ZyXEL Communications 5 Series - Security; Part III: Security

To Next Page

To Previous Page

249

PART III

Security

Firewall Screens (251)

Intrusion Detection and Prevention (IDP) Screens (277)

Anti-Virus Screens (299)

Anti-Spam Screens (313)

Content Filtering Screens (327)

Content Filtering Reports (349)

IPSec VPN (357)

Certificates (399)

Authentication Server Screens (427)

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
Contents Overview9
- Table of Contents9
Table of Contents11
List of Figures29
List of Tables41
Introduction49
PART I Introduction49
Chapter 1 Getting to Know Your Zywall51
- Zywall Internet Security Appliance Overview51
- Zywall Features51
- Applications for the Zywall52
- Ways to Manage the Zywall54
- Good Habits for Managing the Zywall54
Chapter 2 Hardware Installation55
- General Installation Instructions55
- Desktop Installation55
- Rack-Mounted Installation Requirements56
- Figure 4 Attaching Rubber Feet56
- Rack-Mounted Installation57
- Figure 5 Attaching Mounting Brackets and Screws57
- Figure 6 Rack Mounting57
- Card, WLAN Card and Zywall Turbo Card Installation58
- Figure 7 WLAN Card Installation58
- Front Panel Lights59
- Figure 8 Zywall 70 Front Panel59
- Figure 9 Zywall 35 Front Panel59
- Figure 10 Zywall 5 Front Panel59
- Table 2 Front Panel Lights59
Chapter 3 Introducing the Web Configurator61
- Web Configurator Overview61
- Accessing the Zywall Web Configurator61
- Figure 11 Change Password Screen62
- Figure 12 Replace Certificate Screen62
- Resetting the Zywall63
- Navigating the Zywall Web Configurator64
- Wizard Setup87
Chapter 4 Wizard Setup87
- Wizard Setup Overview87
- Figure 22 Wizard Setup Welcome87
- Internet Access88
  - ISP Parameters88
  - Figure 23 ISP Parameters: Ethernet Encapsulation88
  - Table 13 ISP Parameters: Ethernet Encapsulation88
  - Figure 24 ISP Parameters: Pppoe Encapsulation89
  - Table 14 ISP Parameters: Pppoe Encapsulation90
  - Figure 25 ISP Parameters: PPTP Encapsulation91
  - Table 15 ISP Parameters: PPTP Encapsulation91
  - Internet Access Wizard: Second Screen92
  - Figure 26 Internet Access Wizard: Second Screen92
  - Internet Access Wizard: Registration93
  - Figure 27 Internet Access Setup Complete93
  - Figure 28 Internet Access Wizard: Registration93
  - Internet Access Wizard: Status94
  - Figure 29 Internet Access Wizard: Registration in Progress94
  - Table 16 Internet Access Wizard: Registration94
  - Internet Access Wizard: Service Activation95
  - Figure 30 Internet Access Wizard: Status95
  - Figure 31 Internet Access Wizard: Registration Failed95
  - Figure 32 Internet Access Wizard: Registered Device95
- VPN Wizard Gateway Setting96
- Figure 33 Internet Access Wizard: Activated Services96
- Figure 34 VPN Wizard: Gateway Setting96
- Table 17 VPN Wizard: Gateway Setting96
- VPN Wizard Network Setting97
- Figure 35 VPN Wizard: Network Setting98
- Table 18 VPN Wizard: Network Setting98
- VPN Wizard IKE Tunnel Setting (IKE Phase 1)99
- Figure 36 VPN Wizard: IKE Tunnel Setting99
- VPN Wizard Ipsec Setting (IKE Phase 2)100
- Table 19 VPN Wizard: IKE Tunnel Setting100
- Figure 37 VPN Wizard: Ipsec Setting101
- Table 20 VPN Wizard: Ipsec Setting101
- VPN Wizard Status Summary102
- Figure 38 VPN Wizard: VPN Status102
- Table 21 VPN Wizard: VPN Status103
- VPN Wizard Setup Complete104
- Anti-Spam Wizard: Email Server Location Setting104
- Figure 39 VPN Wizard Setup Complete104
- Anti-Spam Wizard: Direction Recommendations105
- Figure 40 Anti-Spam Wizard: Email Server Location Setting105
- Table 22 Anti-Spam Wizard: Email Server Location Setting105
- Anti-Spam Wizard: Direction Configuration106
- Figure 41 Anti-Spam Wizard: Direction Recommendations106
- Figure 42 Anti-Spam Wizard: Direction Configuration107
- Table 23 Anti-Spam Wizard: Direction Configuration107
- Anti-Spam Wizard: Setup Complete108
- Figure 43 Anti-Spam Wizard: Setup Complete108
Chapter 5 Tutorials109
- Dynamic VPN Rule Configuration109
- Security Settings for VPN Traffic119
- Firewall Rule for VPN Example122
- How to Set up a 3G WAN Connection130
- Configuring Load Balancing132
- Figure 67 Tutorial: Home132
- Configuring Content Filtering133
Chapter 6 Registration Screens141
- Overview141
  - What You Can Do in the Registration Screens141
  - What You Need to Know about Registration141
- The Registration Screen142
- Figure 79 REGISTRATION > Registration143
- Table 25 REGISTRATION > Registration143
- The Service Screen144
- Figure 80 REGISTRATION > Registration: Registered Device144
- Figure 81 REGISTRATION > Service145
