PLANET SG-1000 - Manual (Page 189)

(4) LAN to DMZ: The source IP is in LAN network; the destination is in DMZ
network. The system manager can set all the policy rules of LAN to DMZ
packets in this function
(5) DMZ to LAN: The source IP is in DMZ network; the destination is in LAN
network. The system manager can set all the policy rules of DMZ to LAN
packets in this function
(6) DMZ to WAN: The source IP is in DMZ network; the destination is in WAN
network. The system manager can set all the policy rules of DMZ to WAN
packets in this function
All the packets that go through SG-1000 must pass the policy permission (except VPN).
Therefore, the LAN, WAN, and DMZ network have to set the applicable policy when establish
network connection.