ZyXEL Communications ZYWALL 35 - Figure 560 Headquarters Gateway Policy Edit

To Next Page

To Previous Page

Appendix I VPN Setup

ZyWALL 5/35/70 Series User’s Guide

837

Figure 560 Headquarters Gateway Policy Edit

The IP address of

the branch office

IPSec router.

Main Page

About this User's Guide3
Document Conventions4
Safety Warnings6
Contents Overview9
- Table of Contents9
Table of Contents11
List of Figures31
List of Tables45
Introduction53
PART I Introduction53
Chapter 1 Getting to Know Your Zywall55
- Zywall Internet Security Appliance Overview55
- Zywall Features55
- Ways to Manage the Zywall56
- Good Habits for Managing the Zywall56
- Table 1 Zywall Model Specific Features56
- Applications for the Zywall57
Chapter 2 Introducing the Web Configurator61
- Web Configurator Overview61
- Accessing the Zywall Web Configurator61
- Figure 7 Change Password Screen62
- Figure 8 Replace Certificate Screen62
- Resetting the Zywall63
- Navigating the Zywall Web Configurator64
- Wizard Setup87
Chapter 3 Wizard Setup87
- Wizard Setup Overview87
- Figure 18 Wizard Setup Welcome87
- Internet Access88
  - ISP Parameters88
  - Figure 19 ISP Parameters: Ethernet Encapsulation88
  - Table 12 ISP Parameters: Ethernet Encapsulation88
  - Figure 20 ISP Parameters: Pppoe Encapsulation89
  - Table 13 ISP Parameters: Pppoe Encapsulation90
  - Figure 21 ISP Parameters: PPTP Encapsulation91
  - Table 14 ISP Parameters: PPTP Encapsulation91
  - Internet Access Wizard: Second Screen92
  - Figure 22 Internet Access Wizard: Second Screen92
  - Internet Access Wizard: Registration93
  - Figure 23 Internet Access Setup Complete93
  - Figure 24 Internet Access Wizard: Registration93
  - Internet Access Wizard: Status94
  - Figure 25 Internet Access Wizard: Registration in Progress94
  - Table 15 Internet Access Wizard: Registration94
  - Internet Access Wizard: Service Activation95
  - Figure 26 Internet Access Wizard: Status95
  - Figure 27 Internet Access Wizard: Registration Failed95
  - Figure 28 Internet Access Wizard: Registered Device95
- VPN Wizard Gateway Setting96
- Figure 29 Internet Access Wizard: Activated Services96
- Figure 30 VPN Wizard: Gateway Setting96
- Table 16 VPN Wizard: Gateway Setting96
- VPN Wizard Network Setting97
- Figure 31 VPN Wizard: Network Setting98
- Table 17 VPN Wizard: Network Setting98
- VPN Wizard IKE Tunnel Setting (IKE Phase 1)99
- Figure 32 VPN Wizard: IKE Tunnel Setting99
- VPN Wizard Ipsec Setting (IKE Phase 2)100
- Table 18 VPN Wizard: IKE Tunnel Setting100
- Figure 33 VPN Wizard: Ipsec Setting101
- Table 19 VPN Wizard: Ipsec Setting101
- VPN Wizard Status Summary102
- Figure 34 VPN Wizard: VPN Status102
- Table 20 VPN Wizard: VPN Status103
- VPN Wizard Setup Complete104
- Anti-Spam Wizard: Email Server Location Setting104
- Figure 35 VPN Wizard Setup Complete104
- Anti-Spam Wizard: Direction Recommendations105
- Figure 36 Anti-Spam Wizard: Email Server Location Setting105
- Table 21 Anti-Spam Wizard: Email Server Location Setting105
- Anti-Spam Wizard: Direction Configuration106
- Figure 37 Anti-Spam Wizard: Direction Recommendations106
- Figure 38 Anti-Spam Wizard: Direction Configuration107
- Table 22 Anti-Spam Wizard: Direction Configuration107
- Anti-Spam Wizard: Setup Complete108
- Figure 39 Anti-Spam Wizard: Setup Complete108
Chapter 4 Tutorials109
- Dynamic VPN Rule Configuration109
- Security Settings for VPN Traffic119
- Firewall Rule for VPN Example122
- How to Set up a 3G WAN Connection130
- Configuring Load Balancing132
- Figure 63 Tutorial: Home132
- Configuring Content Filtering133
- Registration141
Chapter 5 Registration141
- Myzyxel.com Overview141
  - Subscription Services Available on the Zywall141
- Registration142
- Figure 75 REGISTRATION143
- Table 24 REGISTRATION143
- Service144
- Figure 76 REGISTRATION: Registered Device144
- Figure 77 REGISTRATION > Service145
- Table 25 REGISTRATION > Service145
Network147
Part II: Network147
Chapter 6 LAN Screens149
- LAN, WAN and the Zywall149
- IP Address and Subnet Mask149
  - Figure 78 LAN and WAN149
  - Private IP Addresses150
- Dhcp151
  - IP Pool Setup151
- RIP Setup151
- Multicast151
- Wins152
- Lan152
- Figure 79 NETWORK > LAN153
- Table 26 NETWORK > LAN153
- LAN Static DHCP155
- LAN IP Alias156