- Table 26 REGISTRATION > Service145
Network147
Part II: Network147
- LAN Screens149
Chapter 7 LAN Screens149
- Overview149
- The LAN Screen152
- Figure 83 NETWORK > LAN153
- Table 27 NETWORK > LAN153
- The LAN Static DHCP Screen155
- The LAN IP Alias Screen156
- Figure 84 NETWORK > LAN > Static DHCP156
- Table 28 NETWORK > LAN > Static DHCP156
- Figure 85 Physical Network & Partitioned Logical Networks157
- Figure 86 NETWORK > LAN > IP Alias157
- The LAN Port Roles Screen158
- Table 29 NETWORK > LAN > IP Alias158
- Figure 87 NETWORK > LAN > Port Roles159
- Figure 88 Port Roles Change Complete159
- Table 30 NETWORK > LAN > Port Roles159
- Bridge Screens161
Chapter 8 Bridge Screens161
- Overview161
- The Bridge Screen163
- Figure 92 NETWORK > Bridge163
- Table 31 NETWORK > Bridge163
- The Bridge Port Roles Screen164
- Figure 93 NETWORK > Bridge > Port Roles165
- Figure 94 Port Roles Change Complete165
- Table 32 NETWORK > Bridge > Port Roles165
- Bridge Technical Reference166
- Table 33 STP Path Costs166
- Table 34 STP Port States167
- WAN Screens169
Chapter 9 WAN Screens169
- Overview169
- The General Screen172
- The WAN1 and WAN2 Screen182
- The 3G (WAN2) Screen192
- Figure 108 NETWORK > WAN > 3G (WAN 2)194
- Table 45 NETWORK > WAN > 3G (WAN 2)194
- The Traffic Redirect Screen197
- Figure 109 Traffic Redirect WAN Setup197
- Configuring the Traffic Redirect Screen198
- Figure 110 Traffic Redirect LAN Setup198
- Figure 111 NETWORK > WAN > Traffic Redirect198
- Table 46 NETWORK > WAN > Traffic Redirect198
- The Dial Backup Screen199
- WAN Technical Reference204
- Table 49 2G, 2.5G, 2.75G, 3G and 3.5G Wireless Technologies204
- DMZ Screens207
Chapter 10 DMZ Screens207
- Overview207
- The DMZ Screen210
- Figure 116 DMZ Private and Public Address Example210
- Figure 117 NETWORK > DMZ211
- Table 50 NETWORK > DMZ211
- The Static DHCP Screen213
- The IP Alias Screen214
- Figure 118 NETWORK > DMZ > Static DHCP214
- Table 51 NETWORK > DMZ > Static DHCP214
- Figure 119 NETWORK > DMZ > IP Alias215
- Table 52 NETWORK > DMZ > IP Alias215
- The DMZ Port Roles Screen216
- Figure 120 NETWORK > DMZ > Port Roles216
- Table 53 NETWORK > DMZ > Port Roles216
- WLAN Screens219
Chapter 11 WLAN Screens219
- Overview219
- The WLAN Screen220
- Figure 122 NETWORK > WLAN221
- Table 54 NETWORK > WLAN221
- WLAN Static DHCP223
- WLAN IP Alias224
- Figure 123 NETWORK > WLAN > Static DHCP224
- Table 55 NETWORK > WLAN > Static DHCP224
- Figure 124 NETWORK > WLAN > IP Alias225
- Table 56 NETWORK > WLAN > IP Alias225
- WLAN Port Roles226
- Figure 125 WLAN Port Role Example226
- Figure 126 NETWORK > WLAN > Port Roles227
- Figure 127 NETWORK > WLAN > Port Roles: Change Complete227
- Table 57 NETWORK > WLAN > Port Roles227
Chapter 12 Wireless Screens229
- Overview229
- Wireless Card232
- MAC Filter243
- Figure 138 WIRELESS > Wi-Fi > MAC Filter243
- Table 66 WIRELESS > Wi-Fi > MAC Filter243
- Technical Reference244
- Figure 139 EAP Authentication245
- Figure 140 WPA-PSK Authentication246
- Figure 141 WPA with RADIUS Application Example247
Security249
Part III: Security249
- Firewall Screens251
Chapter 13 Firewall Screens251
- Overview251
  - Figure 142 Default Firewall Action251
  - Before You Begin252
  - What You Can Do Using the Firewall Screens252
  - What You Need to Know about the Zywall Firewall252
- Firewall Rules Example252
- Figure 143 Blocking All LAN to WAN IRC Traffic Example253
- Table 67 Blocking All LAN to WAN IRC Traffic Example253
- The Firewall Default Rule Screen254
- Figure 144 Limited LAN to WAN IRC Traffic Example254
- Table 68 Limited LAN to WAN IRC Traffic Example254
- Figure 145 SECURITY > FIREWALL > Default Rule (Router Mode)255
- Table 69 SECURITY > FIREWALL > Default Rule (Router Mode)255
- The Firewall Default Rule (Bridge Mode) Screen256
- Figure 146 SECURITY > FIREWALL > Default Rule (Bridge Mode)257
- Table 70 SECURITY > FIREWALL > Default Rule (Bridge Mode)257
- The Firewall Rule Summary Screen259
  - Figure 147 SECURITY > FIREWALL > Rule Summary259
  - Table 71 SECURITY > FIREWALL > Rule Summary259
  - The Firewall Edit Rule Screen260
  - Figure 148 SECURITY > FIREWALL > Rule Summary > Edit261
  - Table 72 SECURITY > FIREWALL > Rule Summary > Edit262
- The Anti-Probing Screen263
- Figure 149 SECURITY > FIREWALL > Anti-Probing263
- The Firewall Thresholds Screen264
- Figure 150 SECURITY > FIREWALL > Threshold264
- Table 73 SECURITY > FIREWALL > Anti-Probing264
- Table 74 SECURITY > FIREWALL > Threshold265
- The Firewall Services Screen266
  - Figure 151 SECURITY > FIREWALL > Service266
