ZyXEL Communications ZyWALL 300 User Manual
ZyWALL USG 300
Unified Security Gateway
User’s Guide
Version 2.00
9/2007
Edition 2
DEFAULT LOGIN
LAN Port 1
IP Address http://192.168.1.1
User Name admin
Password 1234
www.zyxel.com
About This User's Guide
About This User's Guide
This manual is designed to guide you through the configuration of your ZyWALL for its
various applications. Generally, it is organized as follows.
• Introduction (ZyWALL, web configurator)
• Features (by menu item in the web configurator)
• Overview, including background
• Web Configurator screens
• Appendices
Intended Audience
This manual is intended for network administrators, or people who have a good knowledge of
TCP/IP networking concepts and topology , who want to want to configure the ZyWALL using
the web configurator.
1 Read Chapter 1 on page 53 chapter for an overview of features available on the
ZyWALL.
2 Read Chapter 3 on page 65 for web browser requirements and an introduction to the
main components, icons and menus in the ZyWALL web configurator.
3 Read Chapter 4 on page 75 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
4 It is highly recommended you read Chapter 5 on page 111 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a
feature and how to use that feature.
5 It is highly recommended you read Chapter 6 on page 125 for multiple ZyWALL
application examples.
6 Subsequent chapters are arranged by menu item as defined in the web configurator . Read
each chapter carefully for detailed information on that menu item.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the web configurator wizards. (See the wizard real
time help for information on configuring each screen.) It contains a connection diagram,
default settings, handy checklists and information on setting up your network and
configuring for Internet access.
• Configuration Reference Card
See this handy reference card to see what prerequisites are needed to configure a feature
and how to use this feature in the ZyWALL.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
ZyWALL USG 300 User’s Guide
3
About This User's Guide
" It is recommended you use the web configurator to configure the ZyWALL.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
for additional support documentation and product
E-mail: techwriters@zyxel.com.tw
4
ZyWALL USG 300 User’s Guide
Document Conventions
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1 Warnings tell you about things that could harm you or your device.
" Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL USG 300 may be referred to as the “ZyWALL”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.
ZyWALL USG 300 User’s Guide
5
Document Conventions
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router
6
ZyWALL USG 300 User’s Guide
Safety Warnings
Safety Warnings
1 For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city offi ce, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
This product is recyclable. Dispose of it properly.
ZyWALL USG 300 User’s Guide
7
Safety Warnings
8
ZyWALL USG 300 User’s Guide
Contents Overview
Contents Overview
Introduction ............................................................................................................................51
Introducing the ZyWALL ............................................................................................................ 53
Features and Applications ......................................................................................................... 57
Web Configurator ............................................. ... ... ... .... ............................................................. 65
Wizard Setup ............................................................................................................................. 75
Configuration Basics ................................................................................................................111
Tutorials ...................................................................................................................................125
Status ...................................................................................................................................... 157
Registration ............................................................................................................................. 165
Update ..................................................................................................................................... 171
Network .................................................................................................................................177
Interface .................................... ....................... ...................... ....................... ........................... 179
Trunks .................................................... .......................................... ........................................ 219
Policy and Static Routes .......................................................................................................... 225
Routing Protocols .................................................................................................................... 235
Zones ...................................................................................................................................... 245
DDNS ...................................................................................................................................... 249
Virtual Servers .........................................................................................................................255
HTTP Redirect ........................................................................................................................261
ALG ......................................................................................................................................... 265
Firewall and VPN ..................................................................................................................275
Firewall .................................................................................................................................. 277
IPSec VPN ................... ... ........................................................... ... ... ... ... .................................. 291
SSL VPN ................................................................................................................................. 323
SSL User Screens ................................................................................................................... 331
SSL User Application Screens ................................................................................................ 337
SSL User File Sharing Screens ............................................................................................... 339
L2TP VPN ................................................................................................................................ 345
L2TP VPN Example ................................................................................................................. 351
Application Patrol & Anti-X .................................................................................................377
Application Patrol ..................................................................................................................... 379
Anti-Virus ................................................................................................................................. 403
IDP ..........................................................................................................................................417
ADP ........................................................................................................................................ 445
ZyWALL USG 300 User’s Guide
9
Contents Overview
Content Filter Screens ........................................ ... ... .... ... ... ... .... ... ........................................... 463
Content Filter Reports .............................................................................................................483
Device HA & Objects ...........................................................................................................491
Device HA ............................................................................................................................... 493
User/Group ............................................................................................................................. 503
Addresses ............................................................................................................................... 515
Services ................................. ....................................................... ........................................... 521
Schedules ................................. ................................................. .............................................. 527
AAA Server ............................................................................................................................. 531
Authentication Objects ............................................................................................................ 541
Certificates ................................... ....................... ....................... ...................... ........................ 545
ISP Accounts ............ ... ... .... .......................................................... ... ... ... .... ... ... ... .... ... ..............563
SSL Application ....................................................................................................................... 567
System ..................................................................................................................................573
System .................................................................................................................................... 575
Service Control ....................................................................................................................... 587
Maintenance & Troubleshooting ........................................................................................613
File Manager ............................................................................................................................ 615
Logs ........................................................................................................................................ 625
Reports ................................................................................................................................... 637
Diagnostics .............................................................................................................................647
Reboot ..................................................................................................................................... 649
Troubleshooting ..................................................... .................................................................. 651
Appendices and Index .........................................................................................................653
10
ZyWALL USG 300 User’s Guide
Table of Contents
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings ........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................31
List of Tables...........................................................................................................................43
Part I: Introduction................................................................................. 51
Chapter 1
Introducing the ZyWALL ........................................................................................................53
