User's Manual

Chapter 43 System
ZyWALL USG 20/20W User’s Guide
644
The following table describes the labels in this screen.
43.7 WWW Overview
The following figure shows secure and insecure management of the ZyWALL
coming in from the WAN. HTTPS and SSH access are secure. HTTP and Telnet
access are not secure.
• See Section 6.7.1 on page 105 for related information on these screens.
Note: To allow the ZyWALL to be accessed from a specified computer using a service,
make sure you do not have a service control rule or to-ZyWALL firewall rule to
block that traffic.
• See To-ZyWALL Rules on page 375 for more on To-ZyWALL firewall rules.
• See Section 7.8 on page 129 for an example of configuring service control to
block administrator HTTPS access from all zones except the LAN.
To stop a service from accessing the ZyWALL, clear Enable in the corresponding
service screen.
43.7.1 Service Access Limitations
A service cannot be used to access the ZyWALL when:
Table 199 Configuration > System > DNS > Service Control Rule Add
LABEL DESCRIPTION
Create new
Object
Use this to configure any new settings objects that you need to use in
this screen.
Address
Object
Select ALL to allow or deny any computer to send DNS queries to the
ZyWALL.
Select a predefined address object to just allow or deny the computer
with the IP address that you specified to send DNS queries to the
ZyWALL.
Zone Select ALL to allow or prevent DNS queries through any zones.
Select a predefined zone on which a DNS query to the ZyWALL is allowed
or denied.
Action Select Accept to have the ZyWALL allow the DNS queries from the
specified computer.
Select Deny to have the ZyWALL reject the DNS queries from the
specified computer.
OK Click OK to save your customized settings and exit this screen.
Cancel Click Cancel to exit this screen without saving