ZyXEL Unified Security Gateway ZyWALL 1000 User manual

www.zyxel.com

ZyWALL USG 1000

Unified Security Gateway

User’s Guide

Version 2.00

10/2007

Edition 1

DEFAULT LOGIN

LAN Port P1

IP Address http://192.168.1.1

User Name admin

Password 1234

About This User's Guide

ZyWALL USG 1000 User’s Guide

3

About This User's Guide

This manual is designed to guide you through the configuration of your ZyWALL for its

various applications. Generally, it is organized as follows.

• Introduction (ZyWALL, web configurator)

• Features (by menu item in the web configurator)

• Overview, including background

• Web Configurator screens

• Appendices

Intended Audience

This manual is intended for network administrators, or people who have a good knowledge of

TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using

the web configurator.

1 Read Chapter 1 on page 53 chapter for an overview of features available on the

ZyWALL.

2 Read Chapter 3 on page 65 for web browser requirements and an introduction to the

main components, icons and menus in the ZyWALL web configurator.

3 Read Chapter 4 on page 75 if you’re using the wizards for first time setup and you want

more detailed information than what the real time online help provides.

4 It is highly recommended you read Chapter 5 on page 111 for detailed information on

essential terms used in the ZyWALL, what prerequisites are needed to configure a

feature and how to use that feature.

5 It is highly recommended you read Chapter 6 on page 125 for multiple ZyWALL

application examples.

6 Subsequent chapters are arranged by menu item as defined in the web configurator. Read

each chapter carefully for detailed information on that menu item.

Related Documentation

• Quick Start Guide

The Quick Start Guide is designed to show you how to make the ZyWALL hardware

connections, rack mounting and access the web configurator wizards. (See the wizard real

time help for information on configuring each screen.) It contains a connection diagram,

default settings, handy checklists and information on setting up your network and

configuring for Internet access.

• Configuration Reference Card

See this handy reference card to see what prerequisites are needed to configure a feature

and how to use this feature in the ZyWALL.

• CLI Reference Guide

The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to

configure the ZyWALL.

About This User's Guide

ZyWALL USG 1000 User’s Guide

4

" It is recommended you use the web configurator to configure the ZyWALL.

• Web Configurator Online Help

Click the help icon in any screen for help in configuring that screen and supplementary

information.

• Supporting Disk

Refer to the included CD for support documents.

• ZyXEL Web Site

Please refer to www.zyxel.com

for additional support documentation and product

certifications.

User Guide Feedback

Help us help you. Send all User Guide-related comments, questions or suggestions for

improvement to the following address, or use e-mail instead. Thank you!

The Technical Writing Team,

ZyXEL Communications Corp.,

6 Innovation Road II,

Science-Based Industrial Park,

Hsinchu, 300, Taiwan.

E-mail: [email protected]

Document Conventions

ZyWALL USG 1000 User’s Guide

5

Document Conventions

Warnings and Notes

These are how warnings and notes are shown in this User’s Guide.

1 Warnings tell you about things that could harm you or your device.

" Notes tell you other important information (for example, other things you may

need to configure or helpful tips) or recommendations.

Syntax Conventions

• The ZyWALL USG1000 may be referred to as the “ZyWALL”, the “device”, the

“system” or the “product” in this User’s Guide.

• Product labels, screen names, field labels and field choices are all in bold font.

• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]

means the “enter” or “return” key on your keyboard.

• “Enter” means for you to type one or more characters and then press the [ENTER] key.

“Select” or “choose” means for you to use one of the predefined choices.

• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,

Maintenance > Log > Log Setting means you first click Maintenance in the navigation

panel, then the Log sub menu and finally the Log Setting tab to get to that screen.

• Units of measurement may denote the “metric” value or the “scientific” value. For

example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”

or “1048576” and so on.

• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions

ZyWALL USG 1000 User’s Guide

6

Icons Used in Figures

Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an

exact representation of your device.