1.1 Overview and Key Default Settings ..................................................................................... 53
1.2 Front Panel LEDs ............................ ... .......................................................... .... ... ... ... ... ....... 53
1.3 Management Overview .......... .... ... ... ............................................................. .... ... ................54
1.3.1 Web Configurator ................... ... ... .... ... .......................................................... ... ... .... ... 54
1.3.2 Command-Line Interface (CLI) ............... ... .... ... ... ... .... ... ... .......................................... 55
1.3.3 Console Port ... .... ... ... ... .... ... ... ... .......................................................... .... ... ... ... ... .... ... 55
1.4 Starting and Stopping the ZyWALL ...................................................................................... 55
Chapter 2
Features and Applications.....................................................................................................57
2.1 Features ............................................. ... .... ... .......................................................... .............57
2.2 Packet Flow ........... .......................................................... .... ... ... ... ... .................................... 58
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 59
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................ ... 59
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 59
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 59
2.3 Applications ..................... ... ... .... ... ... ... ... .... .......................................................... ... .............60
2.3.1 VPN Connectivity ......................... .... ... ... ... .... ... ... ... .................................................... 60
2.3.2 SSL VPN Network Access ........................ .... ... ... ... .... ... ............................................. 60
2.3.3 User-Aware Access Control ....................................................................................... 61
2.3.4 Multiple WAN Interfaces ................... ... ... ... .... ... ... ....................................................... 62
ZyWALL USG 300 User’s Guide
11
Table of Contents
2.3.5 Device HA .................................... ........................................................... ... ... ... ... ....... 62
Chapter 3
Web Configurator....................................................................................................................65
3.1 Web Configurator Requirements ......................................................................................... 65
3.2 Web Configurator Access ....................................................................................................65
3.3 Web Configurator Main Screen ........................................................................................... 67
3.3.1 Title Bar ............................................ ... ... ... .... ... ... ... .................................................... 67
3.3.2 Navigation Panel ....................... ... .... ..........................................................................68
3.3.3 Main Window .......................... ... .......................................................... .... ... ... ... ... .......71
3.3.4 Message Bar ................ .... ... .......................................................... ... ... .... ... ................72
Chapter 4
Wizard Setup...........................................................................................................................75
4.1 Wizard Setup Overview ....................................................................................................... 75
4.2 Installation Setup, One ISP .................................................................................................76
4.3 Step 1 Internet Access ........................................... ... .......................................................... 77
4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 78
4.3.2 Ethernet: Static IP Address Assignment .................................... ... ... ... .... ... ... ... ... .... ... 78
4.3.3 Step 2 Internet Access Ethernet ................................................... ... ... .... ... ... ... ..........80
4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 81
4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 82
4.3.6 Step 2 Internet Access PPPoE ..................................................................................84
4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 85
4.3.8 PPTP: Static IP Address Assignment ......................................................................... 88
4.3.9 Step 2 Internet Access PPTP ................... .... ... ... ... .... ... ... ... ... .................................... 89
4.3.10 Step 4 Internet Access - Finish ...............................................................................91
4.4 Device Registration ..........................................................................................................91
4.5 Installation Setup, Two Internet Service Providers .............................................................. 93
4.5.1 Internet Access Wizard Setup Complete ................................................................... 95
4.6 VPN Setup ....................................... ... ... .... ... .......................................................... .............95
4.7 VPN Wizards ...................................................................................................................... 96
4.7.1 VPN Express Wizard .................................................................................................. 97
4.8 VPN Express Wizard - Remote Gateway ........................................................................... 97
4.8.1 VPN Express Wizard - Policy Setting ........................................................................ 99
4.8.2 VPN Express Wizard - Summary .......................................... .... ... ... ... .... ... ... ...........100
4.8.3 VPN Express Wizard - Finish ..................................................................................101
4.8.4 VPN Advanced Wizard ........................ ... ... .......................................................... .... . 101
4.8.5 VPN Advanced Wizard - Remote Gateway ........... ............. ............. ............. .......... . 103
4.8.6 VPN Advanced Wizard - Phase 1 ........................................................................... 105
4.8.7 VPN Advanced Wizard - Phase 2 ........................................................................... 107
4.8.8 VPN Advanced Wizard - Summary .........................................................................108
4.8.9 VPN Advanced Wizard - Finish ............................................................................... 109
12
ZyWALL USG 300 User’s Guide
Table of Contents
Chapter 5
Configuration Basics...........................................................................................................111
5.1 Granular Configuration .......................... .... ... ... ... .... ... ... ... ...................................................111
5.2 Terminology in the ZyWALL ....................................... ... ... .... ...............................................112
5.3 Physical Ports, Interfaces, and Zones ................................................................................112
5.3.1 Network Topology Example . ... ... ... .... ... ......................................................................113
5.4 Feature Configuration Overview ........................................................................................114
5.4.1 Feature ................................................... ... .... ... ... ... ...................................................114
5.4.2 Interface .................................... .......................................................... .... ... ... ... .........115
5.4.3 Trunks .............................. ... .......................................................... ... .........................115
5.4.4 IPSec VPN ................................ ... .... ... ... ... .... .......................................................... ..116
5.4.5 SSL VPN ................... ... .......................................................... .... ... ............................116
5.4.6 L2TP VPN ................................. ... .... ... ... ... .... .......................................................... ..116
5.4.7 Zones ............................... ... ... ... ... .... .......................................................... ... ... .........116
5.4.8 Device HA .................................... ........................................................... ... ... ... .........117
5.4.9 DDNS .............. .... ... ... ... .... ... ... .......................................................... ... ......................117
5.4.10 Policy Routes ..........................................................................................................117
5.4.11 Static Routes ...........................................................................................................118
5.4.12 Firewall ....................................................................................................................118
5.4.13 Application Patrol ....................................................................................................119
5.4.14 Anti-Virus ................................................................................................................ 120
5.4.15 IDP ......................................................................................................................... 120
5.4.16 ADP ........................................................................................................................120
5.4.17 Content Filter ..........................................................................................................120
5.4.18 Virtual Server (Port Forwarding) .................................................... ... .... ... ... ... ... .... . 121
5.4.19 HTTP Redirect .......................................................................................................121
5.4.20 ALG ........................................................................................................................ 122
5.5 Objects ............................................ ... ... .... .......................................................... ..............122
5.5.1 User/Group ....................... ... ... .......................................................... ... .... ... ... ...........122
5.6 System Management and Maintenance ............................................................................ 123
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM .................. 123
5.6.2 File Manager ....................................... ... ... .... .......................................................... . 124
5.6.3 Licensing Registration ......................................... ... .... ... ... ... ... .................................. 124
5.6.4 Licensing Update ... .......................................................... ... ... .... ... ... ... .... ... ... ...........124
5.6.5 Logs and Reports .....................................................................................................124
5.6.6 Diagnostics ................ ... .... ... ... ... ... ........................................................... ... ... ...........124
Chapter 6
