Chapter 29 Secure Policy
ZyWALL Series CLI Reference Guide
232
automatic backup when a secure policy was added or changed. Type apply backup-2017-12-13-
13-34-49.conf to restore secure policy configuration to what it was before that change.
The following command displays Fail if HTTP, HTTPS and SSL traffic can access to your Zyxel Device from
any IPv4 source on the WAN.
The following command displays OK if HTTP, HTTPS and SSL traffic can access to your Zyxel Device only
from specified IPv4 sources on the WAN.
Accessing the Zyxel Device from the WAN
This is an example of configuring security policy settings to allow access to the Zyxel Device from the
WAN without deactivating the security policies.
1 Check the Security Policy status. Make sure the Zyxel Device Security Policy is activated to keep your
network safe.
2 Enter the Default_Allow_WAN_To_ZyWALL service group sub-command mode.
Router(config)# secure-policy backup activate
Router(config)# show secure-policy backup status
secure-policy backup status: yes
Router(config)# dir /conf/
File Name Size Modified Time
================================================
system-default.conf 70098 2017-11-03 18:02:19
startup-config.conf 76090 2017-12-13 13:34:49
lastgood.conf 74763 2017-11-23 16:24:54
startup-config-bad.conf 31999 2017-11-03 18:52:14
411AAPH0Preb1-r58726-2015-04-14-06-03-07.conf 22733 2015-04-14 14:03:07
autobackup-0.00.conf 27782 2016-12-29 10:51:50
420AAPH0b4s2-2016-12-29-02-46-53.conf 27782 2016-12-29 10:46:53
425AAPH0b2-2017-05-22-06-28-12.conf 28815 2017-05-22 14:28:12
autobackup-4.25.conf 28815 2017-05-22 14:31:16
430AAPH0b1s1-2017-07-20-08-44-45.conf 29538 2017-07-20 16:44:45
autobackup-4.30.conf 31999 2017-11-03 18:04:22
430AAPH0b2-2017-08-22-06-09-32.conf 30484 2017-08-22 14:09:32
430AAPH0b3-2017-11-03-10-01-27.conf 31999 2017-11-03 18:01:27
backup-2017-12-13-13-34-49.conf 75733 2017-12-13 13:34:49
Router# show secure-policy _check-exposed-srv
HTTPS-HTTP: Fail
SSLVPN: Fail
Router# show secure-policy status
secure-policy status: yes
secure-policy asymmetrical route status: no
secure-policy default rule: deny, log
secure-policy tcp flag detect: yes
To Next Page
Loading...