- Figure 80 NETWORK > LAN > Static DHCP156
- Table 27 NETWORK > LAN > Static DHCP156
- Figure 81 Physical Network & Partitioned Logical Networks157
- Figure 82 NETWORK > LAN > IP Alias157
- LAN Port Roles158
- Table 28 NETWORK > LAN > IP Alias158
- Figure 83 NETWORK > LAN > Port Roles159
- Figure 84 Port Roles Change Complete159
- Table 29 NETWORK > LAN > Port Roles159
- Bridge Screens161
Chapter 7 Bridge Screens161
- Bridge Loop161
- Figure 85 Bridge Loop: Bridge Connected to Wired LAN161
- Spanning Tree Protocol (STP)162
- Bridge163
- Table 31 STP Port States163
- Figure 86 NETWORK > Bridge164
- Table 32 NETWORK > Bridge164
- Bridge Port Roles165
- Figure 87 NETWORK > Bridge > Port Roles166
- Figure 88 Port Roles Change Complete166
- Table 33 NETWORK > Bridge > Port Roles166
- WAN Screens167
Chapter 8 WAN Screens167
- WAN Overview167
- Multiple WAN167
- Load Balancing Introduction168
- Load Balancing Algorithms168
  - Least Load First168
  - Weighted Round Robin169
  - Figure 89 Least Load First Example169
  - Table 34 Least Load First: Example 1169
  - Table 35 Least Load First: Example 2169
  - Spillover170
  - Figure 90 Weighted Round Robin Algorithm Example170
  - Figure 91 Spillover Algorithm Example170
- WAN Interface to Local Host Mapping Timeout171
- Figure 92 Incorrect WAN IP171
- TCP/IP Priority (Metric)172
- WAN General172
- Figure 93 NETWORK > WAN (General)173
- Table 36 NETWORK > WAN (General)174
- Configuring Load Balancing176
  - Least Load First176
  - Figure 94 Load Balancing: Least Load First176
  - Table 37 Load Balancing: Least Load First176
  - Weighted Round Robin177
  - Figure 95 Load Balancing: Weighted Round Robin177
  - Table 38 Load Balancing: Weighted Round Robin177
  - Spillover178
  - Figure 96 Load Balancing: Spillover178
  - Table 39 Load Balancing: Spillover178
- WAN IP Address Assignment179
- DNS Server Address Assignment179
- Table 40 Private IP Address Ranges179
- WAN MAC Address180
- Wan180
  - WAN Ethernet Encapsulation180
  - Figure 97 NETWORK > WAN > WAN (Ethernet Encapsulation)181
  - Table 41 NETWORK > WAN > WAN (Ethernet Encapsulation)181
  - Pppoe Encapsulation183
  - Figure 98 NETWORK > WAN > WAN (Pppoe Encapsulation)184
  - Table 42 NETWORK > WAN > WAN (Pppoe Encapsulation)184
  - PPTP Encapsulation186
  - Figure 99 NETWORK > WAN > WAN (PPTP Encapsulation)187
  - Table 43 NETWORK > WAN > WAN (PPTP Encapsulation)187
- Wan2)189
- Table 44 2G, 2.5G, 2.75G, 3G and 3.5G Wireless Technologies190
- Figure 100 NETWORK > WAN > 3G (WAN 2)191
- Table 45 NETWORK > WAN > 3G (WAN 2)192
- Traffic Redirect194
- Configuring Traffic Redirect195
- Figure 101 Traffic Redirect WAN Setup195
- Figure 102 Traffic Redirect LAN Setup195
- Configuring Dial Backup196
- Figure 103 NETWORK > WAN > Traffic Redirect196
- Table 46 NETWORK > WAN > Traffic Redirect196
- Figure 104 NETWORK > WAN > Dial Backup197
- Table 47 NETWORK > WAN > Dial Backup197
- Advanced Modem Setup199
  - AT Command Strings199
  - DTR Signal200
  - Response Strings200
- Configuring Advanced Modem Setup200
- Figure 105 NETWORK > WAN > Dial Backup > Edit200
- Table 48 NETWORK > WAN > Dial Backup > Edit201
- DMZ Screens203
Chapter 9 DMZ Screens203
- Dmz203
- Configuring DMZ203
- Figure 106 NETWORK > DMZ204
- Table 49 NETWORK > DMZ204
- DMZ Static DHCP206
- Figure 107 NETWORK > DMZ > Static DHCP206
- DMZ IP Alias207
- Table 50 NETWORK > DMZ > Static DHCP207
- Figure 108 NETWORK > DMZ > IP Alias208
- Table 51 NETWORK > DMZ > IP Alias208
- DMZ Public IP Address Example209
- DMZ Private and Public IP Address Example209
- Figure 109 DMZ Public Address Example209
- DMZ Port Roles210
- Figure 110 DMZ Private and Public Address Example210
- Figure 111 NETWORK > DMZ > Port Roles211
- Table 52 NETWORK > DMZ > Port Roles211
- Wlan213
Chapter 10 WLAN213
- Wireless LAN Introduction213
  - Additional Installation Requirements for Using 802.1X213
- Configuring WLAN213
- Figure 112 NETWORK > WLAN214
- Table 53 NETWORK > WLAN215
- WLAN Static DHCP216
- WLAN IP Alias217
- Figure 113 NETWORK > WLAN > Static DHCP217
- Table 54 NETWORK > WLAN > Static DHCP217
- Figure 114 NETWORK > WLAN > IP Alias218
- Table 55 NETWORK > WLAN > IP Alias218
- WLAN Port Roles219
- Figure 115 WLAN Port Role Example219
- Figure 116 NETWORK > WLAN > Port Roles220
