ZyXEL Communications ZYWALL 35 - Support Notes Manual

ZyXEL Communications ZYWALL 35

335 pages

To Next Page

To Next Page

Loading...

ZyWALL 35

Security Appliance

Support Notes

Version 4.03

Sep. 2007

Table of Contents

Table of Contents2
Application Notes12
Seamless Incorporation into Your Network12
- Using Transparent (Bridge Mode) Firewall12
- Internet Connection17
- DHCP Server/Client/Relay + Flexible Port Role Configuration19
- Using Nat/Multi-NAT23
Optimize Network Performance & Availability33
- Using Dual WAN / Load Balancing and Policy Route33
  - Using Dual WAN34
    - WAN Backup (Active/Passive Mode)34
    - Load Balancing (Active/Active Mode)43
  - Using Policy Route52
- Using Bandwidth Management53
Secure Connections Across the Internet67
- Site-To-Site VPN (Intranet) Scenario67
- Zywall Vs 3Rd Party VPN Gateway155
- Remote Access VPN Scenario227
  - Using Xauth for User Authentication228
  - Zyxel VPN Client to Zywall Tunneling230
- Flexible Wireless Connection and Security239
  - Deploy the Zywall WLAN Security Policy240
Threat Management244
- To Protect Computer Networks against Virus Intrusions and Attacks from Internet245
- To Control IM/P2P Applications Usage to Increase Employee Productivity251
- To Filter Non-Work Related and Unproductive Web Surfing to Mitigate Spyware and Phishing Threats256
- To Eliminate Spam Mails to Block Unwanted Messages Everyday266
Threat Reports271
Centralized Management276
- Using Vantage CNM for Management276
A. Product FAQ281
- A01. What Is the Zywall Internet Access Sharing Router281
- A02. will the Zywall Work with My Internet Connection281
- A03. What Do I Need to Use the Zywall281
- A04. What Is Pppoe281
- A05. Does the Zywall Support Pppoe282
- A07. Why Does My Internet Service Provider Use Pppoe282
- A08. How Can I Configure the Zywall282
- A09. What Can We Do with Zywall282
- A10. Does Zywall Support Dynamic IP Addressing282
- A11. What Is the Difference between the Internal IP and the Real IP from My ISP282
- A12. How Does E-Mail Work through the Zywall283
- A13. Is It Possible to Access a Server Running Behind NAT from the Outside Internet? if Possible, How283
- A14. What DHCP Capability Does the Zywall Support283
- A15. What Are the Capability of Wireless Feature of Zywall283
- A16. What Is the Coverage Range of Wireless in Zywall283
- A20. Can the Zywall Support TFTP over WAN284
  - A21. How Can I Upload Data to Outside Internet over the One-Way Cable284
  - A22. My Zywall Can Not Get an IP Address from the ISP to Connect to the Internet, What Can I Do284
- A23. What Is BOOTP/DHCP285
- A24. What Is DDNS285
- A25. When Do I Need DDNS Service286
- A26. What DDNS Servers Does the Zywall Support286
- A27. What Is DDNS Wildcard286
- A28. Does the Zywall Support DDNS Wildcard286
  - A29. Can the Zywall NAT Handle Ipsec Packets Sent by the VPN Gateway Behind Zywall286
  - A30. How Do I Setup My Zywall for Routing Ipsec Packets over NAT286
- A31. What Is STP (Spanning Tree Protocol) /RSTP (Rapid STP)287
- A32. What Is the Flow Zywall Handles Inbound and Outgoing Traffic287
- A35. What Are the Key New Features of Zywall UTM288
B01. Which Zywall Models Are Eligible to be Upgraded to Run Zynos V4.01288
B. Firmware Upgrade FAQ288
- B02. Why It's Conditional to Upgrade to Zynos V4.01 for Zywall 70289
- B03. What Is Zynos V3.65 for Zywall 70289
- B04. What Happens if I Wrongfully Upgrade Firmware of a Zywall 70 with Only 32MB of RAM to Zynos V4.01 Directly289
- And Zywall 35290
- Joining Your Zywall 70 Trade-In Promotion290
  - B11. What's the Downgrade Procedure of Zywall 70 Running Zynos V4.01291
  - B12. Can I Downgrade a Zywall 5 or Zywall 35 Running Zynos V4.01 Back to Zynos V3.64 (or Below)291
C. Turbo Card FAQ291
- C02. Except Zywall Turbo Card Is a Must When Use AV+IDP Service What Exactly I Can Get Benefit from It292
- Zynos V4.01? if Not, When Must I Insert a Zywall Turbo Card into My Zywall Device292
