ZyXEL Communications USG FLEX H Series

To Next Page

To Previous Page

Chapter 11 IPSec VPN

USG FLEX H Series User’s Guide

180

Figure 129 VPN > IPSec VPN > Remote Access VPN

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents5
- Part I: User's Guide15
Chapter 1 Introduction16
- Introduction16
- Model Feature Differences16
- Overview16
- Grace Period17
- Registration at Nebula Control Center (NCC)17
- Applications18
- Management Overview19
- Web Configurator21
- Web Configurator Access21
- Remote Access to the Zyxel Device Networks22
- Web Configurator Screens Overview22
- Navigation Panel25
- Tables and Lists30
- Initial Setup Wizard33
- Initial Setup Wizard Overview33
- Terms of Use/Privacy Policy/Firmware Upgrade Notification33
- Connect to the Internet34
- Interface Type - DHCP34
- Interface Type - Static35
- Interface Type - Pppoe36
- System Time37
- Device Registration38
- Exit the Wizard39
- License Activations41
- Finish42
- Hardware Overview43
- Hardware, Interfaces and Zones43
- Multi-Gigabit43
- Poe44
- Front Panels45
- Rear Panels48
- Installation Scenarios49
- Desktop Installation Procedure50
- Rack-Mounting50
- Wall-Mounting51
- For USG FLEX 100H, USG FLEX 100HP, USG FLEX 200H, USG FLEX 200HP, USG FLEX 500H53
- Power Cord Lock53
- For USG FLEX 700H55
- Default Zones, Interfaces, and Ports56
Chapter 4 Dashboard57
- Dashboard57
- Overview57
- The System Screen57
- What You Can Do in this Chapter57
- System Information Screen58
- Virtual Device Screen59
- Bandwidth60
- Resource Usage Screen60
- Client Usage Screen61
- The Latest Logs Screen62
- The Security Screen62
- Part II: Technical Reference64
Chapter 5 Monitor65
- Monitor65
- Overview65
- What You Can Do in this Chapter65
- The Port Statistics Screen66
- The Interface Statistics Screen67
- The Resource Statistics Screen67
- The App Patrol Screen68
- The Content Filter Screen69
- IP Reputation71
- The Reputation Filter Screens71
- DNS Threat Filter72
- URL Threat Filter73
- The IPS Screen75
- The Anti-Malware Screen76
- The SSL Inspection Screens77
- The Summary Screen77
- The Certificate Cache List Screen78
- The Sandbox Screen79
- The Interface Screen80
- The Session Monitor Screen82
- The Device Insight Screen84
- The Login Users Screen86
- The DHCP Table Screen87
- The Ipsec VPN Screen88
- The Site to Site VPN Screen88
- The Remote Access VPN Screen89
- The SSL VPN Screen90
- Regular Expressions in Searching Ipsec Sas91
Chapter 6 Licensing92
- Licensing92
- Licensing Overview92
- What You Need to Know92
- The Licenses Screen93
- The Signature Update Screen95
- Auto Update96
- Signature Update96
Chapter 7 Interfaces98
- Interface Overview98
- Interfaces98
- What You Can Do in this Chapter98
- What You Need to Know98
- Interface Screen103
- Internal/External Ethernet Add/Edit105
- Internal/External Interface105
- Internal/External VLAN Add/Edit110
- Internal/External LAG Add/Edit116
- Bridge Interface121
- Bridge Add/Edit123
- VTI Interface126
- Restrictions for Ipsec Virtual Tunnel Interface127
- VTI Add/Edit127
- Trunk Overview129
- What You Need to Know130
- The Trunk Summary Screen131
- Configuring a User-Defined Trunk133
- Configuring the System Default Trunk134
- Port135
Chapter 8 Routing137
- Policy and Static Routes Overview137
- Routing137
- What You Can Do in this Chapter137
- What You Need to Know137
- Policy Route Screen139
- Policy Route Edit Screen141
- Static Route Screen144
- Static Route Add/Edit Screen145
Chapter 9 NAT147
- Nat147
- NAT Overview147
- What You Can Do in this Chapter147
- What You Need to Know147
- The NAT Screen150
- The NAT Add/Edit Screen151
- Alg155
- ALG Overview155
Chapter 10 ALG155
- What You Need to Know155
- Before You Begin156
- The ALG Screen156
Chapter 11 Ipsec VPN158
- Ipsec VPN158
- Virtual Private Networks (VPN) Overview158
- Ipsec VPN Background Information159
- What You Can Do in this Chapter166
- What You Need to Know166
- The Site to Site VPN Screen167
- The Site to Site VPN Add/Edit Screen- Wizard168
- The Site to Site VPN Add/Edit Screen- Custom174
- The Remote Access VPN Screen178
Chapter 12 SSL VPN184
- Overview184
- Ssl Vpn184
- What You Can Do in this Chapter184
- What You Need to Know184
- The SSL VPN Screen185
Chapter 13 Security Policy190
- Overview190
- Security Policy190
- What You Can Do in this Chapter190
- What You Need to Know191
- The Security Policy Screen192
- Configuring the Security Policy Control Screen193
- The Policy Control Add/Edit Screen195
- Example: Allow a Server to Ping the Zyxel Device Without Creating Logs197
- Dos Prevention Overview199
- The Dos Prevention Policy Screen200
- The Dos Prevention Profile Screen201
- The Dos Prevention Profile Add/Edit Screen202
- Security Policy Example Applications205
- Address Summary Screen208
- Address/Geo IP Overview208
Chapter 14 Object208
- Object208
- What You Need to Know208
- Address Group Summary Screen211
- Geo IP Summary Screen212
- Service Overview216
- What You Need to Know216
- The Service Summary Screen217
- The Service Group Summary Screen220
- Zone Overview222