- Table 56 NETWORK > WLAN > Port Roles220
- Wireless Security221
  - Encryption221
  - Figure 117 NETWORK > WLAN > Port Roles: Change Complete221
  - Figure 118 Zywall Wireless Security Levels221
  - Authentication222
  - Restricted Access222
  - Hide Zywall Identity222
- Security Parameters Summary222
- Table 57 Wireless Security Relational Matrix222
- WEP Encryption223
- Overview223
  - Introduction to RADIUS223
  - EAP Authentication Overview224
  - Figure 119 EAP Authentication224
- Dynamic WEP Key Exchange225
- Introduction to WPA225
  - User Authentication225
  - Encryption225
- WPA-PSK Application Example226
- Introduction to RADIUS227
- WPA with RADIUS Application Example227
- Figure 120 WPA-PSK Authentication227
- Wireless Client WPA Supplicants228
- Wireless Card228
  - Figure 121 WPA with RADIUS Application Example228
  - Figure 122 WIRELESS > Wi-Fi > Wireless Card: no Security229
  - Table 58 WIRELESS > Wi-Fi > Wireless Card: no Security229
  - Static WEP230
  - Figure 123 WIRELESS > Wi-Fi > Wireless Card: Static WEP231
  - Table 59 WIRELESS > Wi-Fi > Wireless Card: Static WEP231
  - Wpa-Psk231
  - Figure 124 WIRELESS > Wi-Fi > Wireless Card: WPA-PSK232
  - Table 60 WIRELESS > Wi-Fi > Wireless Card: WPA-PSK232
  - Figure 125 WIRELESS > Wi-Fi > Wireless Card: WPA233
  - Table 61 WIRELESS > Wi-Fi > Wireless Card: WPA233
  - Wpa233
  - Figure 126 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Dynamic WEP234
  - IEEE 802.1X + Dynamic WEP234
  - Table 62 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Dynamic WEP234
  - Figure 127 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Static WEP235
  - IEEE 802.1X + Static WEP235
  - Table 63 WIRELESS > Wi-Fi > Wireless Card: 802.1X + Static WEP235
  - IEEE 802.1X + no WEP236
  - Figure 128 WIRELESS > Wi-Fi > Wireless Card: 802.1X + no WEP237
  - No Access 802.1X + Static WEP237
  - Table 64 WIRELESS > Wi-Fi > Wireless Card: 802.1X + no WEP237
  - Figure 129 WIRELESS > Wi-Fi > Wireless Card: no Access 802.1X + Static WEP238
  - No Access 802.1X + no WEP238
  - Table 65 WIRELESS > Wi-Fi > Wireless Card: no Access 802.1X + Static WEP238
- MAC Filter239
- Figure 130 WIRELESS > Wi-Fi > MAC Filter239
- Table 66 WIRELESS > Wi-Fi > MAC Filter239
Part III: Security241
- Firewall243
Security241
Chapter 11 Firewall243
- Firewall Overview243
- Figure 131 Default Firewall Action243
- Packet Direction Matrix244
- Figure 132 SECURITY > FIREWALL > Default Rule (Router Mode)244
- Figure 133 Default Block Traffic from WAN1 to DMZ Example245
- Packet Direction Examples246
  - To VPN Packet Direction247
  - Figure 134 from LAN to VPN Example247
  - From VPN Packet Direction248
  - Figure 135 Block DMZ to VPN Traffic by Default Example248
  - Figure 136 from VPN to LAN Example249
  - From VPN to VPN Packet Direction250
  - Figure 137 Block VPN to LAN Traffic by Default Example250
  - Figure 138 from VPN to VPN Example251
- Security Considerations252
- Figure 139 Block VPN to VPN Traffic by Default Example252
- Firewall Rules Example253
- Figure 140 Blocking All LAN to WAN IRC Traffic Example253
- Table 67 Blocking All LAN to WAN IRC Traffic Example253
- Asymmetrical Routes254
  - Figure 141 Limited LAN to WAN IRC Traffic Example254
  - Table 68 Limited LAN to WAN IRC Traffic Example254
  - Asymmetrical Routes and IP Alias255
- Firewall Default Rule (Router Mode)255
- Figure 142 Using IP Alias to Solve the Triangle Route Problem255
- Figure 143 SECURITY > FIREWALL > Default Rule (Router Mode)256
- Table 69 SECURITY > FIREWALL > Default Rule (Router Mode)256
- Firewall Default Rule (Bridge Mode)258
- Figure 144 SECURITY > FIREWALL > Default Rule (Bridge Mode)258
- Table 70 SECURITY > FIREWALL > Default Rule (Bridge Mode)258
- Firewall Rule Summary259
  - Figure 145 SECURITY > FIREWALL > Rule Summary260
  - Table 71 SECURITY > FIREWALL > Rule Summary260
  - Firewall Edit Rule261
  - Figure 146 SECURITY > FIREWALL > Rule Summary > Edit262
  - Table 72 SECURITY > FIREWALL > Rule Summary > Edit263
- Anti-Probing264
- Figure 147 SECURITY > FIREWALL > Anti-Probing264
- Firewall Thresholds265
  - Figure 148 Three-Way Handshake265
  - Table 73 SECURITY > FIREWALL > Anti-Probing265
  - Threshold Values266
- Threshold Screen266
- Figure 149 SECURITY > FIREWALL > Threshold266