ZyWALL Computer Notebook computer

Server Firewall Telephone

Switch Router

Safety Warnings

ZyWALL USG 1000 User’s Guide

7

Safety Warnings

1 For your safety, be sure to read and follow all warning notices and instructions.

• Do NOT use this product near water, for example, in a wet basement or near a swimming

pool.

• Do NOT expose your device to dampness, dust or corrosive liquids.

• Do NOT store things on the device.

• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk

of electric shock from lightning.

• Connect ONLY suitable accessories to the device.

• Do NOT open the device or unit. Opening or removing covers can expose you to

dangerous high voltage points or other risks. ONLY qualified service personnel should

service or disassemble this device. Please contact your vendor for further information.

• Make sure to connect the cables to the correct ports.

• Place connecting cables carefully so that no one will step on them or stumble over them.

• Always disconnect all cables from this device before servicing or disassembling.

• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right

supply voltage (for example, 110V AC in North America or 230V AC in Europe).

• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the

product where anyone can walk on the power adaptor or cord.

• Do NOT use the device if the power adaptor or cord is damaged as it might cause

electrocution.

• If the power adaptor or cord is damaged, remove it from the device and the power source.

• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a

new one.

• Do not use the device outside, and make sure all the connections are indoors. There is a

remote risk of electric shock from lightning.

• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED

BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO

THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling

of electrical and electronic equipment. For detailed information about recycling of this

product, please contact your local city office, your household waste disposal service or the

store where you purchased the product.

• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your

device.

This product is recyclable. Dispose of it properly.

Safety Warnings

ZyWALL USG 1000 User’s Guide

8

Contents Overview

ZyWALL USG 1000 User’s Guide

9

Contents Overview

Introduction ............................................................................................................................ 51

Introducing the ZyWALL ............................................................................................................ 53

Features and Applications ......................................................................................................... 57

Web Configurator ....................................................................................................................... 65

Wizard Setup ............................................................................................................................. 75

Configuration Basics ................................................................................................................111

Tutorials ................................................................................................................................... 125

Status ...................................................................................................................................... 157

Registration ............................................................................................................................. 165

Update ..................................................................................................................................... 171

Network ................................................................................................................................. 177

Interface ................................................................................................................................... 179

Trunks ...................................................................................................................................... 219

Policy and Static Routes .......................................................................................................... 225

Routing Protocols .................................................................................................................... 235

Zones ...................................................................................................................................... 245

DDNS ...................................................................................................................................... 249

Virtual Servers ......................................................................................................................... 255

HTTP Redirect ........................................................................................................................ 261

ALG ......................................................................................................................................... 265

Firewall and VPN .................................................................................................................. 275

Firewall .................................................................................................................................. 277

IPSec VPN ............................................................................................................................... 291

SSL VPN ................................................................................................................................. 323

SSL User Screens ................................................................................................................... 331

SSL User Application Screens ................................................................................................ 337

SSL User File Sharing Screens ............................................................................................... 339

L2TP VPN ................................................................................................................................ 345

L2TP VPN Example ................................................................................................................. 351

Application Patrol & Anti-X ................................................................................................. 377

Application Patrol ..................................................................................................................... 379

Anti-Virus ................................................................................................................................. 403

IDP .......................................................................................................................................... 417

ADP ........................................................................................................................................ 445

Contents Overview

ZyWALL USG 1000 User’s Guide

10

Content Filter Screens ............................................................................................................. 463

Content Filter Reports ............................................................................................................. 483

Device HA & Objects ........................................................................................................... 491

Device HA ............................................................................................................................... 493

User/Group ............................................................................................................................. 503

Addresses ............................................................................................................................... 515

Services ................................................................................................................................... 521

Schedules ................................................................................................................................ 527

AAA Server ............................................................................................................................. 531

Authentication Objects ............................................................................................................ 541

Certificates ............................................................................................................................... 545

ISP Accounts ........................................................................................................................... 563

SSL Application ....................................................................................................................... 567

System .................................................................................................................................. 573

System ................................................................................................................................... 575

Service Control ....................................................................................................................... 587