  - Table 75 SECURITY > FIREWALL > Service266
  - Figure 152 SECURITY > FIREWALL > Service > Add267
  - Table 76 SECURITY > FIREWALL > Service > Add267
  - The Firewall Edit Custom Service Screen267
  - Figure 153 My Service Firewall Rule Example: Service268
  - Figure 154 My Service Firewall Rule Example: Edit Custom Service268
  - My Service Firewall Rule Example268
  - Figure 155 My Service Firewall Rule Example: Rule Summary269
  - Figure 156 My Service Firewall Rule Example: Rule Edit269
  - Figure 157 My Service Firewall Rule Example: Rule Configuration270
- Technical Reference271
- Figure 158 My Service Firewall Rule Example: Rule Summary271
- Figure 159 from LAN to VPN Example273
- Figure 160 from VPN to LAN Example273
- Figure 161 from VPN to VPN Example274
- Figure 162 Using IP Alias to Solve the Triangle Route Problem275
- Figure 163 Three-Way Handshake275
- Security Considerations276
Chapter 14 Intrusion Detection and Prevention (IDP) Screens277
- Overview277
- The General Setup Screen279
- Figure 166 SECURITY > IDP > General279
- Table 77 SECURITY > IDP > General Setup280
- The Signatures Screen281
- The Anomaly Screen289
- Figure 171 Signature Query by Attribute289
- Figure 172 SECURITY > IDP > Anomaly290
- Table 83 SECURITY > IDP > Anomaly290
- The Update Screen291
- The Backup and Restore Screen293
- Technical Reference294
Chapter 15 Anti-Virus Screens299
- Overview299
- The General Screen301
- Figure 176 SECURITY > ANTI-VIRUS > General302
- Table 85 SECURITY > ANTI-VIRUS > General302
- The Signature Screen303
- The Update Screen306
- The Backup and Restore Screen309
- Figure 181 SECURITY > ANTI-VIRUS > Backup and Restore309
- Technical Reference310
- Table 87 Common Computer Virus Types310
Chapter 16 Anti-Spam Screens313
- Overview313
- The General Screen315
- Figure 183 SECURITY > ANTI-SPAM > General316
- Table 88 SECURITY > ANTI-SPAM > General316
- The External DB Screen318
- Figure 184 SECURITY > ANTI-SPAM > External DB319
- Table 89 SECURITY > ANTI-SPAM > External DB319
- The Lists Screen320
- Figure 185 SECURITY > ANTI-SPAM > Lists321
- Table 90 SECURITY > ANTI-SPAM > Lists321
- Anti-Spam Lists Edit Screen322
- Figure 186 SECURITY > ANTI-SPAM > Lists > Edit322
- Table 91 SECURITY > ANTI-SPAM > Lists > Edit323
- Technical Reference324
  - Spamcontent Engine325
  - Spamtricks Engine325
Chapter 17 Content Filtering Screens327
- Overview327
  - What You Can Do in the Content Filtering Screens327
  - What You Need to Know about Content Filtering327
- General Screen328
- Figure 187 Content Filtering Lookup Procedure328
- Figure 188 SECURITY > CONTENT FILTER > General329
- Table 92 SECURITY > CONTENT FILTER > General329
- The Policy Screen331
- Figure 189 SECURITY > CONTENT FILTER > Policy331
- Content Filter Policy: General332
- Table 93 SECURITY > CONTENT FILTER > Policy332
- Figure 190 SECURITY > CONTENT FILTER > Policy > General333
- Table 94 SECURITY > CONTENT FILTER > Policy > General333
- Content Filter Policy: External Database334
- Figure 191 SECURITY > CONTENT FILTER > Policy > External Database334
- Table 95 SECURITY > CONTENT FILTER > Policy > External Database335
- Content Filter Policy: Customization341
- Figure 192 SECURITY > CONTENT FILTER > Policy > Customization341
- Content Filter Policy: Schedule342
- Table 96 SECURITY > CONTENT FILTER > Policy > Customization342
- Content Filter Object343
- Figure 193 SECURITY > CONTENT FILTER > Policy > Schedule343
- Table 97 SECURITY > CONTENT FILTER > Policy > Schedule343
- Figure 194 SECURITY > CONTENT FILTER > Object344
- Table 98 SECURITY > CONTENT FILTER > Object345
- Content Filtering Cache346
- Figure 195 SECURITY > CONTENT FILTER > Cache346
- Table 99 SECURITY > CONTENT FILTER > Cache346
Chapter 18 Content Filtering Reports349
- Overview349
- Checking Content Filtering Activation349
- Viewing Content Filtering Reports349
- Figure 196 Myzyxel.com: Login350
- Figure 197 Myzyxel.com: Welcome350
- Figure 198 Myzyxel.com: Service Management351
- Figure 199 Blue Coat: Login351
- Figure 200 Content Filtering Reports Main Screen352
- Figure 201 Blue Coat: Report Home352
- Figure 202 Global Report Screen Example353
- Web Site Submission354
- Figure 203 Requested Urls Example354
- Figure 204 Web Page Review Process Screen355
- Ipsec VPN357
Chapter 19 Ipsec VPN357
- Overview357
  - What You Can Do in the Ipsec VPN Screens357
  - Figure 205 VPN: Example357
  - What You Need to Know about Ipsec VPN358
  - Figure 206 VPN: IKE SA and Ipsec SA358
  - Figure 207 Gateway and Network Policies359
  - Figure 208 Ipsec Fields Summary359