- Table 74 SECURITY > FIREWALL > Threshold267
- Service268
  - Figure 150 SECURITY > FIREWALL > Service268
  - Table 75 SECURITY > FIREWALL > Service268
  - Figure 151 SECURITY > FIREWALL > Service > Add269
  - Firewall Edit Custom Service269
  - Table 76 SECURITY > FIREWALL > Service > Add269
- My Service Firewall Rule Example270
- Figure 152 My Service Firewall Rule Example: Service270
- Figure 153 My Service Firewall Rule Example: Edit Custom Service270
- Figure 154 My Service Firewall Rule Example: Rule Summary271
- Figure 155 My Service Firewall Rule Example: Rule Edit271
- Figure 156 My Service Firewall Rule Example: Rule Configuration272
- Figure 157 My Service Firewall Rule Example: Rule Summary273
Chapter 12 Intrusion Detection and Prevention (IDP)275
- Introduction to IDP275
Chapter 13 Configuring IDP279
- Overview279
  - Interfaces279
- General Setup280
- Figure 159 Applying IDP to Interfaces280
- Figure 160 SECURITY > IDP > General280
- Table 77 SECURITY > IDP > General Setup281
- IDP Signatures282
- Update290
- Backup and Restore293
- Figure 169 SECURITY > IDP > Backup & Restore293
Chapter 14 Anti-Virus295
- Anti-Virus Overview295
- Introduction to the Zywall Anti-Virus Scanner296
- General Anti-Virus Setup298
- Figure 171 SECURITY > ANTI-VIRUS > General299
- Table 85 SECURITY > ANTI-VIRUS > General299
- Signature Searching300
- Signature Update303
- Backup and Restore306
- Figure 176 SECURITY > ANTI-VIRUS > Backup and Restore306
Chapter 15 Anti-Spam307
- Anti-Spam Overview307
- Anti-Spam General Screen311
- Figure 178 SECURITY > ANTI-SPAM > General311
- Table 87 SECURITY > ANTI-SPAM > General311
- Anti-Spam External DB Screen313
- Figure 179 SECURITY > ANTI-SPAM > External DB314
- Table 88 SECURITY > ANTI-SPAM > External DB314
- Anti-Spam Lists Screen315
- Figure 180 SECURITY > ANTI-SPAM > Lists316
- Table 89 SECURITY > ANTI-SPAM > Lists316
- Anti-Spam Lists Edit Screen317
- Figure 181 SECURITY > ANTI-SPAM > Lists > Edit317
- Table 90 SECURITY > ANTI-SPAM > Lists > Edit318
Chapter 16321
- Content Filtering Screens321
Chapter 17 Content Filtering Reports343
- Checking Content Filtering Activation343
- Viewing Content Filtering Reports343
- Figure 191 Myzyxel.com: Login344
- Figure 192 Myzyxel.com: Welcome344
- Figure 193 Myzyxel.com: Service Management345
- Figure 194 Blue Coat: Login345
- Figure 195 Content Filtering Reports Main Screen346
- Figure 196 Blue Coat: Report Home346
- Figure 197 Global Report Screen Example347
- Web Site Submission348
- Figure 198 Requested Urls Example348
- Figure 199 Web Page Review Process Screen349
Chapter 18 Ipsec VPN351
- Ipsec VPN Overview351
  - Figure 200 VPN: Example351
  - Figure 201 VPN: IKE SA and Ipsec SA352
  - IKE SA Overview352
- VPN Rules (IKE)353
- Figure 202 Gateway and Network Policies353
- Figure 203 Ipsec Fields Summary353
- Figure 204 SECURITY > VPN > VPN Rules (IKE)354
- Table 99 SECURITY > VPN > VPN Rules (IKE)354
- IKE SA Setup355
  - IKE SA Proposal355
  - Figure 205 IKE SA: Main Negotiation Mode, Steps 1 - 2: IKE SA Proposal355
  - Figure 206 IKE SA: Main Negotiation Mode, Steps 3 - 4: DH Key Exchange356
  - Figure 207 IKE SA: Main Negotiation Mode, Steps 5 - 6: Authentication357
  - Table 100 VPN Example: Matching ID Type and Content357
  - Table 101 VPN Example: Mismatching ID Type and Content358
  - Figure 208 VPN/NAT Example359
- Additional Ipsec VPN Topics360
  - SA Life Time360
  - Ipsec High Availability361
  - Encryption and Authentication Algorithms361
  - Figure 209 Ipsec High Availability361
- VPN Rules (IKE) Gateway Policy Edit362
- Figure 210 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy363
- Table 102 SECURITY > VPN > VPN Rules (IKE) > Edit Gateway Policy364
- Ipsec SA Overview368
  - Local and Remote Networks368
  - Virtual Address Mapping369
  - Active Protocol370
  - Encapsulation370
  - Figure 211 Virtual Mapping of Local and Remote Network IP Addresses370
  - Ipsec SA Proposal and Perfect Forward Secrecy371
  - Figure 212 VPN: Transport and Tunnel Mode Encapsulation371
- Network Policy Edit372
- Figure 213 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy373
- Table 103 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy374
- Network Policy Edit: Port Forwarding377