Maintenance & Troubleshooting ........................................................................................ 613

File Manager ............................................................................................................................ 615

Logs ........................................................................................................................................ 625

Reports ................................................................................................................................... 637

Diagnostics ............................................................................................................................. 647

Reboot ..................................................................................................................................... 649

Troubleshooting ....................................................................................................................... 651

Appendices and Index ......................................................................................................... 655

Table of Contents

ZyWALL USG 1000 User’s Guide

11

Table of Contents

About This User's Guide .......................................................................................................... 3

Document Conventions............................................................................................................5

Safety Warnings........................................................................................................................ 7

Contents Overview ...................................................................................................................9

Table of Contents.................................................................................................................... 11

List of Figures .........................................................................................................................31

List of Tables........................................................................................................................... 43

Part I: Introduction................................................................................. 51

Chapter 1

Introducing the ZyWALL ........................................................................................................ 53

1.1 Overview and Key Default Settings ..................................................................................... 53

1.2 Front Panel LEDs ................................................................................................................ 53

1.3 Management Overview ........................................................................................................54

1.4 Starting and Stopping the ZyWALL ...................................................................................... 55

Chapter 2

Features and Applications..................................................................................................... 57

2.1 Features .............................................................................................................................. 57

2.2 Packet Flow ......................................................................................................................... 58

2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 59

2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 59

2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 59

2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 59

2.3 Applications ......................................................................................................................... 60

2.3.1 VPN Connectivity ....................................................................................................... 60

2.3.2 SSL VPN Network Access ......................................................................................... 60

2.3.3 User-Aware Access Control ....................................................................................... 61

2.3.4 Multiple WAN Interfaces ............................................................................................. 62

2.3.5 Device HA .................................................................................................................. 62

Chapter 3

Web Configurator.................................................................................................................... 65

Table of Contents

ZyWALL USG 1000 User’s Guide

12

3.1 Web Configurator Requirements ......................................................................................... 65

3.2 Web Configurator Access ....................................................................................................65

3.3 Web Configurator Main Screen ........................................................................................... 67

3.3.1 Title Bar ...................................................................................................................... 67

3.3.2 Navigation Panel ........................................................................................................ 68

3.3.3 Main Window ..............................................................................................................71

3.3.4 Message Bar ..............................................................................................................72

Chapter 4

Wizard Setup ...........................................................................................................................75

4.1 Wizard Setup Overview ....................................................................................................... 75

4.2 Installation Setup, One ISP ................................................................................................. 76

4.3 Step 1 Internet Access ........................................................................................................ 77

4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 78

4.3.2 Ethernet: Static IP Address Assignment .................................................................... 78

4.3.3 Step 2 Internet Access Ethernet ................................................................................ 80

4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 81

4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 82

4.3.6 Step 2 Internet Access PPPoE .................................................................................. 84

4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 85

4.3.8 PPTP: Static IP Address Assignment ......................................................................... 88

4.3.9 Step 2 Internet Access PPTP .................................................................................... 89

4.3.10 Step 4 Internet Access - Finish ............................................................................... 91

4.4 Device Registration .......................................................................................................... 91

4.5 Installation Setup, Two Internet Service Providers .............................................................. 93

4.5.1 Internet Access Wizard Setup Complete ................................................................... 95

4.6 VPN Setup ........................................................................................................................... 95

4.7 VPN Wizards ...................................................................................................................... 96

4.7.1 VPN Express Wizard .................................................................................................. 97

4.8 VPN Express Wizard - Remote Gateway ........................................................................... 97

4.8.1 VPN Express Wizard - Policy Setting ........................................................................ 99

4.8.2 VPN Express Wizard - Summary ............................................................................ 100

4.8.3 VPN Express Wizard - Finish .................................................................................. 101

4.8.4 VPN Advanced Wizard ............................................................................................. 101