D. Firewall FAQ292
- D01. What Is a Network Firewall292
- D02. What Makes Zywall Secure292
- D03. What Are the Basic Types of Firewalls293
- D04. What Kind of Firewall Is the Zywall293
- D05. Why Do You Need a Firewall When Your Router Has Packet Filtering and NAT Built-In294
- D06. What Is Denials of Service (Dos)Attack294
- D07. What Is Ping of Death Attack294
- D08. What Is Teardrop Attack294
- D09. What Is SYN Flood Attack295
- D10. What Is LAND Attack295
- D11. What Is Brute-Force Attack295
- D12. What Is IP Spoofing Attack295
- D13. What Are the Default ACL Firewall Rules in Zywall295
- D14. in Zywall, Is DMZ Behind NAT or Not296
- D15. Can I Use both Public and Private IP Addresses on DMZ296
- Zywall296
- D17. How Can I Protect against IP Spoofing Attacks298
E. Security Service Licenses FAQ299
- E01. What Is Icard299
- E02. Where Can I Buy the Icard and How Much Does It Cost299
- E03. How Many Kinds of Icard Does Zyxel Provide299
- E04. Is each Type of Icard Device Specific299
- E05. What Are the Available Security Service Licenses Which Require Additional Purchase and License Activation in Zynos V4.01299
- E06. What Kind of Icard Should I Buy300
F. Security Service Activation and Updatefaq301
- F01. Why Do I Have to Register301
- F02. in Addition to Registration, What Can I Do with Myzyxel.com301
- F07. What Is Mysecurityzone303
- F08. What Is Update Server303
- F10. What's the URL for These Service Portals304
G. Anti-Virus FAQ304
- Deployed the Anti-Virus Software on each Desktop/Laptop304
- G06. How Do I Keep Signatures of AV+IDP Service Updated305
- H06. How Do I Keep Signatures of AV+IDP Service Updated307
  - H07. How Often Does Zyxel Release Signatures of AV+IDP Security Service307
  - Scanned by Anti-Virus, IDP and Anti-Spam Feature in Zywall Zynos V4.0307
I01. What's the Difference between Gateway Anti-Spam and Client-Based Anti-Spam Filter such as Microsoft Outlook's307
I. Anti-Spam FAQ307
- And the Email Receiver Already Got a Part of the Contaminated File in Her/His Laptop or Desktop308
- I03. What Happens When an Email with Large Attachment in Size, E.g 5MB, Is Downloaded Which Has Virus in It308
- Scanned by Anti-Virus, IDP and Anti-Spam Feature in Zywall Zynos V4.0308
- I06. in Zywall's Anti-Spam Feature, What's Your Recommendation to Handle Identified Spam Emails309
- I07. What's the Specification of Anti-Spam Feature in Zynos V4.01309
- I08. How Do I Keep Signatures of Anti-Spam Service Update309
  - J03. Can I Specify the Time out Value of the Query Response from Bluecoat Data Center310
  - J04. Can I Decide Whether to Forward or Drop the HTTP Response if the Query to Bluecoat Data Center Is Timed out310
- J05. How to Register for Bluecoat Service310
- J06. Why Can't I Make Registration Successfully310
- J07. What Services Can I Get with Trial Registration311
- J08. What Types of Content Filter Does Zywall Provide311
- J09. What Are the Primary Features of Zyxel Content Filtering311
  - J10. Who Needs Zyxel Content Filtering? Is Zyxel Content Filtering for Small Companies or for Large Corporations311
  - J11. Can I Have Different Policies in Effect for Different Times of the Day or Week312
- J12. How Many Policies Can I Create312
- J13. Can I Create My Own Categories312
- J14. Can I Override (Block or Allow) Certain Urls Regardless of the Rating312
- J15. How Many URL Keywords Does Zywall Support312
- J16. How Do I Keep Database of Content Filtering Service Updated312
- J17. What Is Bluecoat Filter List312
- J18. How Many Ratings Does the Bluecoat Database Contain312
- J19. How Often Does Bluecoat Update the Database313
- J20. How Do I Locate Sites to Block313
- J21. Do Humans Review the Ratings313
- J22. How Can I Do if I Find a WEB Site Is Mis-Categorized314
- J23. How Many and What Categories Do You Provide314
  - J24. How Does the Zyxel Content Filtering Handle Dynamically Generated Sites315