- Figure 214 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding378
- Table 104 SECURITY > VPN > VPN Rules (IKE) > Edit Network Policy > Port Forwarding378
- Network Policy Move379
- Figure 215 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy379
- Table 105 SECURITY > VPN > VPN Rules (IKE) > Move Network Policy379
- Ipsec SA Using Manual Keys380
  - Ipsec SA Proposal Using Manual Keys380
  - Authentication and the Security Parameter Index (SPI)380
- VPN Rules (Manual)380
- Figure 216 SECURITY > VPN > VPN Rules (Manual)381
- Table 106 SECURITY > VPN > VPN Rules (Manual)381
- VPN Rules (Manual): Edit382
- Figure 217 SECURITY > VPN > VPN Rules (Manual) > Edit382
- Table 107 SECURITY > VPN > VPN Rules (Manual) > Edit382
- VPN SA Monitor385
- VPN Global Setting385
  - Local and Remote IP Address Conflict Resolution385
  - Figure 218 SECURITY > VPN > SA Monitor385
  - Table 108 SECURITY > VPN > SA Monitor385
  - Figure 219 Overlap in a Dynamic VPN Rule386
  - Figure 220 Overlap in IP Alias and VPN Remote Networks387
  - Figure 221 SECURITY > VPN > Global Setting387
  - Table 109 SECURITY > VPN > Global Setting387
- Telecommuter Vpn/Ipsec Examples388
  - Telecommuters Sharing One VPN Rule Example389
  - Telecommuters Using Unique VPN Rules Example389
  - Figure 222 Telecommuters Sharing One VPN Rule Example389
  - Table 110 Telecommuters Sharing One VPN Rule Example389
  - Figure 223 Telecommuters Using Unique VPN Rules Example390
  - Table 111 Telecommuters Using Unique VPN Rules Example390
- VPN and Remote Management391
- Hub-And-Spoke VPN391
  - Figure 224 VPN for Remote Management Example391
  - Figure 225 VPN Topologies392
  - Hub-And-Spoke VPN Example392
  - Figure 226 Hub-And-Spoke VPN Example393
  - Hub-And-Spoke Example VPN Rule Addresses393
  - Hub-And-Spoke VPN Requirements and Suggestions393
Chapter 19 Certificates395
- Certificates Overview395
  - Advantages of Certificates396
- Self-Signed Certificates396
- Verifying a Certificate396
  - Checking the Fingerprint of a Certificate on Your Computer396
  - Figure 227 Certificates on Your Computer396
- Configuration Summary397
- Figure 228 Certificate Details397
- Figure 229 Certificate Configuration Overview397
- My Certificates398
- Figure 230 SECURITY > CERTIFICATES > My Certificates398
- Table 112 SECURITY > CERTIFICATES > My Certificates398
- My Certificate Details400
- Figure 231 SECURITY > CERTIFICATES > My Certificates > Details400
- Table 113 SECURITY > CERTIFICATES > My Certificates > Details401
- My Certificate Export402
  - Certificate File Export Formats402
  - Figure 232 SECURITY > CERTIFICATES > My Certificates > Export402
- My Certificate Import403
  - Certificate File Formats403
  - Table 114 SECURITY > CERTIFICATES > My Certificates > Export403
  - Figure 233 SECURITY > CERTIFICATES > My Certificates > Import404
  - Table 115 SECURITY > CERTIFICATES > My Certificates > Import404
- My Certificate Create405
- Figure 234 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12405
- Table 116 SECURITY > CERTIFICATES > My Certificates > Import: PKCS#12405
- Figure 235 SECURITY > CERTIFICATES > My Certificates > Create (Basic)406
- Figure 236 SECURITY > CERTIFICATES > My Certificates > Create (Advanced)407
- Table 117 SECURITY > CERTIFICATES > My Certificates > Create407
- Trusted Cas410
- Figure 237 SECURITY > CERTIFICATES > Trusted Cas411
- Table 118 SECURITY > CERTIFICATES > Trusted Cas411
- Trusted CA Details412
- Figure 238 SECURITY > CERTIFICATES > Trusted Cas > Details413
- Table 119 SECURITY > CERTIFICATES > Trusted Cas > Details413
- Trusted CA Import415
- Trusted Remote Hosts416
- Figure 239 SECURITY > CERTIFICATES > Trusted Cas > Import416
- Table 120 SECURITY > CERTIFICATES > Trusted Cas Import416
- Figure 240 SECURITY > CERTIFICATES > Trusted Remote Hosts417
- Table 121 SECURITY > CERTIFICATES > Trusted Remote Hosts417
- Trusted Remote Hosts Import418
- Figure 241 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import418
- Table 122 SECURITY > CERTIFICATES > Trusted Remote Hosts > Import418
- Trusted Remote Host Certificate Details419
- Figure 242 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details419
- Table 123 SECURITY > CERTIFICATES > Trusted Remote Hosts > Details420
- Directory Servers421