4.8.5 VPN Advanced Wizard - Remote Gateway ............................................................. 103

4.8.6 VPN Advanced Wizard - Phase 1 ........................................................................... 105

4.8.7 VPN Advanced Wizard - Phase 2 ........................................................................... 107

4.8.8 VPN Advanced Wizard - Summary ......................................................................... 108

4.8.9 VPN Advanced Wizard - Finish ............................................................................... 109

Chapter 5

Configuration Basics...........................................................................................................111

5.1 Granular Configuration ....................................................................................................... 111

Table of Contents

ZyWALL USG 1000 User’s Guide

13

5.2 Terminology in the ZyWALL ................................................................................................112

5.3 Physical Ports, Interfaces, and Zones ................................................................................112

5.3.1 Network Topology Example .......................................................................................113

5.4 Feature Configuration Overview ........................................................................................114

5.4.1 Feature ......................................................................................................................114

5.4.2 Interface ....................................................................................................................115

5.4.3 Trunks .......................................................................................................................115

5.4.4 IPSec VPN ................................................................................................................116

5.4.5 SSL VPN ...................................................................................................................116

5.4.6 L2TP VPN .................................................................................................................116

5.4.7 Zones ........................................................................................................................116

5.4.8 Device HA .................................................................................................................117

5.4.9 DDNS ........................................................................................................................117

5.4.10 Policy Routes ..........................................................................................................117

5.4.11 Static Routes ...........................................................................................................118

5.4.12 Firewall ....................................................................................................................118

5.4.13 Application Patrol ....................................................................................................119

5.4.14 Anti-Virus ................................................................................................................ 120

5.4.15 IDP ......................................................................................................................... 120

5.4.16 ADP ........................................................................................................................ 120

5.4.17 Content Filter ..........................................................................................................120

5.4.18 Virtual Server (Port Forwarding) ............................................................................ 121

5.4.19 HTTP Redirect ....................................................................................................... 121

5.4.20 ALG ........................................................................................................................ 122

5.5 Objects .............................................................................................................................. 122

5.5.1 User/Group ...............................................................................................................122

5.6 System Management and Maintenance ............................................................................ 123

5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM .................. 123

5.6.2 File Manager ............................................................................................................ 124

5.6.3 Licensing Registration .............................................................................................. 124

5.6.4 Licensing Update ..................................................................................................... 124

5.6.5 Logs and Reports ..................................................................................................... 124

5.6.6 Diagnostics ............................................................................................................... 124

Chapter 6

Tutorials ................................................................................................................................. 125

6.1 Interfaces and Zones ......................................................................................................... 125

6.1.1 Set up Port Grouping ............................................................................................... 125

6.1.2 Set up Ethernet Interfaces ....................................................................................... 127

6.1.3 WAN Trunk ............................................................................................................... 129

6.1.4 Zones ....................................................................................................................... 130

6.2 IPSec VPN ......................................................................................................................... 132

6.2.1 Set up the Ethernet Interfaces and Zones ............................................................... 132

Table of Contents

ZyWALL USG 1000 User’s Guide

14

6.2.2 Set up the VPN Gateway ......................................................................................... 132

6.2.3 Set up the VPN Connection ..................................................................................... 133

6.2.4 Set up the Policy Route for the VPN Tunnel ............................................................ 134

6.2.5 Set up the Zone for the VPN Tunnel ........................................................................ 135

6.3 Device HA .......................................................................................................................... 136

6.3.1 Set up DNS for the Virtual Router ............................................................................ 136

6.3.2 Set up the VRRP Groups on the Master .................................................................. 136

6.3.3 Set up the Password for Synchronization ................................................................ 138

6.3.4 Finish Configuring the Master .................................................................................. 139

6.3.5 Set up the Ethernet Interfaces on the Backup ......................................................... 139

6.3.6 Set up the VRRP Groups on the Backup ................................................................. 139

6.3.7 Synchronize the Backup .......................................................................................... 140

6.4 User-Aware Access Control ............................................................................................... 140

6.4.1 Set up User Accounts .............................................................................................. 141

6.4.2 Set up User Groups ................................................................................................. 141