  - J25. Does Bluecoat Have more than One Data Center? Is the Bluecoat Web Filter Geographically Load Balanced316
- J26. Who Can Generate and View Reports on Bluecoat WEB Site316
- J27. How Can I Get Content Filtering Report316
- J28. Can I Change the Password for Bluecoat Service316
- J30. My Device Can't Get Connected to Http://Myzyxel.com, so I Can't Get into Registration Page. What Should I Check317
- J02. How Many Entries Can the Cache of Web Site Auto Categorization Keep at most310
- J01. What's the Operation between Zyxel Appliance and Bluecoat Data Center310
J. Content Filter FAQ310
K. Ipsec FAQ317
- K01. How Many VPN Tunnels Are Supported on Zywall317
- K02. How to Count My VPN Tunnels on Zywall318
- K03. What Is VPN318
- K05. What Are most Common VPN Protocols319
- K06. What Is PPTP319
- K07. What Is L2TP319
- K08. What Is Ipsec320
- K10. What Is Pre-Shared Key320
- K12. What Are Local ID and Peer ID321
- K13. Is My Zywall Ready for Ipsec VPN322
- K14. How Do I Configure Zywall VPN322
- K15. What VPN Protocols Are Supported by Zywall322
- K16. What Types of Encryption Does Zywall VPN Support322
- K17. What Types of Authentication Does Zywall VPN Support322
K19. Does Zywall Support Dynamic Secure Gateway IP323
- K20. What VPN Gateway that Has Been Tested with Zywall Successfully323
- K21. What VPN Software that Has Been Tested with Zywall Successfully324
K22. will Zyxel Support Secure Remote Management324
K23. Does Zywall VPN Support Netbios Broadcast324
K24. Is the Host Behind NAT Allowed to Use Ipsec324
K25. How Do I Configure Zywall with NAT for Internal Servers325
Need to Know325
K27. Where Can I Configure Phase 1 ID in Zywall325
K29. Single, Range, Subnet, Which Types of IP Address Does Zywall Support in Vpn/Ipsec326
K28. How Can I Keep a Tunnel Alive326
K30. Does Zywall Support Ipsec Pass-Through326
- Scanned by Anti-Virus, IDP and Anti-Spam Feature in Zywall Zynos V4.0327
- K31. Can Zywall Behave as a NAT Router Supporting Ipsec Pass through and an Ipsec Gateway Simultaneously327
L01. Basic Cryptography Concept327
L02. What Is PKI328
L03. What Are the Security Services PKI Provides328
L04. What Are the Main Elements of a PKI328
L05. What Is a Certification Authority329
L06. What Is a Digital Certificate329
L09. How Does a PKI Ensure Data Confidentiality330
L10. What Is a Digital Signature330
L11. How Does a Digital Signature Work330
L12. Does Zyxel Provide CA Service331
- L13. What if Customers Don't Have Access to CA Service, but Would Like to Use PKI Function332
- L14. How Can I Have Self-Signed Certificate for Zyxel Appliance332
- L18. What Can I Do Prior to Reset Appliance's Configuration332
- M01. How Do Zywalls Dispatch Outgoing Sessions to Different WAN Connections333
- M02. Can Zywall Support VPN Load Balancing333
N01. How Many Class Can I Create in Zywall Bandwidth Management Class Tree? And, What Is the Max Depth of a Class333
M. Dual WAN Auto Fail-Over/Fail-Back and Load Balance FAQ333
N. Bandwidth Management FAQ333
O. Wireless FAQ334
- O01. Which Wireless Cards Does It Support in Zywall 5/35/70334
- O02. Which Wireless Security Option Can I Use While Using Related Wireless Cards334

Other manuals for ZyXEL Communications ZYWALL 35

User Guide872 pages

Quick Start Guide142 pages

Specifications2 pages

Related product manuals

ZyXEL Communications ZyWALL 310

Preview: ZyXEL Communications ZyWall

ZyXEL Communications ZyWall

Preview: ZyXEL Communications ZYWALL 5

ZyXEL Communications ZYWALL 5

Preview: ZyXEL Communications ZyWall 110

ZyXEL Communications ZyWall 110

Preview: ZyXEL Communications ZyWALL 1100

ZyXEL Communications ZyWALL 1100

Preview: ZyWALL 2 Plus

Preview: ZyWALL USG-Series

ZyWALL USG-Series

Preview: ZyWall ATP series

ZyWall ATP series

Preview: ZyXEL Communications 310

ZyXEL Communications 310

Preview: ZyXEL Communications USG60

ZyXEL Communications USG60

ZyXEL Communications ATP800

ZyXEL Communications VPN Series