- The VPN Rules (IKE) Screen360
- Figure 209 SECURITY > VPN > VPN Rules (IKE)360
- Table 100 SECURITY > VPN > VPN Rules (IKE)360
- The VPN Rules (IKE) Gateway Policy Edit Screen361
- Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy362
- Table 101 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy363
- The Network Policy Edit Screen367
- Figure 211 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy368
- Table 102 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy369
- The Network Policy Edit: Port Forwarding Screen372
- Figure 212 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding373
- Table 103 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding373
- The Network Policy Move Screen374
- Figure 213 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy374
- Table 104 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy374
- The VPN Rules (Manual) Screen375
- Figure 214 SECURITY > VPN > VPN Rules (Manual)375
- Table 105 SECURITY > VPN > VPN Rules (Manual)375
- The VPN Rules (Manual): Edit Screen376
- Figure 215 SECURITY > VPN > VPN Rules (Manual) > Edit376
- Table 106 SECURITY > VPN > VPN Rules (Manual) > Edit377
- The VPN SA Monitor Screen379
- The VPN Global Setting Screen379
- Figure 216 SECURITY > VPN > SA Monitor379
- Table 107 SECURITY > VPN > SA Monitor379
- Figure 217 Overlap in a Dynamic VPN Rule380
- Figure 218 Overlap in IP Alias and VPN Remote Networks381
- Figure 219 SECURITY > VPN > Global Setting381
- Table 108 SECURITY > VPN > Global Setting381
- Telecommuter Vpn/Ipsec Examples382
  - Telecommuters Sharing One VPN Rule Example383
  - Telecommuters Using Unique VPN Rules Example383
  - Figure 220 Telecommuters Sharing One VPN Rule Example383
  - Table 109 Telecommuters Sharing One VPN Rule Example383
  - Figure 221 Telecommuters Using Unique VPN Rules Example384
  - Table 110 Telecommuters Using Unique VPN Rules Example384
- VPN and Remote Management385
- Hub-And-Spoke VPN385
  - Figure 222 VPN for Remote Management Example385
  - Figure 223 VPN Topologies386
  - Hub-And-Spoke VPN Example386
  - Figure 224 Hub-And-Spoke VPN Example387
  - Hub-And-Spoke Example VPN Rule Addresses387
  - Hub-And-Spoke VPN Requirements and Suggestions387
- Ipsec VPN Background Information388
  - Figure 225 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal388
  - Figure 226 IKE SA: Main Negotiation Mode, Steps 3 - 4: DH Key Exchange389
  - Figure 227 IKE SA: Main Negotiation Mode, Steps 5 - 6: Authentication389
  - Table 111 VPN Example: Matching ID Type and Content390
  - Table 112 VPN Example: Mismatching ID Type and Content390
  - Figure 228 VPN/NAT Example392
  - Figure 229 Virtual Mapping of Local and Remote Network IP Addresses394
  - Figure 230 VPN: Transport and Tunnel Mode Encapsulation394
  - Ipsec Sa Proposal and Perfect Forward Secrecy395
  - Ipsec Sa Using Manual Keys395
  - Additional Ipsec Vpn Topics396
- Figure 231 Ipsec High Availability397
Chapter 20 Certificates399
- Overview399
  - What You Can Do in the Certificate Screens399
  - What You Need to Know about Certificates399
  - Verifying a Certificate400
  - Figure 232 Certificates on Your Computer400
- The My Certificates Screen401
  - Figure 233 Certificate Details401
  - Figure 234 SECURITY > CERTIFICATES > My Certificates402
  - Table 113 SECURITY > CERTIFICATES > My Certificates402
  - The My Certificate Details Screen403
  - Figure 235 SECURITY > CERTIFICATES > My Certificates > Details404
  - Table 114 SECURITY > CERTIFICATES > My Certificates > Details404
- The My Certificate Export Screen406
- Figure 236 SECURITY > CERTIFICATES > My Certificates > Export406
- Table 115 SECURITY > CERTIFICATES > My Certificates > Export406
- The My Certificate Import Screen407
  - Using the My Certificate Import Screen407
  - Figure 237 SECURITY > CERTIFICATES > My Certificates > Import408
  - Figure 238 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12408
  - Table 116 SECURITY > CERTIFICATES > My Certificates > Import408
  - Table 117 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12408
- The My Certificate Create Screen409
- Figure 239 SECURITY > CERTIFICATES > My Certificates > Create (Basic)409
- Figure 240 SECURITY > CERTIFICATES > My Certificates > Create (Advanced)410
- Table 118 SECURITY > CERTIFICATES > My Certificates > Create410
- The Trusted Cas Screen413
- Figure 241 SECURITY > CERTIFICATES > Trusted Cas414
- Table 119 SECURITY > CERTIFICATES > Trusted Cas414
- The Trusted CA Details Screen415
- Figure 242 SECURITY > CERTIFICATES > Trusted Cas > Details416