6.4.3 Set up User Authentication Using the RADIUS Server ............................................ 142

6.4.4 Set up Web Surfing Policies With Bandwidth Restrictions ....................................... 143

6.4.5 Set up MSN Policies ................................................................................................ 144

6.4.6 Set up LAN-to-DMZ Policies .................................................................................... 145

6.5 Trunks ................................................................................................................................ 146

6.5.1 Set up Available Bandwidth on Ethernet Interfaces ................................................. 146

6.5.2 Change WAN Trunk Algorithm ................................................................................. 147

6.6 NAT 1:1 Example ............................................................................................................... 147

6.6.1 NAT 1:1 Address Objects ......................................................................................... 148

6.6.2 NAT 1:1 Virtual Server .............................................................................................. 149

6.6.3 NAT 1:1 Policy Route ............................................................................................... 149

6.6.4 NAT 1:1 Firewall Rule .............................................................................................. 150

6.7 NAT Loopback ................................................................................................................... 151

6.7.1 NAT Loopback Virtual Server ................................................................................... 152

6.7.2 NAT Loopback Policy Route .................................................................................... 153

6.8 Service Control and the Firewall ........................................................................................ 155

6.8.1 Allowing HTTPS Administrator Access Only From the LAN .................................... 155

Chapter 7

Status .................................................................................................................................... 157

7.1 Status Screen .................................................................................................................... 157

7.2 VPN Status ........................................................................................................................ 160

7.3 DHCP Table ....................................................................................................................... 161

7.4 Port Statistics .................................................................................................................... 162

7.5 Current Users .................................................................................................................... 163

Chapter 8

Registration...........................................................................................................................165

Table of Contents

ZyWALL USG 1000 User’s Guide

15

8.1 myZyXEL.com Overview ................................................................................................... 165

8.1.1 Subscription Services Available on the ZyWALL ..................................................... 165

8.2 Registration ....................................................................................................................... 166

8.3 Service .............................................................................................................................. 168

Chapter 9

Update.................................................................................................................................... 171

9.1 Updating Anti-virus Signatures .......................................................................................... 171

9.2 Updating IDP and Application Patrol Signatures .............................................................. 173

9.3 Updating System Protect Signatures ................................................................................ 175

Part II: Network..................................................................................... 177

Chapter 10

Interface................................................................................................................................. 179

10.1 Interface Overview ........................................................................................................... 179

10.1.1 Types of Interfaces ................................................................................................. 179

10.1.2 IP Address Assignment .......................................................................................... 180

10.1.3 Interface Parameters .............................................................................................. 182

10.1.4 DHCP Settings ....................................................................................................... 182

10.1.5 Ping Check Settings ............................................................................................... 183

10.1.6 Relationships Between Interfaces .......................................................................... 184

10.2 Ethernet Interfaces .......................................................................................................... 184

10.2.1 Ethernet Interfaces Overview ................................................................................. 184

10.2.2 Interface Summary Screen .................................................................................... 185

10.2.3 Ethernet Summary Screen ..................................................................................... 188

10.2.4 Ethernet Edit ......................................................................................................... 189

10.3 Port Grouping ................................................................................................................. 194

10.3.1 Port Grouping Overview ......................................................................................... 194

10.3.2 Port Grouping Screen ............................................................................................ 195

10.4 VLAN Interfaces ............................................................................................................. 196

10.4.1 VLAN Overview ...................................................................................................... 196

10.4.2 VLAN Interfaces Overview ..................................................................................... 198

10.4.3 VLAN Summary Screen ......................................................................................... 198

10.4.4 VLAN Add/Edit ...................................................................................................... 199

10.5 Bridge Interfaces ............................................................................................................ 203

10.5.1 Bridge Overview ..................................................................................................... 204

10.5.2 Bridge Interface Overview ...................................................................................... 205

10.5.3 Bridge Summary .................................................................................................... 205

10.5.4 Bridge Add/Edit ..................................................................................................... 206

10.6 PPPoE/PPTP Interfaces ................................................................................................. 210

