ZyXEL Communications USG60W

To Next Page

To Previous Page

Chapter 27 Security Policy

ZyWALL USG Series User’s Guide

570

27.2 One Security

OneSecurity is a website with guidance on configuration walkthroughs, troubleshooting, and other

information. This is an example of a port forwarding configuration walkthrough.

Figure 403 Example of a Port Forwarding Configuration Walkthrough.

This is an example of L2TP over IPSec VPN Troubleshooting troubleshooting.

Main Page

Document Conventions3
Contents Overview4
- Table of Contents4
Table of Contents6
Part I: User's Guide27
Chapter 1 Introduction28
- Introduction28
- Overview28
- Registration at Myzyxel29
  - Grace Period30
- Applications30
- Management Overview33
- Web Configurator35
Chapter 2 Initial Setup Wizard53
- Initial Setup Wizard Screens53
Chapter 3 Hardware, Interfaces and Zones68
- Hardware Overview68
  - Front Panels68
  - Rear Panels72
- Mounting74
- Default Zones, Interfaces, and Ports79
- Stopping the Zyxel Device81
Chapter 4 Easy Mode82
- Overview82
- Initial Setup Wizard - Language and Overview87
- Initial Setup Wizard - Security Service99
- Initial Setup Wizard - Port Forwarding101
- Initial Setup Wizard - Guest LAN102
  - Connecting AP Scenarios104
- Initial Setup Wizard - VPN106
- VPN Settings for Configuration Provisioning Wizard: Wizard Type117
- VPN Settings for L2TP VPN Settings Wizard129
- Port Forwarding133
- Wi-Fi and Guest Network Wizard135
  - Guest LAN (Wired Network)136
  - Connecting AP Scenarios138
- Security Service Wizard139
- Myzyxel Portal146
- One Security Portal147
- Easy Mode82
Chapter 5 Quick Setup Wizards149
- Quick Setup Overview149
- WAN Interface Quick Setup150
- VPN Setup Wizard156
- VPN Settings for Configuration Provisioning Wizard: Wizard Type167
- VPN Settings for L2TP VPN Settings Wizard177
Chapter 6 Dashboard182
- Overview182
  - What You Can Do in this Chapter182
- Main Dashboard Screen182
Part II: Technical Reference195
Chapter 7 Monitor196
- Overview196
  - What You Can Do in this Chapter196
- The Port Statistics Screen198
  - The Port Statistics Graph Screen199
- Interface Status Screen200
- The Traffic Statistics Screen204
- The Session Monitor Screen207
- IGMP Statistics209
- The DDNS Status Screen210
- IP/MAC Binding210
- The Login Users Screen211
- The Dynamic Guest Screen212
- Cellular Status Screen214
  - More Information216
- The Upnp Port Status Screen217
- USB Storage Screen218
- Ethernet Neighbor Screen219
- FQDN Object Screen220
- AP Information: AP List222
  - AP List: more Information224
  - AP List: Config AP227
- AP Information: Radio List228
  - Radio List: more Information230
- AP Information: Top N Aps231
- AP Information: Single AP233
- Zymesh234
- SSID Info234
- Station Info: Station List235
- Station Info: Top N Stations236
- Station Info: Single Station237
- Detected Device238
- The Printer Status Screen239
- The Secudeployer Monitor Screen239
  - Device Information (for Zyxel Device Server)240
  - Device Information (for Zyxel Device Client)242
- The Ipsec Screen244
- The SSL Screen245
- The L2TP over Ipsec Screen246
- The App Patrol Screen247
- The Content Filter Screen248
- The IDP Screen250
- The Anti-Virus Screen252
- The Anti-Spam Screens254
  - Anti-Spam Summary254
  - The Anti-Spam Status Screen256
- The SSL Inspection Screens258
  - Certificate Cache List259
- Log Screens260
  - View Log260
  - View AP Log262
  - Dynamic Users Log264
Chapter 8 Licensing266
- Registration Overview266
- Signature Update269
Chapter 9 Wireless273
- Overview273
  - What You Can Do in this Chapter273
- Controller Screen273
- AP Management Screens274
- Rogue AP288
  - Add/Edit Rogue/Friendly List290
- Auto Healing291
- RTLS Overview292
- Technical Reference294
  - Dynamic Channel Selection294
  - Load Balancing295
Chapter 10 Interfaces296