- Table 120 SECURITY > CERTIFICATES > Trusted Cas > Details416
- The Trusted CA Import Screen418
- The Trusted Remote Hosts Screen419
- Figure 243 SECURITY > CERTIFICATES > Trusted Cas > Import419
- Table 121 SECURITY > CERTIFICATES > Trusted Cas Import419
- Figure 244 SECURITY > CERTIFICATES > Trusted Remote Hosts420
- Table 122 SECURITY > CERTIFICATES > Trusted Remote Hosts420
- The Trusted Remote Hosts Import Screen421
- Figure 245 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import421
- Table 123 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import421
- The Trusted Remote Host Certificate Details Screen422
- Figure 246 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details422
- Table 124 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details423
- The Directory Servers Screen424
- Figure 247 SECURITY > CERTIFICATES > Directory Servers424
- The Directory Server Add or Edit Screen425
- Figure 248 SECURITY > CERTIFICATES > Directory Server > Add425
- Table 125 SECURITY > CERTIFICATES > Directory Servers425
- Table 126 SECURITY > CERTIFICATES > Directory Server > Add426
Chapter 21 Authentication Server Screens427
- Overview427
  - What You Can Do in the Authentication Server Screens427
  - What You Need to Know about Authentication Server427
- The Local User Database Screen428
- Figure 249 SECURITY > AUTH SERVER > Local User Database429
- The RADIUS Screen430
- Figure 250 SECURITY > AUTH SERVER > RADIUS430
- Table 127 SECURITY > AUTH SERVER > Local User Database430
- Table 128 SECURITY > AUTH SERVER > RADIUS430
Advanced433
Chapter 22 Network Address Translation (NAT)435
- Overview435
- The NAT Overview Screen436
- Table 129 NAT Mapping Types436
- Figure 251 ADVANCED > NAT > NAT Overview437
- Table 130 ADVANCED > NAT > NAT Overview437
- The NAT Address Mapping Screen438
- The Port Forwarding Screen441
- The Port Triggering Screen445
- Technical Reference447
- Figure 259 NAT Overview448
- Figure 260 NAT Application with IP Alias449
- Figure 261 Port Restricted Cone NAT Example450
- Static Route Screens451
Chapter 23 Static Route Screens451
- Overview451
  - What You Can Do in the Static Route Screens451
  - Figure 262 Example of Static Routing Topology451
- The IP Static Route Screen452
Chapter 24 Policy Route Screens457
- Overview457
  - What You Can Do in the Policy Route Screens457
  - What You Need to Know about Policy Route457
- The Policy Route Summary Screen458
Chapter 25 Bandwidth Management Screens465
- Overview465
- The Summary Screen467
- The Class Setup Screen471
- Table 144 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example471
- Figure 269 ADVANCED > BW MGMT > Class Setup472
- Table 145 ADVANCED > BW MGMT > Class Setup472
- Bandwidth Manager Class Configuration473
- Bandwidth Management Statistics477
- Figure 271 ADVANCED > BW MGMT > Class Setup > Statistics477
- The Monitor Screen478
- Figure 272 ADVANCED > BW MGMT > Monitor478
Chapter 26 DNS Screens479
- Overview479
  - What You Can Do in the DNS Screens479
  - What You Need to Know about DNS479
- The System Screen481
- The DNS Cache Screen485
- Figure 277 ADVANCED > DNS > Cache486
- The DHCP Screen487
- Figure 278 ADVANCED > DNS > DHCP487
- The DDNS Screen488
- Configuring the Dynamic DNS Screen489
- Figure 279 ADVANCED > DNS > DDNS489
Chapter 27 Remote Management Screens491
- Overview491
  - What You Can Do in the Remote Management Screens491
  - Figure 280 Secure and Insecure Remote Management from the WAN491
  - What You Need to Know about Remote Management492
- HTTPS Example493
  - Internet Explorer Warning Messages493
  - Netscape Navigator Warning Messages493
  - Figure 281 Security Alert Dialog Box (Internet Explorer)493
  - Avoiding the Browser Warning Messages494
  - Figure 282 Security Certificate 1 (Netscape)494
  - Figure 283 Security Certificate 2 (Netscape)494
  - Login Screen495
  - Figure 284 Example: Lock Denoting a Secure Connection495
  - Figure 285 Replace Certificate495
  - Enrolling and Importing SSL Client Certificates (Example)496
  - Figure 286 Device-Specific Certificate496
  - Figure 287 Common Zywall Certificate496
  - Installing the Ca's Certificate (Example)497
  - Figure 288 Zywall Trusted CA Screen497
  - Installing Your Personal Certificate(S) (Example)498
  - Figure 289 CA Certificate Example498
  - Figure 290 Personal Certificate Import Wizard 1499
  - Figure 291 Personal Certificate Import Wizard 2499
  - Figure 292 Personal Certificate Import Wizard 3500
  - Figure 293 Personal Certificate Import Wizard 4500
  - Using a Certificate When Accessing the Zywall (Example)501