Table of Contents

ZyWALL USG 1000 User’s Guide

16

10.6.1 PPPoE/PPTP Overview ......................................................................................... 210

10.6.2 PPPoE/PPTP Interfaces Overview .........................................................................211

10.6.3 PPPoE/PPTP Interface Summary .......................................................................... 212

10.6.4 PPPoE/PPTP Interface Add/Edit ........................................................................... 213

10.7 Auxiliary Interface ........................................................................................................... 215

10.7.1 Auxiliary Interface Overview ................................................................................... 215

10.7.2 Auxiliary .................................................................................................................. 215

10.8 Virtual Interfaces ............................................................................................................. 217

10.8.1 Virtual Interfaces Add/Edit ...................................................................................... 217

Chapter 11

Trunks ....................................................................................................................................219

11.1 Trunks Overview .............................................................................................................. 219

11.2 Trunk Scenario Examples ................................................................................................ 219

11.3 Load Balancing Introduction ............................................................................................ 219

11.4 Load Balancing Algorithms .............................................................................................. 220

11.4.1 Least Load First ...................................................................................................... 220

11.4.2 Weighted Round Robin .......................................................................................... 221

11.4.3 Spillover .................................................................................................................. 221

11.5 Trunk Summary ............................................................................................................... 222

11.6 Configuring a Trunk ........................................................................................................ 222

Chapter 12

Policy and Static Routes ......................................................................................................225

12.1 Policy Route .................................................................................................................... 225

12.1.1 Benefits .................................................................................................................. 225

12.2 Routing Policy .................................................................................................................. 225

12.2.1 NAT and SNAT ....................................................................................................... 226

12.2.2 Port Triggering ....................................................................................................... 226

12.2.3 Maximize Bandwidth Usage ................................................................................... 227

12.2.4 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 227

12.3 IP Routing Policy Setup ...................................................................................................227

12.4 Policy Route Edit ............................................................................................................ 229

12.5 IP Static Routes .............................................................................................................. 232

12.6 Static Route Summary ..................................................................................................... 233

12.7 Edit a Static Route .......................................................................................................... 233

Chapter 13

Routing Protocols................................................................................................................. 235

13.1 Routing Protocols Overview ............................................................................................ 235

13.1.1 RIP Overview ......................................................................................................... 235

13.1.2 Authentication Types .............................................................................................. 236

13.2 RIP Screen ...................................................................................................................... 236

Table of Contents

ZyWALL USG 1000 User’s Guide

17

13.3 OSPF Overview .............................................................................................................. 237

13.3.1 OSPF Areas ........................................................................................................... 238

13.3.2 OSPF Routers ........................................................................................................ 239

13.3.3 Virtual Links ............................................................................................................ 240

13.3.4 OSPF Configuration ............................................................................................... 240

13.4 OSPF Screens ................................................................................................................. 241

13.4.1 OSPF Summary ..................................................................................................... 241

13.4.2 OSPF Area Add/Edit ............................................................................................. 242

Chapter 14

Zones ....................................................................................................................................245

14.1 Zones Overview ............................................................................................................... 245

14.1.1 Effect of Zones on Different Types of Traffic .......................................................... 245

14.2 Zone Summary ................................................................................................................ 246

14.3 Zone Add/Edit ................................................................................................................. 247

Chapter 15

DDNS...................................................................................................................................... 249

15.1 DDNS Overview .............................................................................................................. 249

15.1.1 DYNDNS Wildcard ................................................................................................. 249

15.1.2 High Availability (HA) ............................................................................................. 250

15.1.3 Mail Exchanger ...................................................................................................... 250

15.2 DDNS Screens ................................................................................................................ 250

15.3 DDNS Summary ..............................................................................................................251

15.4 Dynamic DNS Add/Edit .................................................................................................. 252

Chapter 16

Virtual Servers....................................................................................................................... 255

16.1 Virtual Server Overview ...................................................................................................255

16.2 Virtual Server Example ....................................................................................................256

16.3 Virtual Server Screens ..................................................................................................... 256