- Interface Overview296
- Port Role301
- Port Configuration302
- Port Group303
- Ethernet Summary Screen304
- PPP Interfaces331
  - PPP Interface Summary331
  - PPP Interface Add or Edit333
- Cellular Configuration Screen338
  - Cellular Choose Slot341
  - Add / Edit Cellular Configuration341
- Tunnel Interfaces347
  - Configuring a Tunnel349
  - Tunnel Add or Edit Screen350
- VLAN Interfaces353
  - VLAN Summary Screen355
  - VLAN Add/Edit356
- Bridge Interfaces368
  - Bridge Summary370
  - Bridge Add/Edit371
- Lag382
  - LAG Summary Screen382
  - LAG Add/Edit384
- Vti389
- Trunk Overview394
  - What You Need to Know394
- The Trunk Summary Screen397
  - Configuring a User-Defined Trunk398
  - Configuring the System Default Trunk400
- Interface Technical Reference401
- Interfaces296
Chapter 11 Routing406
- Policy and Static Routes Overview406
  - What You Can Do in this Chapter406
  - What You Need to Know407
- Policy Route Screen408
  - Policy Route Edit Screen411
- IP Static Route Screen415
  - Static Route Add/Edit Screen415
- Policy Routing Technical Reference417
- Routing Protocols Overview417
  - What You Need to Know418
- The RIP Screen418
- The OSPF Screen420
- BGP (Border Gateway Protocol)427
- Ddns433
- Routing406
Chapter 12 DDNS433
- DDNS Overview433
  - What You Can Do in this Chapter433
  - What You Need to Know433
- The DDNS Screen434
  - The Dynamic DNS Add/Edit Screen435
Chapter 13 NAT439
- The NAT Screen440
  - The NAT Add/Edit Screen442
- NAT Technical Reference445
- Nat439
  - NAT Overview439
    - What You Can Do in this Chapter439
    - What You Need to Know439
Chapter 14 Redirect Service447
- Overview447
- The Redirect Service Screen450
  - The Redirect Service Edit Screen451
- Redirect Service447
- Alg453
Chapter 15 ALG453
- ALG Overview453
  - What You Need to Know453
  - Before You Begin456
- The ALG Screen456
- ALG Technical Reference458
Chapter 16 Upnp460
- Upnp and NAT-PMP Overview460
- What You Need to Know460
  - NAT Traversal460
  - Cautions with Upnp and NAT-PMP461
- Upnp Screen461
- Technical Reference462
Chapter 17 IP/MAC Binding475
- IP/MAC Binding Overview475
  - What You Can Do in this Chapter475
  - What You Need to Know475
- IP/MAC Binding Summary476
  - IP/MAC Binding Edit476
  - Static DHCP Edit477
- IP/MAC Binding Exempt List478
- IP/MAC Binding475
Chapter 18 Layer 2 Isolation480
- Overview480
  - What You Can Do in this Chapter480
- Layer-2 Isolation General Screen480
- White List Screen481
  - Add/Edit White List Rule482
- Layer 2 Isolation480
Chapter 19 DNS Inbound LB484
- DNS Inbound Load Balancing Overview484
  - What You Can Do in this Chapter484
- The DNS Inbound LB Screen485
  - The DNS Inbound LB Add/Edit Screen486
  - The DNS Inbound LB Add/Edit Member Screen488
- DNS Inbound LB484
Chapter 20 Web Authentication490
- Web Auth Overview490
  - What You Can Do in this Chapter490
  - What You Need to Know491
- Web Authentication General Screen491
- SSO Overview511
- SSO - Zyxel Device Configuration512
- SSO Agent Configuration518
- Web Authentication490
Chapter 21 Hotspot522
- Overview522
- Billing Overview522
  - What You Need to Know522
- The Billing > General Screen523
- The Billing > Billing Profile Screen525
- The Billing > Discount Screen532
  - The Discount Add/Edit Screen534
- The Billing > Payment Service Screen534
  - The Payment Service > Desktop / Mobile View Screen536
- Hotspot522
Chapter 22 Printer Manager540
- Printer Manager Overview540
  - What You Can Do in this Chapter540
- The Printer Manager > General Screen540
- The Printout Configuration Screen547
- Printer Reports Overview548
- Printer Manager540
Chapter 23 Free Time552
- Free Time Overview552
  - What You Can Do in this Chapter552
- The Free Time Screen552
- Free Time552
Chapter 24 Ipnp557
- Ipnp Overview557
  - What You Can Do in this Chapter558