Tutorials.................................................................................................................................125
6.1 Interfaces and Zones .......................................... .... ... ... ... .... ... ... ........................................ 125
6.1.1 Set up Port Grouping ... .......................................................... .... ... ... ... .....................125
6.1.2 Set up Ethernet Interfaces .. ... .......................................................... ... .... ... ... ... ... .... . 127
6.1.3 WAN Trunk ................... .... ... ... ... ... ........................................................... ... ..............129
ZyWALL USG 300 User’s Guide
13
Table of Contents
6.1.4 Zones ............................... ... ... ... ... .... .......................................................... ... ... ........130
6.2 IPSec VPN ............. ... .... ... .......................................................... ... ... .... ... ...........................132
6.2.1 Set up the Ethernet Interfaces and Zones ............................................................... 132
6.2.2 Set up the VPN Gateway ......................................................................................... 132
6.2.3 Set up the VPN Connection .....................................................................................133
6.2.4 Set up the Policy Route for the VPN Tunnel ............................................................ 134
6.2.5 Set up the Zone for the VPN Tunnel ........................................................................135
6.3 Device HA ................. .... .......................................................... ... ... ... .... .............................. 136
6.3.1 Set up DNS for the Virtual Router ............................................................................ 136
6.3.2 Set up the VRRP Groups on the Master .................................................................. 136
6.3.3 Set up the Password for Synchronization ................................................................ 138
6.3.4 Finish Configuring the Master ..................................................................................139
6.3.5 Set up the Ethernet Interfaces on the Backup ......................................................... 139
6.3.6 Set up the VRRP Groups on the Backup ................................................................. 139
6.3.7 Synchronize the Backup .......................................................................................... 140
6.4 User-Aware Access Control ...............................................................................................140
6.4.1 Set up User Accounts .............................................................................................. 141
6.4.2 Set up User Groups ............................................... .... ... ........................................... 1 41
6.4.3 Set up User Authentication Using the RADIUS Server ............................................142
6.4.4 Set up Web Surfing Policies With Bandwidth Restrictions ............................... ... .... . 143
6.4.5 Set up MSN Policies . ... .... ... ... ... ... ........................................................... ... ... ... ... .....144
6.4.6 Set up LAN-to-DMZ Policies .................. ... .... ... ... ... .................................................. 145
6.5 Trunks .......... .... ... ... .......................................................... .... .............................................. 146
6.5.1 Set up Available Bandwidth on Ethernet Interfaces ................................................. 146
6.5.2 Change WAN Trunk Algorithm ................................................................................. 147
6.6 NAT 1:1 Example ...... .... ... ... ... .... ... .......................................................... ... ... .... ... ... ... ... ..... 147
6.6.1 NAT 1:1 Address Objects ....... ... ... .... ... ... ... .......................................................... .... . 148
6.6.2 NAT 1:1 Virtual Server ................................... ... ... ... .... ... ........................................... 1 49
6.6.3 NAT 1:1 Policy Route ............................................. .................................................. 149
6.6.4 NAT 1:1 Firewall Rule ...................... ... ... ... .......................................................... .... . 150
6.7 NAT Loopback .... ... ... .... ... ... ... .... ... .......................................................... ... ... .... ... ... ... ........ 151
6.7.1 NAT Loopback Virtual Server ..................................... ... ... ... ... .................................. 152
6.7.2 NAT Loopback Policy Route ......................... ... ... ..................................................... 153
6.8 Service Control and the Firewall ......... ... .... ... ... ... .............................................................. . 155
6.8.1 Allowing HTTPS Administrator Access Only From the LAN ....................................155
Chapter 7
Status....................................................................................................................................157
7.1 Status Screen ..... ... ... .... ... ... ... .... ... .......................................................... ... ... .... ... ..............157
7.2 VPN Status .. .... ... ... ... .... ... ... .......................................................... ... .................................. 160
7.3 DHCP Table .............. .... ... ... ... .... ... ... .......................................................... ... .... ... ... ... ........ 161
7.4 Port Statistics ........ ... .... ... ... .......................................................... ... .................................. 162
7.5 Current Users ..................... ... .... ... ... ... .......................................................... .... ... ... ... ........ 163
14
ZyWALL USG 300 User’s Guide
Table of Contents
Chapter 8
Registration...........................................................................................................................165
8.1 myZyXEL.com Overview ................. ... ... .... ... ... ... .... ... ... ... .................................................. 165
8.1.1 Subscription Services Available on the ZyWALL ..................................................... 165
8.2 Registration ........................................ ... .... ... .......................................................... ...........166
8.3 Service .................. ... ........................................................... ... ... ... ... .................................. 168
Chapter 9
Update ....................................................................................................................................171
9.1 Updating Anti-virus Signatures ........ ... ... .... ... ... ... .... ........................................................... 171
9.2 Updating IDP and Application Patrol Signatures ..............................................................173
9.3 Updating System Protect Signatures ................................................................................ 175
Part II: Network..................................................................................... 177
Chapter 10
Interface.................................................................................................................................179
10.1 Interface Overview ........................................................................................................... 179
10.1.1 Types of Interfaces ................................................................................................. 179
10.1.2 IP Address Assignment .......................................................................................... 180
10.1.3 Interface Parameters ......................... .......... ...... .......... ......... .......... .......... ......... ..... 182
10.1.4 DHCP Settings ....................................................................................................... 182
10.1.5 Ping Check Settings ............................................................................................... 183
10.1.6 Relationships Between Interfaces .......................................................................... 184
10.2 Ethernet Interfaces .......................................................................................................... 184
10.2.1 Ethernet Interfaces Overview ................................................................................. 184
10.2.2 Interface Summary Screen ........ ....... .....................................................................185
10.2.3 Ethernet Summary Screen ............................. ....................................... ................. 188
10.2.4 Ethernet Edit ......................................................................................................... 189
10.3 Port Grouping ................................................................................................................. 194
10.3.1 Port Grouping Overview .................... .......................................... ........................... 194
10.3.2 Port Grouping Screen ............................................................................................ 195
10.4 VLAN Interfaces .............................................................................................................196
10.4.1 VLAN Overview ......................................................................................................196
10.4.2 VLAN Interfaces Overview .......................... ........................................................... 198
10.4.3 VLAN Summary Screen ....................... ..................................................................198
10.4.4 VLAN Add/Edit ......................................................................................................199
10.5 Bridge Interfaces ............................................................................................................203
10.5.1 Bridge Overview ..................................................................................................... 204
10.5.2 Bridge Interface Overview .............. ...................................... .................................. 205
10.5.3 Bridge Summary .................................................................................................... 205
ZyWALL USG 300 User’s Guide
15
Table of Contents
10.5.4 Bridge Add/Edit .....................................................................................................206
10.6 PPPoE/PPTP Interfaces .................................................................................................210
10.6.1 PPPoE/PPTP Overview .........................................................................................210
10.6.2 PPPoE/PPTP Interfaces Overview .........................................................................211
10.6.3 PPPoE/PPTP Interface Summary .......................................................................... 212
10.6.4 PPPoE/PPTP Interface Add/Edit ............ .... .......................................................... . 213
10.7 Auxiliary Interface ...........................................................................................................215
10.7.1 Auxiliary Interface Overview ................................................................................... 215
10.7.2 Auxiliary .................................................................................................................. 215
10.8 Virtual Interfaces ............................................................................................................. 217