- Figure 243 SECURITY > CERTIFICATES > Directory Servers421
- Directory Server Add or Edit422
- Figure 244 SECURITY > CERTIFICATES > Directory Server > Add422
- Table 124 SECURITY > CERTIFICATES > Directory Servers422
- Table 125 SECURITY > CERTIFICATES > Directory Server > Add423
Chapter 20 Authentication Server425
- Authentication Server Overview425
- Radius427
- Figure 246 SECURITY > AUTH SERVER > RADIUS427
- Table 126 SECURITY > AUTH SERVER > Local User Database427
- Table 127 SECURITY > AUTH SERVER > RADIUS427
Part IV: Advanced429
Advanced429
Chapter 21 Network Address Translation (NAT)431
- NAT Overview431
- Using NAT435
  - SUA (Single User Account) Versus NAT435
  - Table 129 NAT Mapping Types435
- NAT Overview Screen436
- Figure 250 ADVANCED > NAT > NAT Overview436
- Table 130 ADVANCED > NAT > NAT Overview436
- NAT Address Mapping437
- Port Forwarding440
- Port Forwarding Screen443
- Figure 254 Port Translation Example443
- Figure 255 ADVANCED > NAT > Port Forwarding444
- Table 133 ADVANCED > NAT > Port Forwarding444
- Port Triggering445
- Figure 256 Trigger Port Forwarding Process: Example445
- Figure 257 ADVANCED > NAT > Port Triggering446
- Table 134 ADVANCED > NAT > Port Triggering446
Chapter 22 Static Route449
- IP Static Route449
- Figure 258 Example of Static Routing Topology449
- IP Static Route450
Chapter 23 Policy Route453
- Benefits453
- Routing Policy453
- IP Routing Policy Setup454
- Figure 261 ADVANCED > POLICY ROUTE > Policy Route Summary454
- Policy Route Edit455
- Table 137 ADVANCED > POLICY ROUTE > Policy Route Summary455
- Figure 262 ADVANCED > POLICY ROUTE > Edit456
- Table 138 ADVANCED > POLICY ROUTE > Edit456
Chapter 24 Bandwidth Management459
- Bandwidth Management Overview459
- Bandwidth Classes and Filters459
- Proportional Bandwidth Allocation460
- Application-Based Bandwidth Management460
- Subnet-Based Bandwidth Management460
- Application and Subnet-Based Bandwidth Management460
- Figure 263 Subnet-Based Bandwidth Management Example460
- Table 139 Application and Subnet-Based Bandwidth Management Example460
- Scheduler461
  - Priority-Based Scheduler461
  - Fairness-Based Scheduler461
  - Maximize Bandwidth Usage461
  - Reserving Bandwidth for Non-Bandwidth Class Traffic461
  - Maximize Bandwidth Usage Example462
  - Table 140 Maximize Bandwidth Usage Example462
  - Table 141 Priority-Based Allotment of Unused and Unbudgeted Bandwidth Example462
- Bandwidth Borrowing463
  - Bandwidth Borrowing Example463
  - Table 142 Fairness-Based Allotment of Unused and Unbudgeted Bandwidth Example463
- Maximize Bandwidth Usage with Bandwidth Borrowing464
- Table 143 Bandwidth Borrowing Example464
- Over Allotment of Bandwidth465
- Configuring Summary465
- Table 144 over Allotment of Bandwidth Example465
- Figure 264 ADVANCED > BW MGMT > Summary466
- Table 145 ADVANCED > BW MGMT > Summary466
- Configuring Class Setup467
  - Figure 265 ADVANCED > BW MGMT > Class Setup467
  - Bandwidth Manager Class Configuration468
  - Table 146 ADVANCED > BW MGMT > Class Setup468
  - Figure 266 ADVANCED > BW MGMT > Class Setup > Add Sub-Class469
  - Table 147 ADVANCED > BW MGMT > Class Setup > Add Sub-Class469
  - Bandwidth Management Statistics471
  - Table 148 Services and Port Numbers471
- Bandwidth Manager Monitor472
- Figure 267 ADVANCED > BW MGMT > Class Setup > Statistics472
- Figure 268 ADVANCED > BW MGMT > Monitor473
Chapter 25 DNS475
- DNS Overview475
- DNS Server Address Assignment475
- DNS Servers475
- Address Record476
  - DNS Wildcard476
- Name Server Record476
  - Private DNS Server476
- System Screen477
- DNS Cache481
- Configure DNS Cache481
- Figure 273 ADVANCED > DNS > Cache481
- Configuring DNS DHCP482
- Figure 274 ADVANCED > DNS > DHCP482
- Dynamic DNS483
  - DYNDNS Wildcard484
  - High Availability484
- Configuring Dynamic DNS484
- Figure 275 ADVANCED > DNS > DDNS484
Chapter 26 Remote Management487
- Remote Management Overview487
  - Figure 276 Secure and Insecure Remote Management from the WAN487
  - Remote Management Limitations488
  - System Timeout488
- WWW (HTTP and HTTPS)488
- Www489
- Figure 277 HTTPS Implementation489
- Figure 278 ADVANCED > REMOTE MGMT > WWW490
- Table 150 ADVANCED > REMOTE MGMT > WWW490
- HTTPS Example491
  - Internet Explorer Warning Messages491
