create and apply filters.
35.1 Introduction to Filters
Your ZyWALL uses filters to decide whether to allow passage of a data packet and/or to make
a call. There are two types of filter applications: data filtering and call filtering. Filters are
subdivided into device and protocol filters, which are discussed later.
Data filtering screens the data to determine if the packet should be allowed to pass. Data filters
are divided into incoming and outgoing filters, depending on the direction of the packet
relative to a port. Data filtering can be applied on either the WAN side or the LAN side. Call
filtering is used to determine if a packet should be allowed to trigger a call. Remote node call
filtering is only applicable when using PPPoE encapsulation. Outgoing packets must undergo
data filtering before they encounter call filtering as shown in the following figure.
Figure 279 Outgoing Packet Filtering Process
For incoming packets, your ZyWALL applies data filters only. Packets are processed
depending upon whether a match is found. The following sections describe how to configure
filter sets.