10.8.1 Virtual Interfaces Add/Edit ........................................... ................... ................... ..... 217
Chapter 11
Trunks....................................................................................................................................219
11.1 Trunks Overview .............................................................................................................. 219
11.2 Trunk Scenario Examples ................................................................................................ 219
11.3 Load Balancing Introduction ................ .... ... ... ... .... ... ........................................................ 219
11.4 Load Balancing Algorithms ................................................................ ... ... ... .... ... ... ... ... .....220
11.4.1 Least Load First ...................................................................................................... 220
11.4.2 Weighted Round Robin ..........................................................................................221
11.4.3 Spillover .................................................................................................................. 221
11.5 Trunk Summary ............................................................................................................... 222
11.6 Configuring a Trunk ........................................................................................................ 222
Chapter 12
Policy and Static Routes......................................................................................................225
12.1 Policy Route ....................................................................................................................225
12.1.1 Benefits ..................................................................................................................225
12.2 Routing Policy .................................................................................................................. 225
12.2.1 NAT and SNAT ....................................................................................................... 226
12.2.2 Port Triggering ....................................................................................................... 226
12.2.3 Maximize Bandwidth Usage ..................................... .............................................. 227
12.2.4 Reserving Bandwidth for Non-Bandwidth Class Traffic ........ .... ... ... ... .... ... ... ... ... .... . 227
12.3 IP Routing Policy Setup ...................................................................................................227
12.4 Policy Route Edit ............................................................................................................ 229
12.5 IP Static Routes ..............................................................................................................232
12.6 Static Route Summary ..................................................................................................... 233
12.7 Edit a Static Route ..........................................................................................................233
Chapter 13
Routing Protocols .................................................................................................................235
13.1 Routing Protocols Overview ............................................................................................ 235
13.1.1 RIP Overview .........................................................................................................235
16
ZyWALL USG 300 User’s Guide
Table of Contents
13.1.2 Authentication Types .............................................................................................. 236
13.2 RIP Screen ...................................................................................................................... 236
13.3 OSPF Overview ..............................................................................................................237
13.3.1 OSPF Areas ........................................................................................................... 238
13.3.2 OSPF Routers ........................................................................................................ 239
13.3.3 Virtual Links ............................................................................................................240
13.3.4 OSPF Configuration ............................................................................................... 240
13.4 OSPF Screens ................................................................................................................. 241
13.4.1 OSPF Summary ..................................................................................................... 241
13.4.2 OSPF Area Add/Edit .............................................................................................242
Chapter 14
Zones ....................................................................................................................................245
14.1 Zones Overview ............................................................................................................... 245
14.1.1 Effect of Zones on Different Types of Traffic .......................................................... 245
14.2 Zone Summary ................................................................................................................ 246
14.3 Zone Add/Edit .................................................................................................................247
Chapter 15
DDNS......................................................................................................................................249
15.1 DDNS Overview ..............................................................................................................249
15.1.1 DYNDNS Wildcard ......................... ....................................................................... . 249
15.1.2 High Availability (HA) ............................................................................................. 250
15.1.3 Mail Exchanger ...................................................................................................... 250
15.2 DDNS Screens ................................................................................................................ 250
15.3 DDNS Summary ..............................................................................................................251
15.4 Dynamic DNS Add/Edit ..................................................................................................252
Chapter 16
Virtual Servers.......................................................................................................................255
16.1 Virtual Server Overview ........................................... ... ... .... ..............................................255
16.2 Virtual Server Example ............................................... ... .... ... ... ... ... .... ... ... ... .... ... ... ... ... .....256
16.3 Virtual Server Screens ................ ... ... ... .... ... ... ... .... ... ... ..................................................... 256
16.4 Virtual Server Summary Screen .............. ... ... ... .... ........................................................... 256
16.4.1 Virtual Server Add/Edit .. ... ... ... ... .... ... ... ... .............................................................. . 258
Chapter 17
HTTP Redirect......................................................................................................................261
17.1 HTTP Redirect Overview .................................................................................................261
17.1.1 Web Proxy Server .................................................................................................. 261
17.2 HTTP Redirect, Firewall and Policy Route ...................................................................... 261
17.3 Configuring HTTP Redirect .............................................................................................262
17.4 HTTP Redirect Edit ......................................................................................................... 263
ZyWALL USG 300 User’s Guide
17
Table of Contents
Chapter 18
ALG ........................................................................................................................................265
18.1 ALG Introduction .............................................................................................................. 265
18.1.1 Application Layer Gateway (ALG) and NAT ........................................................... 265
18.1.2 ALG and Trunks ..................................................................................................... 265
18.1.3 FTP ........................................................................................................................ 266
18.1.4 H.323 ...................................................................................................................... 266
18.1.5 RTP ........................................................................................................................ 266
18.1.6 SIP ......................................................................................................................... 267
18.2 Peer-to-Peer Calls and the ZyWALL ... .... ... ... ... ...............................................................268
18.2.1 VoIP Calls from the WAN with Multiple Outgoing Calls .......................................... 268
18.2.2 VoIP with Multiple WAN IP Addresses ................................................................... 268
18.3 ALG Screen ..................................................................................................................... 269
18.4 WAN to LAN SIP Peer-to-peer Calls Example ................................................................ 271
Part III: Firewall and VPN..................................................................... 275
Chapter 19
Firewall.................................................................................................................................277
19.1 Firewall Overview ............................................................................................................ 277
19.2 Firewall Rules .................................................................................................................. 278
19.2.1 Rule Directions .......................................................................................................278
19.2.2 Firewall and VPN Traffic ......................................................................................... 280
19.3 Firewall Rule Example Applications ................................................................................ 280
19.4 Alerts ............................................................................................................................... 283
19.5 Asymmetrical Routes .......................................................................................................283
19.5.1 Virtual Interfaces and Asymmetrical Routes .......................................................... 283
19.6 Configuring the Firewall ...................................................................................................284
19.6.1 Edit a Firewall Rule ................................................................................................286
19.7 Firewall Rule Configuration Example .............................................................................. 287
Chapter 20
IPSec VPN..............................................................................................................................291