  - Figure 294 Personal Certificate Import Wizard 5501
  - Figure 295 Personal Certificate Import Wizard 6501
  - Figure 296 Access the Zywall Via HTTPS501
  - Secure Telnet Using SSH Examples502
  - Figure 297 SSL Client Authentication502
  - Figure 298 Secure Web Configurator Login Screen502
  - Figure 299 SSH Example 1: Store Host Key503
  - Figure 300 SSH Example 2: Test503
  - Figure 301 SSH Example 2: Log in503
- The WWW Screen504
- Figure 302 Secure FTP: Firmware Upload Example504
- Configuring the WWW Screen505
- Figure 303 HTTPS Implementation505
- Figure 304 ADVANCED > REMOTE MGMT > WWW506
- Table 149 ADVANCED > REMOTE MGMT > WWW506
- The SSH Screen507
- Configuring the SSH Screen507
- Figure 305 SSH Communication over the WAN Example507
- The Telnet Screen508
- Figure 306 ADVANCED > REMOTE MGMT > SSH508
- Table 150 ADVANCED > REMOTE MGMT > SSH508
- The FTP Screen509
- Figure 307 ADVANCED > REMOTE MGMT > Telnet509
- Table 151 ADVANCED > REMOTE MGMT > Telnet509
- The SNMP Screen510
  - Figure 308 ADVANCED > REMOTE MGMT > FTP510
  - Table 152 ADVANCED > REMOTE MGMT > FTP510
  - Figure 309 SNMP Management Model511
  - Configuring the SNMP Screen512
  - Figure 310 ADVANCED > REMOTE MGMT > SNMP512
  - Table 153 SNMP Traps512
- The DNS Screen513
- Table 154 ADVANCED > REMOTE MGMT > SNMP513
- The CNM Screen514
- Configuring the CNM Screen514
- Figure 311 ADVANCED > REMOTE MGMT > DNS514
- Table 155 ADVANCED > REMOTE MGMT > DNS514
- Figure 312 ADVANCED > REMOTE MGMT > CNM515
- Table 156 ADVANCED > REMOTE MGMT > CNM515
- Remote Management Technical Reference516
- Figure 313 How SSH Works516
Chapter 28 Upnp Screens519
- Overview519
  - What You Can Do in the Upnp Screens519
  - What You Need to Know about Upnp519
- Upnp Examples520
  - Installing Upnp in Windows Example520
  - Using Upnp in Windows XP Example522
- The Upnp Screen526
- Figure 314 ADVANCED > Upnp526
- Table 157 ADVANCED > Upnp526
- The Ports Screen527
- Figure 315 ADVANCED > Upnp > Ports527
- Table 158 ADVANCED > Upnp > Ports527
Chapter 29 Custom Application Screen529
- Overview529
  - What You Can Do in the Custom Application Screen529
  - What You Need to Know about Custom Application529
- The Custom Application Screen529
- Figure 316 ADVANCED > Custom APP530
- Table 159 ADVANCED > Custom APP530
- ALG Screen531
Chapter 30 ALG Screen531
- Overview531
- Figure 319 H.323 Calls from the WAN with Multiple Outgoing Calls534
- Figure 320 SIP ALG Example535
- The ALG Screen535
- Figure 321 ADVANCED > ALG536
- Table 160 ADVANCED > ALG536
Reports, Logs and Maintenance537
Part V: Reports, Logs and Maintenance537
Chapter 31 Reports Screens539
- Overview539
  - What You Can Do in the Reports Screens539
- The Traffic Statistics Screen539
  - Figure 322 REPORTS > Traffic Statistics540
  - Table 161 REPORTS > Traffic Statistics540
  - Viewing Web Site Hits541
  - Figure 323 REPORTS > Traffic Statistics: Web Site Hits Example542
  - Table 162 REPORTS > Traffic Statistics: Web Site Hits Report542
  - Viewing Host IP Address542
  - Figure 324 REPORTS > Traffic Statistics: Host IP Address Example543
  - Table 163 REPORTS > Traffic Statistics: Host IP Address543
  - Viewing Protocol/Port543
  - Figure 325 REPORTS > Traffic Statistics: Protocol/Port Example544
  - Table 164 REPORTS > Traffic Statistics: Protocol/ Port544
  - System Reports Specifications545
- The IDP Screen545
- Figure 326 REPORTS > IDP545
- Table 165 Report Specifications545
- Table 166 REPORTS > IDP546
- The Anti-Virus Screen547
- Figure 327 REPORTS > IDP > Source547
- Figure 328 REPORTS > IDP > Destination547
- Figure 329 REPORTS > Anti-Virus547
- Figure 330 REPORTS > Anti-Virus > Source548
- Table 167 REPORTS > Anti-Virus548
- The Anti-Spam Screen549
- Figure 331 REPORTS > Anti-Virus > Destination549
- Figure 332 REPORTS > Anti-Spam549
- Table 168 REPORTS > Anti-Spam549
- The E-Mail Report Screen551
- Figure 333 REPORTS > Anti-Spam > Source551
- Figure 334 REPORTS > Anti-Spam > Score Distribution551
- Figure 335 REPORTS > E-Mail Report552
- Table 169 REPORTS > E-Mail Report552
Chapter 32 Logs Screens555
- Overview555
  - What You Can Do in the Log Screens555
  - What You Need to Know about Logs555
- The View Log Screen555
  - Log Description Example556
  - Figure 336 LOGS > View Log556
  - Table 170 LOGS > View Log556
  - About the Certificate Not Trusted Log557
  - Table 171 Log Description Example557
- The Log Settings Screen558
- Figure 337 Myzyxel.com: Download Center558
- Figure 338 Myzyxel.com: Certificate Download558
