Best Of

Hi @DavidePon

maybe a user with "limited-admin" privilleges might fit with your requirement.

In case:

Go to Configuration ⇒ object ⇒ user/group

and add the user in the "User" panel.

From the drop down menu "User Type" you can select " Limited Admin"

Hope this can help

Fred

If the next-hop of rule #3(of my comments) is 10.70.70.2, you get 4 steps of a roundtrip.

If the next-hop of rule #3(of my comments) is 10.70.70.20, you get 3 steps of a roundtrip.

So that, next-hop set to 10.70.70.20 is one lease hop cost (network latency) than to 10.70.70.2

"Allowing asymmetrical routes may let traffic from the WAN go directly to the LAN without passing through the ZyWALL."

This is wrong statement.

The security policy still check and block not allowed traffic. If there a policy not allow WAN to LAN.

thanks !!

Wait for a few days.

Doing the POC on my lab.