20.1 IPSec VPN Overview ....................................................................................................... 291
20.1.1 IPSec SA Overview ................................................................................................ 292
20.1.2 Additional Topics for IPSec SA ............................................................................... 294
20.2 VPN Related Configuration .............................................................................................296
20.3 VPN Connection Screens ................................................................................................ 297
20.3.1 VPN Connection Summary .................................................................................... 297
20.3.2 VPN Connection Add/Edit IKE .............................................................................. 298
20.3.3 VPN Connection Add/Edit Manual Key .................................................................. 302
18
ZyWALL USG 300 User’s Guide
Table of Contents
20.4 VPN Gateway Screens ...................................................................................................306
20.4.1 IKE SA Overview .................................................................................................... 306
20.4.2 Additional Topics for IKE SA .................................................................................. 310
20.4.3 VPN Gateway Summary ........................................................................................312
20.4.4 VPN Gateway Add/Edit ......................................................................................... 313
20.5 VPN Concentrator ...........................................................................................................318
20.5.1 VPN Concentrator Summary ................................ ............. .......... ............. ............. . 319
20.5.2 VPN Concentrator Add/Edit .................................................................................. 319
20.6 SA Monitor Screen .........................................................................................................320
20.6.1 Regular Expressions in Searching IPSec SAs by Name or Policy ......................... 322
Chapter 21
SSL VPN.................................................................................................................................323
21.1 SSL Access Policy ........................................................................................................... 323
21.1.1 SSL Access Policy Objects .................................................................................... 323
21.1.2 SSL Access Policy Limitations ...............................................................................324
21.2 SSL Access Privilege List ................................................................................................324
21.3 Creating/Editing an SSL Access Policy ............................................ .............................. 325
21.4 SSL Connection Monitor .................................................................................................. 326
21.5 Configuring SSL Global Setting .......................................................................................327
21.5.1 Uploading a Custom Logo .................... ... .... ... ........................................................ 329
21.6 Establishing an SSL VPN Connection ............................................................................. 329
Chapter 22
SSL User Screens.................................................................................................................331
22.1 Overview .......................................................................................................................... 331
22.1.1 Network Resource Access Methods ................. ... .... ... ... ... ..................................... 331
22.1.2 System Requirements ....................................... .................................................... .331
22.1.3 Information You Need ............................................................................................ 332
22.1.4 Certificates .............................................................................................................332
22.2 Remote User Login .......................................................................................................... 332
22.3 SSL VPN User Screens ................................................................................................... 334
22.4 Bookmark ........................................................................................................................335
22.5 Logout .............................................................................................................................. 335
Chapter 23
SSL User Application Screens ............................................................................................337
23.1 Overview .......................................................................................................................... 337
23.1.1 The Application Screen ..........................................................................................337
Chapter 24
SSL User File Sharing Screens ...........................................................................................339
24.1 Overview .......................................................................................................................... 339
ZyWALL USG 300 User’s Guide
19
Table of Contents
24.2 Main File Sharing Screen ................................................................................................ 339
24.3 Opening a File or Folder ................................... ....................................................... ........340
24.3.1 Downloading a File ...................................... ......... ....... ......... .......... .......... ......... ..... 341
24.3.2 Saving a File ........... ............................................................................................... 341
24.4 Creating a New Folder ......................... ....................... ....................... ...................... ........342
24.5 Renaming a File or Folder ............................................................................................... 342
24.6 Deleting a File or Folder ..................................................................................................343
24.7 Uploading a File ............................. ....................... ...................... ....................... .............. 344
Chapter 25
L2TP VPN...............................................................................................................................345
25.1 L2TP VPN Overview ................... ... ... .............................................................. ... ..............345
25.2 IPSec Configuration ......................................................................................................... 345
25.2.1 Using the Default L2TP VPN Connection ..............................................................346
25.3 Policy Route ....................................................................................................................346
25.4 L2TP VPN Configuration ............................... ... .... ... ... ... .... ... ... ........................................ 347
25.5 L2TP VPN Session Monitor ............................................... ... ... ... ... .... ... ... ... .... ... ... ... ... .... . 348
Chapter 26
L2TP VPN Example...............................................................................................................351
26.1 L2TP VPN Example ....................... ... ... .... ... ... ... .... ... ... ..................................................... 351
26.2 Configuring the Default L2TP VPN Gateway Example .................................................... 351
26.3 Configuring the Default L2TP VPN Connection Example ................................................ 353
26.4 Configuring the L2TP VPN Settings Example ................................................................. 354
26.5 Configuring the Policy Route for L2TP Example ............................................................. 354
26.6 Configuring L2TP VPN in Windows XP and 2000 ...........................................................355
26.6.1 Configuring L2TP in Windows XP .......................................................................... 356
26.6.2 Configuring L2TP in Windows 2000 ............................................... ... .... ... ... ... ... .... . 361
Part IV: Application Patrol & Anti-X.................................................... 377
Chapter 27
Application Patrol.................................................................................................................379
27.1 Application Patrol Overview ........................... ....................... ...................... ..................... 379
27.2 Classification of Applications ...........................................................................................379
27.3 Configurable Application Policies .................................................................................... 380
27.4 Bandwidth Management ..................................................................................................380
27.4.1 Connection and Packet Directions .................... ..................................................... 381
27.4.2 Outbound and Inbound Bandwidth Limits .............................................................. 381
27.4.3 Bandwidth Management Priority ............................................................................ 382
27.4.4 Maximize Bandwidth Usage ..................................... .............................................. 382
20
ZyWALL USG 300 User’s Guide
Table of Contents
27.4.5 Bandwidth Management Behavior ......................................................................... 382
27.5 Application Patrol Bandwidth Management Examples ...... .............................................. 3 84
27.5.1 Setting the Interface’s Bandwidth ...................................... ................................ ..... 385
27.5.2 SIP Any to WAN Bandwidth Management Example ................... ... ... .... ... ..............385
27.5.3 SIP WAN to Any Bandwidth Management Example ................... ... ... .... ... ..............386
27.5.4 HTTP Any to WAN Bandwidth Management Example ...........................................386
27.5.5 FTP WAN to DMZ Bandwidth Management Example ............................................ 386
27.5.6 FTP LAN to DMZ Bandwidth Management Example .............................................387
27.6 Other Applications ........................................................................................................... 388
27.7 Application Patrol Screens .............................................................................................. 388
27.8 Application Patrol General ...............................................................................................388
27.9 Application Patrol Applications ........................................................................................ 390
27.9.1 Application Patrol Edit ............................. ............................................................... 391
27.9.2 Application Patrol Policy Edit ................................................................................ 393
27.10 Other Protocol Screen .................................................................................................. 395
27.10.1 Other Configuration Add/Edit ................................... ... ... ... .... ... ... ... .... ... ... ... ........397