- Figure 339 LOGS > Log Settings559
- Table 172 LOGS > Log Settings559
- Technical Reference561
- Table 173 System Maintenance Logs561
- Table 174 System Error Logs563
- Table 175 Access Control Logs563
- Table 176 TCP Reset Logs564
- Table 177 Packet Filter Logs565
- Table 178 ICMP Logs565
- Table 179 CDR Logs566
- Table 180 PPP Logs566
- Table 181 3G Logs566
- Table 182 Upnp Logs567
- Table 183 Content Filtering Logs568
- Table 184 Attack Logs568
- Table 185 Remote Management Logs570
- Table 186 Wireless Logs570
- Table 187 Ipsec Logs571
- Table 188 IKE Logs571
- Table 189 PKI Logs574
- Table 190 802.1X Logs576
- Table 191 ACL Setting Notes577
- Table 192 ICMP Notes578
- Table 193 IDP Logs579
- Table 194 AV Logs579
- Table 195 as Logs581
- Table 196 Syslog Logs583
- Table 197 RFC-2408 ISAKMP Payload Types584
Chapter 33 Maintenance Screens585
- Overview585
  - What You Can Do in the Maintenance Screens585
- The General Setup Screen585
- The Password Screen586
- Figure 340 MAINTENANCE > General Setup586
- Table 198 MAINTENANCE > General Setup586
- The Time and Date Screen587
  - Figure 341 MAINTENANCE > Password587
  - Table 199 MAINTENANCE > Password587
  - Figure 342 MAINTENANCE > Time and Date588
  - Table 200 MAINTENANCE > Time and Date588
  - Figure 343 Synchronization in Process590
  - Figure 344 Synchronization Is Successful590
  - Time Server Synchronization Example590
- The Device Mode Screen591
- Figure 345 Synchronization Fail591
- Table 201 MAC-Address-To-Port Mapping Table591
- Configuring the Device Mode Screen (Router)592
- Configuring the Device Mode Screen (Bridge)593
- Figure 346 MAINTENANCE > Device Mode (Router Mode)593
- Table 202 MAINTENANCE > Device Mode (Router Mode)593
- Figure 347 MAINTENANCE > Device Mode (Bridge Mode)594
- Table 203 MAINTENANCE > Device Mode (Bridge Mode)594
- The F/W Upload Screen595
- Figure 348 MAINTENANCE > Firmware Upload595
- Table 204 MAINTENANCE > Firmware Upload595
- Figure 349 Firmware Upload in Process596
- Figure 350 Network Temporarily Disconnected596
- Figure 351 Firmware Upload Error596
- The Backup and Restore Screen597
- Figure 352 MAINTENANCE > Backup and Restore597
- Table 205 Restore Configuration597
- Figure 353 Configuration Upload Successful598
- Figure 354 Network Temporarily Disconnected598
- Figure 355 Configuration Upload Error598
- The Restart Screen599
- The Diagnostics Screen599
- Figure 356 Reset Warning Message599
- Figure 357 MAINTENANCE > Restart599
- Figure 358 MAINTENANCE > Diagnostics600
- Table 206 MAINTENANCE > Diagnostics600
Smt603
Part VI: SMT603
Chapter 34 Introducing the SMT605
- Introduction to the SMT605
- Accessing the SMT Via the Console Port605
  - Initial Screen605
  - Entering the Password606
- Navigating the SMT Interface606
- Changing the System Password610
- Resetting the Zywall611
- Figure 363 Menu 23: System Password611
Chapter 35 SMT Menu 1 - General Setup613
- Introduction to General Setup613
- Configuring General Setup613
Chapter 36 WAN and Dial Backup Setup619
- Introduction to WAN and Dial Backup Setup619
- WAN Setup619
- Figure 369 MAC Address Cloning in WAN Setup619
- Dial Backup620
Chapter 37 LAN Setup633
- Introduction to LAN Setup633
- Accessing the LAN Menus633
- LAN Port Filter Setup633
- Figure 378 Menu 3: LAN Setup633
- TCP/IP and DHCP Ethernet Setup Menu634
- Internet Access639
Chapter 38 Internet Access639
- Introduction to Internet Access Setup639
- Ethernet Encapsulation639
- Figure 383 Menu 4: Internet Access Setup (Ethernet)640
- Table 227 Menu 4: Internet Access Setup (Ethernet)640
- Configuring the PPTP Client641
- Configuring the Pppoe Client642
- Figure 384 Internet Access Setup (PPTP)642
- Table 228 New Fields in Menu 4 (PPTP) Screen642
- Basic Setup Complete643
- Figure 385 Internet Access Setup (Pppoe)643
- Table 229 New Fields in Menu 4 (Pppoe) Screen643
Chapter 39645
- DMZ Setup645
Chapter 40 Route Setup649
- Configuring Route Setup649
- Route Assessment649
- Figure 391 Menu 6: Route Setup649
- Figure 392 Menu 6.1: Route Assessment649
- Traffic Redirect650
- Figure 393 Menu 6.2: Traffic Redirect650
- Table 230 Menu 6.1: Route Assessment650
- Table 231 Menu 6.2: Traffic Redirect650
- Route Failover651
- Figure 394 Menu 6.3: Route Failover651
- Table 232 Menu 6.3: Route Failover651
- Wireless Setup653
Chapter 41 Wireless Setup653
- Wireless LAN Setup653
- TCP/IP Setup656
Chapter 42 Remote Node Setup659
- Introduction to Remote Node Setup659
- Figure 400 Menu 11: Remote Node Setup659
- Remote Node Profile Setup660
- Edit IP664
- Figure 403 Menu 11.1: Remote Node Profile for PPTP Encapsulation664