  - Netscape Navigator Warning Messages491
  - Figure 279 Security Alert Dialog Box (Internet Explorer)491
  - Avoiding the Browser Warning Messages492
  - Figure 280 Security Certificate 1 (Netscape)492
  - Figure 281 Security Certificate 2 (Netscape)492
  - Login Screen493
  - Figure 282 Example: Lock Denoting a Secure Connection493
  - Figure 283 Replace Certificate494
  - Figure 284 Device-Specific Certificate494
  - Enrolling and Importing SSL Client Certificates495
  - Figure 285 Common Zywall Certificate495
  - Figure 286 Zywall Trusted CA Screen496
  - Figure 287 CA Certificate Example497
  - Figure 288 Personal Certificate Import Wizard 1497
  - Figure 289 Personal Certificate Import Wizard 2498
  - Figure 290 Personal Certificate Import Wizard 3498
  - Figure 291 Personal Certificate Import Wizard 4499
  - Figure 292 Personal Certificate Import Wizard 5499
  - Figure 293 Personal Certificate Import Wizard 6499
  - Using a Certificate When Accessing the Zywall Example500
  - Figure 294 Access the Zywall Via HTTPS500
  - Figure 295 SSL Client Authentication500
  - Figure 296 Secure Web Configurator Login Screen500
- Ssh501
- How SSH Works501
- Figure 297 SSH Communication over the WAN Example501
- Figure 298 How SSH Works501
- SSH Implementation on the Zywall502
  - Requirements for Using SSH502
- Configuring SSH502
- Secure Telnet Using SSH Examples503
  - Example 1: Microsoft Windows503
  - Figure 299 ADVANCED > REMOTE MGMT > SSH503
  - Table 151 ADVANCED > REMOTE MGMT > SSH503
  - Example 2: Linux504
  - Figure 300 SSH Example 1: Store Host Key504
  - Figure 301 SSH Example 2: Test504
- Secure FTP Using SSH Example505
- Figure 302 SSH Example 2: Log in505
- Figure 303 Secure FTP: Firmware Upload Example505
- Telnet506
- Configuring TELNET506
- Figure 304 ADVANCED > REMOTE MGMT > Telnet506
- Table 152 ADVANCED > REMOTE MGMT > Telnet506
- Ftp507
- Figure 305 ADVANCED > REMOTE MGMT > FTP507
- Table 153 ADVANCED > REMOTE MGMT > FTP507
- Snmp508
  - Figure 306 SNMP Management Model508
  - Remote Management: Snmp509
  - SNMP Traps509
  - Supported Mibs509
  - Table 154 SNMP Traps509
  - Figure 307 ADVANCED > REMOTE MGMT > SNMP510
  - Table 155 ADVANCED > REMOTE MGMT > SNMP510
- Dns511
- Introducing Vantage CNM511
- Figure 308 ADVANCED > REMOTE MGMT > DNS511
- Table 156 ADVANCED > REMOTE MGMT > DNS511
- Configuring CNM512
  - Figure 309 ADVANCED > REMOTE MGMT > CNM512
  - Table 157 ADVANCED > REMOTE MGMT > CNM512
  - Additional Configuration for Vantage CNM513
Chapter 27 Upnp515
- Universal Plug and Play Overview515
- Configuring Upnp516
- Figure 310 ADVANCED > Upnp516
- Table 158 ADVANCED > Upnp516
- Displaying Upnp Port Mapping517
- Figure 311 ADVANCED > Upnp > Ports517
- Table 159 ADVANCED > Upnp > Ports517
- Installing Upnp in Windows Example518
  - Installing Upnp in Windows Me519
  - Installing Upnp in Windows XP520
- Using Upnp in Windows XP Example520
  - Auto-Discover Your Upnp-Enabled Network Device521
  - Web Configurator Easy Access522
Chapter 28 Custom Application525
- Custom Application Configuration525
- Figure 312 ADVANCED > Custom APP526
- Table 160 ADVANCED > Custom APP526
Chapter 29 ALG Screen527
- ALG Introduction527
- 528528
- Ftp528
- Rtp528
- Figure 315 H.323 Calls from the WAN with Multiple Outgoing Calls530
- Sip530
  - Stun530
  - SIP ALG Details530
- ALG Screen531
- Figure 316 SIP ALG Example531
- SIP Audio Session Timeout531
- SIP Signaling Session Timeout531
- Figure 317 ADVANCED > ALG532
- Table 161 ADVANCED > ALG532
Reports, Logs and Maintenance533
Part V: Reports, Logs and Maintenance533
Chapter 30 Reports535
- Configuring Reports535
- System Reports Screen535
- IDP Threat Reports Screen540
- Figure 322 REPORTS > THREAT REPORTS > IDP540
- Table 166 Report Specifications540
- Table 167 REPORTS > THREAT REPORTS > IDP541
- Anti-Virus Threat Reports Screen542
- Figure 323 REPORTS > THREAT REPORTS > IDP > Source542
- Figure 324 REPORTS > THREAT REPORTS > IDP > Destination542
- Figure 325 REPORTS > THREAT REPORTS > Anti-Virus542
- Figure 326 REPORTS > THREAT REPORTS > Anti-Virus > Source543
- Table 168 REPORTS > THREAT REPORTS > Anti-Virus543
- Anti-Spam Threat Reports Screen544
- Figure 327 REPORTS > THREAT REPORTS > Anti-Virus > Destination544