27.11 Application Patrol Statistics ................................. ... ... ... .... ... ... ... ... ..................................399
27.11.1 Application Patrol Statistics: General Setup ........................................ ... ... ... ... .... . 399
27.11.2 Application Patrol Statistics: Bandwidth Statistics ............................... ... ..............400
27.11.3 Application Patrol Statistics: Protocol Statistics ................................................... 400
Chapter 28
Anti-Virus...............................................................................................................................403
28.1 Anti-Virus Overview ......................................................................................................... 403
28.1.1 Types of Computer Viruses ................. ... .... ... ... ... .... .............................................. 403
28.1.2 Computer Virus Infection and Prevention ................................................ ... ... ... .... . 403
28.1.3 Types of Anti-Virus Scanner .................................................................................. 404
28.2 Introduction to the ZyWALL Anti-Virus Scanner .............................................................. 404
28.2.1 How the ZyWALL Anti-Virus Scanner Works ........................................................404
28.2.2 Notes About the ZyWALL Anti-Virus ......................................................................405
28.3 Anti-Virus Summary ......................................................................................................... 406
28.3.1 Anti-Virus Policy Edit .............................................................................................. 408
28.4 Anti-Virus Setting .............................................................................................................410
28.5 Anti-Virus White List Add/Edit ..........................................................................................412
28.6 Anti-Virus Black List Add/Edit .......................................................................................... 413
28.7 Signature Searching ........................................................................................................ 413
Chapter 29
IDP.........................................................................................................................................417
29.1 Introduction to IDP ...........................................................................................................417
29.1.1 Host Intrusions ....................................................................................................... 417
29.1.2 Network Intrusions ................................................................................................. 417
29.1.3 IDP on the ZyWALL ............................................................................................... 417
ZyWALL USG 300 User’s Guide
21
Table of Contents
29.1.4 Signatures ..............................................................................................................418
29.2 Traffic Directions and Profiles .......................................................................................... 418
29.3 Configuring IDP General .................................................................................................418
29.4 Configuring IDP Bindings ................................................................................................ 420
29.5 Introducing IDP Profiles .................................................................................................421
29.5.1 Base Profiles .......................................................................................................... 421
29.6 Profile Summary Screen ................... ... .... ... ... ... .... ... ... ..................................................... 422
29.7 Creating New Profiles ......................................................................................................423
29.7.1 Procedure To Create a New Profile ........................................................................ 423
29.8 Profiles: Packet Inspection .............................................................................................424
29.8.1 Profile > Group View Screen .................................................................................. 424
29.8.2 Policy Types ...........................................................................................................427
29.8.3 IDP Service Groups ............................................................................................... 428
29.8.4 Profile > Query View Screen ..................................................................................429
29.8.5 Query Example ...................................................................................................... 431
29.9 Introducing IDP Custom Signatures ...............................................................................432
29.9.1 IP Packet Header ................................................................................................... 432
29.10 Configuring Custom Signatures .....................................................................................434
29.10.1 Creating or Editing a Custom Signature ................ ... ... ... ... .... ... ... ... .... ... ..............435
29.10.2 Custom Signature Example ................................................................................. 439
29.10.3 Applying Custom Signatures ................................................................................ 442
29.10.4 Verifying Custom Signatures ................................................................................ 442
29.10.5 Snort Signatures .................................................................................................. 443
Chapter 30
ADP .......................................................................................................................................445
30.1 Introduction to ADP .........................................................................................................445
30.1.1 Host Intrusions ....................................................................................................... 445
30.1.2 Network Intrusions ................................................................................................. 445
30.1.3 ADP on the ZyWALL .............................................................................................. 446
30.2 Traffic Directions and Profiles .......................................................................................... 446
30.3 Configuring ADP General ................................................................................................ 446
30.4 Configuring Anomaly Profile Bindings .............................................................................447
30.5 Introducing ADP Profiles ............................................................................................... 448
30.5.1 Base Profiles .......................................................................................................... 448
30.6 Profile Summary Screen ................... ... .... ... ... ... .... ... ... ..................................................... 449
30.7 Creating New Profiles ......................................................................................................450
30.7.1 Procedure To Create a New Profile ........................................................................ 450
30.8 Profiles: Traffic Anomaly ................................................................................................. 450
30.8.1 Port Scanning .........................................................................................................451
30.8.2 Flood Detection ......................................................................................................452
30.8.3 Profile > Traffic Anomaly Screen ............................................................................ 455
30.9 Profiles: Protocol Anomaly .............................................................................................456
22
ZyWALL USG 300 User’s Guide
Table of Contents
30.9.1 HTTP Inspection and TCP/UDP/ICMP Decoders .................................................. 457
30.9.2 Protocol Anomaly Configuration .............................................................................459
Chapter 31
Content Filter Screens..........................................................................................................463
31.1 Content Filter Overview ...................................................................................................463
31.1.1 Content Filter Policies ............................................................................................463
31.1.2 Content Filter Profiles .............................................................................................463
31.1.3 Content Filter Configuration Guidelines ................................................................. 464
31.2 Content Filter General Screen .................... ....................................................... ..............464
31.3 Content Filter Policy Screen ........................................................................................... 466
31.4 Content Filter Profile Screen .......................................................................................... 467
31.5 External Web Filtering Service ........................................................................................ 468
31.6 Content Filter Categories Screen ...................................................................................469
31.7 Content Filter Customization Screen ..............................................................................477
31.8 Keyword Blocking URL Checking ............... ....................................................... ..............479
31.9 Content Filter Cache Screen .......................................................................................... 480
Chapter 32
Content Filter Reports..........................................................................................................483
32.1 Viewing Content Filter Reports ............................................. ........................................... 483
32.2 Web Site Submission .......................................................................................................488
Part V: Device HA & Objects............................................................... 491
Chapter 33
Device HA.............................................................................................................................493
33.1 Virtual Router Redundancy Protocol (VRRP) Overview .................... ... ........................... 493
33.1.1 Additional VRRP Notes .......................................................................................... 495
33.2 VRRP Group Overview .................................................................................................... 495
33.2.1 Link Monitoring and Service Control ...................................................................... 496
33.3 Device HA Screens .........................................................................................................496
33.4 VRRP Group Summary ................................................................................................... 496
33.5 VRRP Group Add/Edit .................................................................................................... 498
33.6 Synchronization Overview ..............................................................................................500