16.4 Virtual Server Summary Screen ...................................................................................... 256

16.4.1 Virtual Server Add/Edit .......................................................................................... 258

Chapter 17

HTTP Redirect ......................................................................................................................261

17.1 HTTP Redirect Overview ................................................................................................. 261

17.1.1 Web Proxy Server .................................................................................................. 261

17.2 HTTP Redirect, Firewall and Policy Route ...................................................................... 261

17.3 Configuring HTTP Redirect ............................................................................................. 262

17.4 HTTP Redirect Edit ......................................................................................................... 263

Chapter 18

ALG ........................................................................................................................................265

Table of Contents

ZyWALL USG 1000 User’s Guide

18

18.1 ALG Introduction .............................................................................................................. 265

18.1.1 Application Layer Gateway (ALG) and NAT ........................................................... 265

18.1.2 ALG and Trunks ..................................................................................................... 265

18.1.3 FTP ........................................................................................................................ 266

18.1.4 H.323 ...................................................................................................................... 266

18.1.5 RTP ........................................................................................................................ 266

18.1.6 SIP ......................................................................................................................... 267

18.2 Peer-to-Peer Calls and the ZyWALL ............................................................................... 268

18.2.1 VoIP Calls from the WAN with Multiple Outgoing Calls .......................................... 268

18.2.2 VoIP with Multiple WAN IP Addresses ................................................................... 268

18.3 ALG Screen ..................................................................................................................... 269

18.4 WAN to LAN SIP Peer-to-peer Calls Example ................................................................ 271

Part III: Firewall and VPN..................................................................... 275

Chapter 19

Firewall................................................................................................................................. 277

19.1 Firewall Overview ............................................................................................................ 277

19.2 Firewall Rules .................................................................................................................. 278

19.2.1 Rule Directions ....................................................................................................... 278

19.2.2 Firewall and VPN Traffic ......................................................................................... 280

19.3 Firewall Rule Example Applications ................................................................................ 280

19.4 Alerts ............................................................................................................................... 282

19.5 Asymmetrical Routes .......................................................................................................282

19.5.1 Virtual Interfaces and Asymmetrical Routes .......................................................... 283

19.6 Configuring the Firewall ................................................................................................... 283

19.6.1 Edit a Firewall Rule ................................................................................................ 286

19.7 Firewall Rule Configuration Example .............................................................................. 287

Chapter 20

IPSec VPN.............................................................................................................................. 291

20.1 IPSec VPN Overview ....................................................................................................... 291

20.1.1 IPSec SA Overview ................................................................................................ 292

20.1.2 Additional Topics for IPSec SA ............................................................................... 294

20.2 VPN Related Configuration ............................................................................................. 296

20.3 VPN Connection Screens ................................................................................................ 297

20.3.1 VPN Connection Summary .................................................................................... 297

20.3.2 VPN Connection Add/Edit IKE .............................................................................. 298

20.3.3 VPN Connection Add/Edit Manual Key .................................................................. 302

20.4 VPN Gateway Screens ................................................................................................... 306

20.4.1 IKE SA Overview .................................................................................................... 306

Table of Contents

ZyWALL USG 1000 User’s Guide

19

20.4.2 Additional Topics for IKE SA .................................................................................. 310

20.4.3 VPN Gateway Summary ........................................................................................ 312

20.4.4 VPN Gateway Add/Edit ......................................................................................... 313

20.5 VPN Concentrator ........................................................................................................... 318

20.5.1 VPN Concentrator Summary .................................................................................. 319

20.5.2 VPN Concentrator Add/Edit .................................................................................. 319

20.6 SA Monitor Screen ......................................................................................................... 320

20.6.1 Regular Expressions in Searching IPSec SAs by Name or Policy ......................... 322

Chapter 21

SSL VPN................................................................................................................................. 323

21.1 SSL Access Policy ........................................................................................................... 323

21.1.1 SSL Access Policy Objects .................................................................................... 323