- What You Need to Know223
- The Zone Screen224
- Schedule Overview225
- The Schedule Screen226
- What You Need to Know226
- The Schedule Group Screen230
- Application Patrol232
Chapter 15 Application Patrol232
- Overview232
- What You Can Do in this Chapter232
- What You Need to Know232
- Application Patrol Profile233
- Application Patrol Profile > Add/Edit - Application Management235
- Example: Block an Application237
Chapter 16 Content Filtering243
- Content Filtering243
- Overview243
- What You Can Do in this Chapter243
- What You Need to Know243
- Content Filter General Screen246
- Content Filtering Add Profile248
- Content Filter Allow List Screen261
- Content Filter Block List Screen262
- Content Filter Blocked URL Keywords Screen264
- Test Web Site Category Screen265
- Example: Block LAN Users from Using a Remote WAN Application266
Chapter 17 Reputation Filter272
- Overview272
- Reputation Filter272
- What You Need to Know272
- IP Reputation Screen273
- What You Can Do in this Chapter273
- IP Reputation Allow List Screen276
- IP Reputation Block List Screen277
- DNS Threat Filter Screen278
- DNS Threat Filter Allow List Screen281
- DNS Threat Filter Block List Screen282
- URL Threat Filter Screen283
- URL Threat Filter Allow List Screen285
- URL Threat Filter Block List Screen286
- Anti-Malware288
Chapter 18 Anti-Malware288
- Overview288
- Anti-Malware Screen291
- What You Can Do in this Chapter291
- The Allow List Screen293
- The Block List Screen295
- Anti-Malware Technical Reference297
Chapter 19 Sandbox299
- Overview299
- Sandbox299
- What You Need to Know299
- Sandbox Screen300
Chapter 20 IPS302
- Ips302
- Overview302
- What You Can Do in this Chapter302
- What You Need to Know302
- Before You Begin303
- The IPS Screen303
- Query Example309
- The Allow List Screen310
- IPS Technical Reference311
Chapter 21 IP Exception314
- IP Exception314
- Overview314
- The IP Exception Screen315
- The IP Exception Add/Edit Screen316
- Example: Bypass a Website317
Chapter 22 SSL Inspection319
- Overview319
- SSL Inspection319
- What You Can Do in this Chapter319
- Before You Begin320
- The SSL Inspection Profile Screen320
- What You Can Do in this Chapter320
- What You Need to Know320
- Add / Edit SSL Inspection Profiles323
- Exclude List Screen325
- Certificate Update Screen327
- Install a CA Certificate in a Browser328
Chapter 23 User & Authentication331
- User & Authentication331
- User/Group Overview331
- What You Need to Know331
- User/Group User Summary Screen332
- User Add/Edit Screen334
- User/Group Group Summary Screen337
- User/Group Setting Screen339
- User Authentication Overview342
- What You Need to Know342
- AAA Server Overview343
- RADIUS Server344
- RADIUS Server Summary344
- Adding a RADIUS Server345
- Two-Factor Authentication Overview347
- User Authentication Two-Factor Authentication348
Chapter 24 System350
- Overview350
- Settings350
- System350
- System Settings350
- System Time350
- What You Can Do in this Chapter350
- Administration Settings351
- Settings353
- Snmp356
- Snmpv3 and Security357
- Configuring SNMP358
- SNMP Traps358
- Supported Mibs358
- Add SNMP V3 User360
- Dns & Ddns361
- DNS Server Address Assignment362
- The DNS Screen362
- Adding an Address/Ptr Record366
- Address/Ptr Record366
- Adding a CNAME Record367
- CNAME Record367
- Adding a MX Record368
- MX Record368
- Adding a Domain Zone Forwarder369
- Domain Zone Forwarder369
- Editing a Security Option Control370
- Security Option Control370
- The DDNS Screen371
- The DDNS Add/Edit Screen373
- Mail Server375
- Notification375
- Alert377
- Certificate Overview378
- What You Need to Know378
- Verifying a Certificate379
- My Certificates380
- The My Certificates Add Screen382
- The My Certificates Edit Screen384
- The My Certificates Import Screen386
- Trusted Certificates387
- The Trusted Certificates Edit Screen389
- The Trusted Certificates Import Screen390
Chapter 25 Log and Report392
- Log and Report392
- Log/Events Screen392
- Overview392
- What You Can Do in this Chapter392
- Log Settings Screen394
- Secureporter396
- Email Daily Report399
Chapter 26 File Manager403
- File Manager403
- Overview403
- The Configuration File Screen403
- What You Can Do in this Chapter403
- What You Need to Know403
- Cloud Helper407
- Firmware Management407
- The Firmware Management Screen408
Chapter 27 Diagnostics411
- Diagnostics411
- Overview411
- The Diagnostics Screen411
- The Diagnostics Screens411
- What You Can Do in this Chapter411
- The Packet Capture Screen413
- The Packet Capture Edit Screen414
- The CPU / Memory Status Screen417
- The System Log Screen419
- The Network Tool Screen420
Chapter 28 Reboot422
- Overview422
- Reboot422
- The Reboot Screen422
- Part III: Appendices and Troubleshooting423
Chapter 29 Troubleshooting424
- Troubleshooting424
- Getting more Troubleshooting Help434
- Resetting the Zyxel Device434
Appendix A Customer Support435
Appendix B Product Features440
Appendix C Legal Information443

ZyXEL Communications USG FLEX H Series - Page 180

Table of Contents

Related product manuals