  - Ipnp Screen558
Chapter 25 Walled Garden560
- Walled Garden Overview560
- Walled Garden > General Screen560
- Walled Garden > URL Base Screen561
  - Adding/Editing a Walled Garden URL562
- Walled Garden > Domain/Ip Base Screen563
  - Adding/Editing a Walled Garden Domain or IP564
  - Walled Garden Login Example564
- Walled Garden560
- Advertisement Screen566
Chapter 26 Advertisement Screen566
- Advertisement Overview566
  - Adding/Editing an Advertisement URL567
Chapter 27 Security Policy569
- Overview569
- One Security570
- What You Can Do in this Chapter573
  - What You Need to Know574
- The Security Policy Screen575
  - Configuring the Security Policy Control Screen576
  - The Security Policy Control Add/Edit Screen579
- Anomaly Detection and Prevention Overview581
- The Session Control Screen590
  - The Session Control Add/Edit Screen591
- Security Policy Example Applications592
- Cloud CNM595
- Security Policy569
Chapter 28 Cloud CNM595
- Cloud CNM Overview595
  - What You Can Do in this Chapter595
- Cloud CNM Secumanager595
- Cloud CNM Secureporter598
- Amazon VPC603
Chapter 29 Amazon VPC603
- Overview603
- Amazon VPC Configuration Process603
Chapter 30 Ipsec VPN605
- Virtual Private Networks (VPN) Overview605
- The VPN Connection Screen610
  - The VPN Connection Add/Edit Screen612
- The VPN Gateway Screen619
  - The VPN Gateway Add/Edit Screen620
- VPN Concentrator627
- Zyxel Device Ipsec VPN Client Configuration Provisioning629
- Ipsec VPN Background Information631
- Ipsec VPN605
Chapter 31 SSL VPN641
- Overview641
  - What You Can Do in this Chapter641
  - What You Need to Know641
- The SSL Access Privilege Screen642
  - The SSL Access Privilege Policy Add/Edit Screen643
- The SSL Global Setting Screen646
  - How to Upload a Custom Logo647
- Zyxel Device Secuextender648
  - Example: Configure Zyxel Device for Secuextender649
- SSL User Screens652
- Ssl Vpn641
Chapter 32 SSL User Screens652
- Overview652
  - What You Need to Know652
- Remote SSL User Login653
- The SSL VPN User Screens655
- Bookmarking the Zyxel Device655
- Logging out of the SSL VPN User Screens656
- SSL User Application Screen656
- SSL User File Sharing657
- Secuextender Screen662
  - Installing the Secuextender Client662
Chapter 33 Zyxel Device Secuextender (Windows)665
- The Zyxel Device Secuextender Icon665
- Status665
- View Log666
- Suspend and Resume the Connection667
- Stop the Connection667
- Uninstalling the Zyxel Device Secuextender667
Chapter 34 L2TP VPN669
- Overview669
  - What You Can Do in this Chapter669
  - What You Need to Know669
- L2TP VPN Screen670
  - Example: L2TP and Zyxel Device Behind a NAT Router672
- L2Tp Vpn669
Chapter 35 BWM (Bandwidth Management)674
- Overview674
  - What You Can Do in this Chapter674
  - What You Need to Know674
- The Bandwidth Management Configuration678
  - The Bandwidth Management Add/Edit Screen681
- Application Patrol689
Chapter 36 Application Patrol689
- Overview689
  - What You Can Do in this Chapter689
  - What You Need to Know689
- Application Patrol Profile690
  - The Application Patrol Profile Add/Edit Screen692
  - The Application Patrol Profile Rule Add Application Screen693
Chapter 37 Content Filtering695
- Overview695
- Content Filter Profile Screen697
  - Content Filter Add Profile Category Service699
  - Content Filter Add Filter Profile Custom Service707
- Content Filter Trusted Web Sites Screen710
- Content Filter Forbidden Web Sites Screen711
- Content Filter Technical Reference712
- Content Filtering695
Chapter 38 IDP714
- The IDP Profile Screen715
- IDP Custom Signatures726
- IDP Technical Reference736
- Idp714
  - Overview714
- Anti-Virus739
Chapter 39 Anti-Virus739
- Overview739
  - What You Can Do in this Chapter741
- Anti-Virus Profile Screen741
  - Anti-Virus Profile Add or Edit743