33.6.1 Synchronization and Subscription Services ........ .... ... ... ... ... .... ... ... ... .... ... ... ... ... .... . 500
33.6.2 Synchronize Screen ................................ ............................................................... 501
Chapter 34
User/Group...........................................................................................................................503
34.1 User Account Overview ...................................................................................................503
ZyWALL USG 300 User’s Guide
23
Table of Contents
34.1.1 User Types .............................................................................................................503
34.1.2 Ext-User Accounts ................................................................................................. 504
34.1.3 User Groups ...........................................................................................................505
34.1.4 Access Users and the ZyWALL .............................................................................. 505
34.1.5 Force User Authentication Policy ...........................................................................505
34.2 User Summary ................................................................................................................. 506
34.2.1 User Add/Edit ........................................................................................................ 506
34.3 Group Summary .............................. ... .... ... ... ... .... ... ... ..................................................... 508
34.3.1 Group Add/Edit ...................................................................................................... 509
34.4 Setting Screen ................................................................................................................ 510
34.4.1 Force User Authentication Policy Add/Edit ...........................................................512
34.5 Web Configurator for Non-Admin Users .................................. ... ... .... ... ... ... .... ... ... ... ... .... . 513
Chapter 35
Addresses.............................................................................................................................515
35.1 Addresses Overview ........................................................................................................515
35.2 Address Screens ............................................................................................................. 515
35.2.1 Address Summary ..................................................................................................515
35.2.2 Address Add/Edit .................................................................................................. 516
35.3 Address Group Screens .................................................................................................517
35.3.1 Address Group Summary .......................................................................................517
35.3.2 Address Group Add/Edit ....................................................................................... 518
Chapter 36
Services.................................................................................................................................521
36.1 Services Overview ...........................................................................................................521
36.1.1 IP Protocols ............................................................................................................521
36.1.2 Service Objects and Service Groups .....................................................................521
36.2 Service Summary Screen ................................................................................................ 522
36.2.1 Service Add/Edit .................................................................................................... 523
36.3 Service Group Summary Screen .................................................................................... 524
36.3.1 Service Group Add/Edit .........................................................................................524
Chapter 37
Schedules..............................................................................................................................527
37.1 Schedule Overview .......................................................................................................... 527
37.2 Schedule Screens ...........................................................................................................527
37.2.1 Schedule Summary ................................................................................................ 527
37.2.2 One-Time Schedule Add/Edit ................................................................................528
37.2.3 Recurring Schedule Add/Edit ................................................................................529
Chapter 38
AAA Server...........................................................................................................................531
24
ZyWALL USG 300 User’s Guide
Table of Contents
38.1 AAA Server Overview ......................................................................................................531
38.1.1 ASAS ...................................................................................................................... 531
38.1.2 User Authentication Method ................................................................................... 532
38.2 Directory Service (AD/LDAP) Overview .................. ... ... .... ... ... ... ... .... .............................. 532
38.2.1 Directory Structure .................................................................................................532
38.2.2 Distinguished Name (DN) ...................................................................................... 533
38.2.3 Configuring Active Directory or LDAP Default Server Settings ................... ... ... .... . 533
38.3 Active Directory or LDAP Group Summary .................................................................... 534
38.3.1 Creating an Active Directory or LDAP Group ......................................................... 535
38.4 RADIUS Server ..............................................................................................................536
38.5 Configuring a Default RADIUS Server .............................................................................537
38.6 Configuring a Group of RADIUS Servers .......................................................................538
38.6.1 Adding a RADIUS Server Member .........................................................................538
Chapter 39
Authentication Objects........................................................................................................541
39.1 Authentication Objects Overview ....................................... ................................ .............. 541
39.2 Viewing Authentication Objects ....................................................................................... 541
39.3 Creating an Authentication Object ..................................................................................542
39.3.1 Example: Selecting a VPN Authentication Method ............................................... 543
Chapter 40
Certificates ............................................................................................................................545
40.1 Certificates Overview ....................................................................................................... 545
40.1.1 Advantages of Certificates ..................................................................................... 546
40.2 Self-signed Certificates .................................................................................................... 546
40.3 Factory Default Certificate ...............................................................................................546
40.3.1 Certificate File Formats ..........................................................................................546
40.4 Certificate Configuration Screens Summary ................................................................... 547
40.5 Verifying a Certificate .......................................................................................................547
40.5.1 Checking the Fingerprint of a Certificate on Yo ur Computer .................................. 547
40.6 My Certificates Screen ....................................................................................................548
40.6.1 My Certificates Add Screen ............................. ... .... ... ... ... ... .... .............................. 549
40.6.2 My Certificate Edit Screen ..................................................................................... 552
40.6.3 My Certificate Import Screen .................................................................................555
40.7 Trusted Certificates Screen ............................................................................................ 556
40.7.1 OCSP ..................................................................................................................... 556
40.8 Trusted Certificates Edit Screen ..................................................................................... 557
40.9 Trusted Certificates Import Screen ................................................................................. 560
Chapter 41
ISP Accounts.........................................................................................................................563
41.1 ISP Accounts Overview ...................................................................................................563
ZyWALL USG 300 User’s Guide
25
Table of Contents
41.2 ISP Account Summary ....................................................................................................563
41.3 ISP Account Edit ............................................................................................................. 564
Chapter 42
SSL Application ....................................................................................................................567
42.1 SSL Application Overview ............................................................................................... 567
42.1.1 Application Types ................................................................................................... 567
42.1.2 Remote User Screen Links ...................................... ... ... ... ... .... ... ... ... .... ... ... ... ........567
42.2 SSL Application Configuration .........................................................................................567
42.3 Creating/Editing an SSL Application ........................... ....................... ...................... ........ 5 68
42.3.1 Web-based Application .......................................................................................... 568
42.3.2 Example: Specifying a Web Site for Access ..........................................................569
42.3.3 Configuring File Sharing .........................................................................................570
Part VI: System..................................................................................... 573
Chapter 43
System..................................................................................................................................575
43.1 System Overview ............................................................................................................. 575
43.2 Host Name ....................................................................................................................... 575