21.1.2 SSL Access Policy Limitations ............................................................................... 324

21.2 SSL Access Privilege List ................................................................................................ 324

21.3 Creating/Editing an SSL Access Policy .......................................................................... 325

21.4 SSL Connection Monitor .................................................................................................. 326

21.5 Configuring SSL Global Setting ....................................................................................... 327

21.5.1 Uploading a Custom Logo ...................................................................................... 329

21.6 Establishing an SSL VPN Connection ............................................................................. 329

Chapter 22

SSL User Screens ................................................................................................................. 331

22.1 Overview .......................................................................................................................... 331

22.1.1 Network Resource Access Methods ...................................................................... 331

22.1.2 System Requirements ............................................................................................ 331

22.1.3 Information You Need ............................................................................................ 332

22.1.4 Certificates ............................................................................................................. 332

22.2 Remote User Login .......................................................................................................... 332

22.3 SSL VPN User Screens ................................................................................................... 334

22.4 Bookmark ........................................................................................................................ 335

22.5 Logout .............................................................................................................................. 335

Chapter 23

SSL User Application Screens ............................................................................................337

23.1 Overview .......................................................................................................................... 337

23.1.1 The Application Screen .......................................................................................... 337

Chapter 24

SSL User File Sharing Screens ...........................................................................................339

24.1 Overview .......................................................................................................................... 339

24.2 Main File Sharing Screen ................................................................................................ 339

24.3 Opening a File or Folder ..................................................................................................340

Table of Contents

ZyWALL USG 1000 User’s Guide

20

24.3.1 Downloading a File ................................................................................................. 341

24.3.2 Saving a File .......................................................................................................... 341

24.4 Creating a New Folder .....................................................................................................342

24.5 Renaming a File or Folder ............................................................................................... 342

24.6 Deleting a File or Folder .................................................................................................. 343

24.7 Uploading a File ............................................................................................................... 344

Chapter 25

L2TP VPN............................................................................................................................... 345

25.1 L2TP VPN Overview ........................................................................................................ 345

25.2 IPSec Configuration ......................................................................................................... 345

25.2.1 Using the Default L2TP VPN Connection .............................................................. 346

25.3 Policy Route .................................................................................................................... 346

25.4 L2TP VPN Configuration ................................................................................................. 347

25.5 L2TP VPN Session Monitor ............................................................................................. 348

Chapter 26

L2TP VPN Example ...............................................................................................................351

26.1 L2TP VPN Example ......................................................................................................... 351

26.2 Configuring the Default L2TP VPN Gateway Example .................................................... 351

26.3 Configuring the Default L2TP VPN Connection Example ................................................ 353

26.4 Configuring the L2TP VPN Settings Example ................................................................. 354

26.5 Configuring the Policy Route for L2TP Example ............................................................. 354

26.6 Configuring L2TP VPN in Windows XP and 2000 ........................................................... 355

26.6.1 Configuring L2TP in Windows XP .......................................................................... 356

26.6.2 Configuring L2TP in Windows 2000 ....................................................................... 361

Part IV: Application Patrol & Anti-X.................................................... 377

Chapter 27

Application Patrol .................................................................................................................379

27.1 Application Patrol Overview ............................................................................................. 379

27.2 Classification of Applications ........................................................................................... 379

27.3 Configurable Application Policies .................................................................................... 380

27.4 Bandwidth Management .................................................................................................. 380

27.4.1 Connection and Packet Directions ......................................................................... 381

27.4.2 Outbound and Inbound Bandwidth Limits .............................................................. 381

27.4.3 Bandwidth Management Priority ............................................................................ 382

27.4.4 Maximize Bandwidth Usage ................................................................................... 382

27.4.5 Bandwidth Management Behavior ......................................................................... 382

27.5 Application Patrol Bandwidth Management Examples .................................................... 384

Page is loading ...

ZyXEL Unified Security Gateway ZyWALL 1000 User manual

This manual is also suitable for

ZyXEL Unified Security Gateway ZyWALL 1000 User manual

Related papers

Other documents