What is the difference between firewall policy access settings "deny" and "reject" on NXC?

Zyxel_Kathy
Posts: 76
Zyxel Employee




Both the "deny" and "reject" settings will block the traffic. The difference in their behavior is that "deny” will drop the traffic without any response, while the "reject" option will block the traffic and report back to the client that the destination is unreachable.
For Example:
1. If the firewall is set up to "deny", you will see the "Request time out" message appear.

2. If the firewall set up to "reject", you will see the "Destination host unreachable" message instead.


2. If the firewall set up to "reject", you will see the "Destination host unreachable" message instead.

Tagged:
0
Categories
- All Categories
- 415 Beta Program
- 2.5K Nebula
- 155 Nebula Ideas
- 105 Nebula Status and Incidents
- 5.9K Security
- 319 USG FLEX H Series
- 286 Security Ideas
- 1.5K Switch
- 78 Switch Ideas
- 1.1K Wireless
- 42 Wireless Ideas
- 6.6K Consumer Product
- 256 Service & License
- 398 News and Release
- 86 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 3.7K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 87 About Community
- 78 Security Highlight