43.3 Time and Date ................................................................................................................ 576
43.3.1 Pre-defined NTP Time Servers List ............................................. ... ... .... ... ... ... ... .... . 578
43.3.2 Time Server Synchronization ................................................................................. 578
43.4 Console Port Speed ........................................................................................................579
43.5 DNS Overview ................................................................................................................580
43.5.1 DNS Server Address Assignment ..........................................................................580
43.5.2 DNS Servers .......................................................................................................... 580
43.5.3 Configuring DNS ....................................................................................................580
43.5.4 Address Record ............ ... ... ... ... .... ... .....................................................................583
43.5.5 PTR Record ........................................................................................................... 583
43.5.6 Adding an Address/PTR Record ............................................................................583
43.5.7 Domain Zone Forwarder ............................ ... ... ... .... ... ... ........................................ 584
43.5.8 Adding a Domain Zone Forwarder ................................. ........................................ 584
43.5.9 MX Record ............................................................................................................ 585
43.5.10 Adding a MX Record ............................................................................................585
43.5.11 DNS Service Control ..........................................................................................585
43.6 Language Screen ................................... ... ... ... .... ... ... ..................................................... 586
Chapter 44
Service Control ....................................................................................................................587
44.1 Service Control Overview ................................................................................................ 587
26
ZyWALL USG 300 User’s Guide
Table of Contents
44.1.1 Service Access Limitations .................................................................................... 588
44.1.2 System Timeout .....................................................................................................588
44.2 HTTPS .............................................................................................................................588
44.3 Configuring WWW ...........................................................................................................589
44.4 Service Control Rules .....................................................................................................592
44.5 HTTPS Example ..............................................................................................................592
44.5.1 Internet Explorer Warning Messages ..................................................................... 593
44.5.2 Netscape Navigator Warning Messages ................................................................593
44.5.3 Avoiding Browser Warning Messages .................................................................... 594
44.5.4 Login Screen .......................................................................................................... 595
44.5.5 Enrolling and Importing SSL Client Certificates ..................................................... 595
44.5.6 Using a Certificate When Accessing the ZyWALL Example ..................................599
44.6 SSH .............................................................................................................................. 600
44.6.1 How SSH Works ..... ... .... ... ... ... ... .... ... .......................................................... ... ... .... . 600
44.6.2 SSH Implementation on the ZyWALL ..................................................................... 601
44.6.3 Requirements for Using SSH .................................................................................601
44.6.4 Configuring SSH .................................................................................................... 601
44.7 Secure Telnet Using SSH Examples ............................................................................... 603
44.7.1 Example 1: Microsoft Windows .............................................................................. 603
44.7.2 Example 2: Linux ....................................................................................................603
44.8 Telnet .............................................................................................................................. 604
44.8.1 Configuring Telnet .................................................................................................. 604
44.9 Configuring FTP .............................................................................................................605
44.10 SNMP ........................................................................................................................... 607
44.10.1 Supported MIBs ................................................................................................... 608
44.10.2 SNMP Traps ......................................................................................................... 608
44.10.3 Configuring SNMP ............................................................................................... 608
44.11 Dial-in Management ........... .... ... ... ............................................................. .... .................609
44.11.1 AT Command Strings ...........................................................................................610
44.11.2 DTR Signal ............... .... ... ... ... .......................................................... .... ... ... ... ... .... . 610
44.11.3 Response Strings ......... .......................................................... ... ... ... .... .................610
44.12 Dial-in Mgmt Configuration ............................................................................................ 610
44.13 Vantage CNM ................................................................................................................611
44.14 Configuring Vantage CNM ..............................................................................................611
Part VII: Maintenance & Troubleshooting.......................................... 613
Chapter 45
File Manager..........................................................................................................................615
45.1 Configuration Files and Shell Scripts Overview ......... ... .... ... ........................................... 6 15
45.1.1 Comments in Configuration Files or Shell Scripts ..................................................616
ZyWALL USG 300 User’s Guide
27
Table of Contents
45.1.2 Errors in Configuration Files or Shell Scripts .........................................................617
45.1.3 ZyWALL Configuration File Details ....................................................................... 617
45.1.4 Configuration File Flow at Restart .......................................................................... 617
45.2 Configuration File Screen ................................................................................................ 618
45.3 Firmware Package Screen .............................................................................................620
45.4 Shell Script Screen ......................................................................................................... 622
Chapter 46
Logs ......................................................................................................................................625
46.1 View Log Screen ................................................... ........................................................... 625
46.2 Log Settings Screens .....................................................................................................627
46.3 Log Settings Summary .................................................................................................... 628
46.3.1 Log Settings Edit E-mail ........................................................................................ 629
46.3.2 Log Settings Edit syslog ........................................................................................ 632
46.3.3 Active Log Summary .............................................................................................634
Chapter 47
Reports .................................................................................................................................637
47.1 Traffic Screen .................................................................................................................. 637
47.2 Session Screen ..............................................................................................................640
47.3 Anti-Virus Report Screen ................................................................................................. 642
47.4 IDP Report Screen ..........................................................................................................643
Chapter 48
Diagnostics...........................................................................................................................647
48.1 Diagnostics ......................................................................................................................647
Chapter 49
Reboot....................................................................................................................................649
Chapter 50
Troubleshooting....................................................................................................................651
50.1 Getting More Troubleshooting Help ................................................................................. 652
50.2 Resetting the ZyWALL ..................................................................................................... 652
Part VIII: Appendices and Index ......................................................... 653
Appendix A Product Specifications.......................................................................................655
Appendix B Log Descriptions ...............................................................................................661
Appendix C Common Services ............................................................................................701
Appendix D Displaying Anti-Virus Alert Messages in Windows............................................705
28
ZyWALL USG 300 User’s Guide
Table of Contents
Appendix E Importing Certificates........................................................................................711
Appendix F Open Software Announcements .......................................................................717
Appendix G Legal Information..............................................................................................753
Appendix H Customer Support.............................................................................................757
Index.......................................................................................................................................763
ZyWALL USG 300 User’s Guide
29
Table of Contents
30
ZyWALL USG 300 User’s Guide
Loading...