- Table 237 Menu 11.1: Remote Node Profile for PPTP Encapsulation664
- Figure 404 Menu 11.1.2: Remote Node Network Layer Options for Ethernet Encapsulation665
- Table 238 Remote Node Network Layer Options Menu Fields665
- Remote Node Filter666
- Figure 405 Menu 11.1.4: Remote Node Filter (Ethernet Encapsulation)667
- Figure 406 Menu 11.1.4: Remote Node Filter (Pppoe or PPTP Encapsulation)667
- IP Static Route Setup669
Chapter 43 IP Static Route Setup669
- Figure 407 Menu 12: IP Static Route Setup670
Chapter 44 Network Address Translation (NAT)674
- Figure 409 Menu 4: Applying NAT for Internet Access674
Chapter 45 Introducing the Zywall Firewall693
- Using Zywall SMT Menus693
- Filter Configuration695
Chapter 46 Filter Configuration695
- Introduction to Filters695
- Configuring a Filter Set698
- Example Filter704
- Figure 443 Telnet Filter Example704
- Figure 444 Example Filter: Menu 21.1.3.1705
- Figure 445 Example Filter Rules Summary: Menu 21.1.3705
- Filter Types and NAT706
- Firewall Versus Filters706
- Applying a Filter707
- SNMP Configuration711
Chapter 47 SNMP Configuration711
- Figure 450 Menu 22: SNMP Configuration711
Chapter 48 System Information & Diagnosis713
- Introduction to System Status713
- System Status713
- Figure 451 Menu 24: System Maintenance713
- Figure 452 Menu 24.1: System Maintenance: Status714
- Table 252 System Maintenance: Status Menu Fields714
- System Information and Console Port Speed715
- Log and Trace717
- Diagnostic722
Chapter 49 Firmware and Configuration File Maintenance725
- Introduction725
- Filename Conventions725
- Firmware and Configuration File Maintenance726
- Backup Configuration726
- Restore Configuration730
- Uploading Firmware and Configuration Files733
Chapter 50 System Maintenance Menus 8 to 10739
- Command Interpreter Mode739
- Figure 481 Command Mode in Menu 24739
- Call Control Support740
- Time and Date Setting742
- Figure 485 Menu 24: System Maintenance742
- Figure 486 Menu 24.10 System Maintenance: Time and Date Setting743
- Table 261 Menu 24.10 System Maintenance: Time and Date Setting743
Chapter 51 Remote Management745
- Figure 487 Menu 24.11 - Remote Management Control746
Chapter 52 IP Policy Routing749
- IP Routing Policy Summary749
- Figure 488 Menu 25: Sample IP Routing Policy Summary749
- Table 263 Menu 25: Sample IP Routing Policy Summary749
- IP Routing Policy Setup750
- IP Policy Routing Example753
- Figure 490 Menu 25.1.1: IP Routing Policy Setup753
- Table 266 Menu 25.1.1: IP Routing Policy Setup753
- Figure 491 Example of IP Policy Routing754
- Figure 492 IP Routing Policy Example 1754
- Figure 493 IP Routing Policy Example 2755
- Call Scheduling757
Chapter 53 Call Scheduling757
- Introduction to Call Scheduling757
- Figure 494 Schedule Setup757
- Figure 495 Schedule Set Setup758
- Table 267 Schedule Set Setup758
- Figure 496 Applying Schedule Set(S) to a Remote Node (Pppoe)759
- Figure 497 Applying Schedule Set(S) to a Remote Node (PPTP)760
Part VII: Troubleshooting and Product Specifications761
- Troubleshooting763
Troubleshooting and Product Specifications761
Chapter 54 Troubleshooting763
- Power, Hardware Connections, and Leds763
- Zywall Access and Login764
- Internet Access766
- Wireless Router/Ap Troubleshooting767
- Upnp768
Chapter 55 Product Specifications769
- Table 268 Hardware Specifications769
Part VIII: Appendices and Index779
Appendices and Index779
Appendix A Removing and Installing a Fuse781
Appendix A Removing and Installing a Fuse782
Appendix B Common Services783
- Table 283 Commonly Used Services783
Appendix C Wireless Lans787
- Figure 499 Peer-To-Peer Communication in an Ad-Hoc Network787
- Figure 500 Basic Service Set788
- Figure 501 Infrastructure WLAN789
- Figure 502 RTS/CTS790
- Table 284 IEEE 802.11G791
- Table 285 Wireless Security Levels792
- Types of Eap Authentication793
Appendix D Windows 98 Se/Me Requirements for Anti-Virus Message Display801
- Figure 505 Windows 98 SE: Winpopup801
- Figure 506 Windows 98 SE: Program Task Bar802
- Figure 507 Windows 98 SE: Task Bar Properties802
- Figure 508 Windows 98 SE: Startup803
- Figure 509 Windows 98 SE: Startup: Create Shortcut803
- Figure 510 Windows 98 SE: Startup: Select a Title for the Program804
- Figure 511 Windows 98 SE: Startup: Shortcut804
Appendix E Legal Information805
Appendix E Legal Information806
- Zyxel Limited Warranty807
Appendix F Customer Support809
Appendix F Customer Support810
Index815

ZyXEL Communications 5 Series - Security; Part III: Security

Table of Contents

Related product manuals