ZyXEL Communications USG FLEX H Series - Page 29

Chapter 1 Introduction
USG FLEX H Series User’s Guide
29
IP Exception IP Exception Use this screen to view the IP exception list for the anti-malware,
reputation filter and IPS (Intrusion Prevention System) features.
The Zyxel Device will not intercept nor inspect the incoming packets
that match the rules in the IP exception list for the anti-malware and/
or IPS (Intrusion Prevention System) features.
Reputation
Filter
IP Reputation Enable IP reputation and specify what action the Zyxel Device takes
when any IP address with bad reputation is detected.
You can also set up an allow list to identify which IPv4 addresses
should be allowed, and a block list to identify which IPv4 addresses
should be blocked.
DNS Threat Filter Enable DNS threat filtering and specify what action the Zyxel Device
takes when a access attempt to a blocked Fully Qualified Domain
Name (FQDN) is detected.
You can also set up an allow list to identify which FQDNs should be
allowed, and a block list to identify which FQDNs should be blocked.
URL Threat Filter Enable URL filtering and specify what action the Zyxel Device takes
when a access attempt to a blocked website is detected.
You can also set up an allow list to identify which IPv4 addresses and/
or URLs should be allowed, and a block list to identify which IPv4
addresses and/or URLs should be blocked.
Sandbox Sandbox Enable sandbox, and specify the actions the Zyxel Device takes when
files with unknown or untrusted programs are detected.
SSL Inspection Profile Decrypt HTTPS traffic for Security Service inspection. Create SSL
Inspection templates of settings to apply to a traffic flow using a
security policy.
Exclude List Configure services to be excluded from SSL Inspection.
Certificate Update Use this screen to update the latest certificates of servers using SSL
connections to the Zyxel Device network.
Content
Filtering
Content Filtering Use this screen to:
• Create and manage the detailed filtering rules for HTTP(S) traffic
scan and DNS domain scan.
• Create a list of allowed web sites that bypass HTTP(S) traffic scan
and DNS domain scan.
• Create a list of web sites to block regardless of content filtering
policies.
User & Authentication
User/Group User Create and manage users.
Group Create and manage groups of users.
Setting Manage default settings for all users, general settings for user sessions,
and rules to force user authentication.
User
Authentication
Two-factor
Authentication
Configure Google Authenticator to access a secured network behind
the Zyxel Device via the web configurator or SSH connection.
System
Settings Settings Use this screen to configure:
• The Zyxel Device host name.
• System time settings.
• Remote access to the Zyxel Device settings.
• The web configurator language display settings.
SNMP SNMP Configure SNMP communities and services.
Table 9 Configuration Menu Screens Summary (continued)
FOLDER OR LINK TAB FUNCTION