- Anti-Virus Black List745
  - Anti-Virus Black List or White List Add/Edit746
  - Anti-Virus Black/White List747
- AV Signature Searching748
- Anti-Virus Technical Reference749
- Anti-Spam751
Chapter 40 Anti-Spam751
- Overview751
  - What You Can Do in this Chapter751
  - What You Need to Know751
- Before You Begin752
- The Anti-Spam Profile Screen753
  - The Anti-Spam Profile Add or Edit Screen754
- The Mail Scan Screen756
- The Anti-Spam Black List Screen758
  - The Anti-Spam Black or White List Add/Edit Screen760
  - Regular Expressions in Black or White List Entries761
- The Anti-Spam White List Screen761
- The DNSBL Screen763
- Anti-Spam Technical Reference765
Chapter 41 SSL Inspection769
- Overview769
- The SSL Inspection Profile Screen770
  - Add / Edit SSL Inspection Profiles771
- Exclude List Screen773
- Certificate Update Screen775
- Install a CA Certificate in a Browser776
- SSL Inspection769
Chapter 42 Device HA778
- Device HA Overview778
  - Device HA and Device HA Pro Differences778
  - What You Can Do in These Screens779
- Device HA General779
  - Before You Begin780
- The Device HA Screen782
- Device HA > Device HA Pro791
  - Deploying Device HA Pro791
  - Configuring Device HA Pro792
- Device HA778
Chapter 43 Object794
- Zones Overview794
  - What You Need to Know794
  - The Zone Screen795
- Object794
- User/Group Overview797
- AP Profile Overview811
  - Radio Screen812
  - SSID Screen818
- MON Profile827
- Zymesh Overview831
  - Zymesh Profile833
  - Add/Edit Zymesh Profile834
- Application834
  - Add Application Rule837
  - Application Group Screen839
- Address/Geo IP Overview841
- Service Overview850
- Schedule Overview855
- AAA Server Overview860
- Auth. Method Overview869
Chapter 44 System906
- Overview906
  - What You Can Do in this Chapter906
- Host Name907
- USB Storage907
- Date and Time908
  - Pre-Defined NTP Time Servers List911
  - Time Server Synchronization911
- Console Port Speed912
- DNS Overview913
- WWW Overview922
- Ssh940
- Telnet945
  - Configuring Telnet945
- Ftp946
  - Configuring FTP946
- Snmp947
- Authentication Server952
  - Add/Edit Trusted RADIUS Client954
- Notification > Mail Server954
- Notification > SMS956
- Language Screen957
- Ipv6 Screen958
- Zyxel One Network (ZON) Utility958
- System906
Chapter 45 Log and Report964
- Overview964
  - What You Can Do in this Chapter964
- Email Daily Report964
- Log Setting Screens966
- Log and Report964
Chapter 46 File Manager982
- Overview982
  - What You Can Do in this Chapter982
  - What You Need to Know982
- The Configuration File Screen984
- Firmware Management988
- The Shell Script Screen993
- File Manager982
Chapter 47 Diagnostics996
- Overview996
  - What You Can Do in this Chapter996
- The Diagnostics Screens996
- The Packet Capture Screen1000
  - The Packet Capture on AP Screen1002
  - The Packet Capture Files Screen1005
- The CPU / Memory Status Screen1006
- The System Log Screen1008
- The Remote Assistance Screen1009
- The Network Tool Screen1010
- The Routing Traces Screen1013
- The Wireless Frame Capture Screen1014
  - The Wireless Frame Capture Files Screen1016
- Diagnostics996
Chapter 48 Packet Flow Explore1017
- Overview1017
  - What You Can Do in this Chapter1017
- The Routing Status Screen1017
- The SNAT Status Screen1022
- Packet Flow Explore1017
Chapter 49 Shutdown1025
- Overview1025
  - What You Need to Know1025
- The Shutdown Screen1025
- Shutdown1025
Chapter 50 Troubleshooting1026
- Resetting the Zyxel Device1038
- Getting more Troubleshooting Help1039
- Troubleshooting1026
Appendix A Customer Support1040
Appendix B Common Services1046
Appendix C Product Features1049
Appendix D Legal Information1055
Index1069

ZyXEL Communications USG60W - One Security

Table of Contents

Other manuals for ZyXEL Communications USG60W

Related product manuals