- Figure 328 REPORTS > THREAT REPORTS > Anti-Spam544
- Table 169 REPORTS > THREAT REPORTS > Anti-Spam544
- Figure 329 REPORTS > THREAT REPORTS > Anti-Spam > Source546
- Figure 330 REPORTS > THREAT REPORTS > Anti-Spam > Score Distribution546
Chapter 31 Logs Screens547
- Configuring View Log547
- Figure 331 LOGS > View Log547
- Log Description Example548
- Configuring Log Settings550
- Syslog Logs573
- Table 196 Syslog Logs573
- Table 197 RFC-2408 ISAKMP Payload Types574
Chapter 32 Maintenance575
- Maintenance Overview575
- General Setup and System Name575
  - General Setup575
- Configuring Password576
- Figure 335 MAINTENANCE > General Setup576
- Figure 336 MAINTENANCE > Password576
- Table 198 MAINTENANCE > General Setup576
- Time and Date577
- Figure 337 MAINTENANCE > Time and Date577
- Table 199 MAINTENANCE > Password577
- Table 200 MAINTENANCE > Time and Date578
- Pre-Defined NTP Time Server Pools579
  - Resetting the Time580
  - Time Server Synchronization580
  - Figure 338 Synchronization in Process580
  - Figure 339 Synchronization Is Successful580
- Introduction to Transparent Bridging581
- Figure 340 Synchronization Fail581
- Table 201 MAC-Address-To-Port Mapping Table581
- Transparent Firewalls582
- Configuring Device Mode (Router)582
- Configuring Device Mode (Bridge)583
- Figure 341 MAINTENANCE > Device Mode (Router Mode)583
- Table 202 MAINTENANCE > Device Mode (Router Mode)583
- Figure 342 MAINTENANCE > Device Mode (Bridge Mode)584
- Table 203 MAINTENANCE > Device Mode (Bridge Mode)584
- F/W Upload Screen585
- Figure 343 MAINTENANCE > Firmware Upload585
- Table 204 MAINTENANCE > Firmware Upload585
- Figure 344 Firmware Upload in Process586
- Figure 345 Network Temporarily Disconnected586
- Figure 346 Firmware Upload Error586
- Backup and Restore587
  - Backup Configuration587
  - Restore Configuration587
  - Figure 347 MAINTENANCE > Backup and Restore587
  - Table 205 Restore Configuration587
  - Back to Factory Defaults588
  - Figure 348 Configuration Upload Successful588
  - Figure 349 Network Temporarily Disconnected588
  - Figure 350 Configuration Upload Error588
- Restart Screen589
- Diagnostics589
- Figure 351 Reset Warning Message589
- Figure 352 MAINTENANCE > Restart589
- Figure 353 MAINTENANCE > Diagnostics590
- Table 206 MAINTENANCE > Diagnostics590
SMT and Troubleshooting593
Part VI: SMT and Troubleshooting593
Chapter 33595
- Introducing the SMT595
Chapter 34 SMT Menu 1 - General Setup603
- Introduction to General Setup603
- Configuring General Setup603
Chapter 35 WAN and Dial Backup Setup609
- Introduction to WAN and Dial Backup Setup609
- WAN Setup609
- Figure 364 MAC Address Cloning in WAN Setup609
- Dial Backup610
Chapter 36 LAN Setup623
- Introduction to LAN Setup623
- Accessing the LAN Menus623
- LAN Port Filter Setup623
- Figure 373 Menu 3: LAN Setup623
- TCP/IP and DHCP Ethernet Setup Menu624
Chapter 37 Internet Access629
- Introduction to Internet Access Setup629
- Ethernet Encapsulation629
- Figure 378 Menu 4: Internet Access Setup (Ethernet)630
- Table 227 Menu 4: Internet Access Setup (Ethernet)630
- Configuring the PPTP Client631
- Configuring the Pppoe Client632
- Figure 379 Internet Access Setup (PPTP)632
- Table 228 New Fields in Menu 4 (PPTP) Screen632
- Basic Setup Complete633
- Figure 380 Internet Access Setup (Pppoe)633
- Table 229 New Fields in Menu 4 (Pppoe) Screen633
Chapter 38 DMZ Setup635
- Configuring DMZ Setup635
- DMZ Port Filter Setup635
- Figure 381 Menu 5: DMZ Setup635
- Figure 382 Menu 5.1: DMZ Port Filter Setup635
- TCP/IP Setup636
Chapter 39 Route Setup639
- Configuring Route Setup639
- Route Assessment639
- Figure 386 Menu 6: Route Setup639
- Figure 387 Menu 6.1: Route Assessment639
- Traffic Redirect640
- Figure 388 Menu 6.2: Traffic Redirect640
- Table 230 Menu 6.1: Route Assessment640
- Table 231 Menu 6.2: Traffic Redirect640
- Route Failover641
- Figure 389 Menu 6.3: Route Failover641
- Table 232 Menu 6.3: Route Failover641
Chapter 40 Wireless Setup643
- Wireless LAN Setup643
- TCP/IP Setup646
Chapter 41 Remote Node Setup649
- Introduction to Remote Node Setup649
- Figure 395 Menu 11: Remote Node Setup649
- Remote Node Profile Setup650
- Edit IP654
- Figure 398 Menu 11.1: Remote Node Profile for PPTP Encapsulation654
- Table 237 Menu 11.1: Remote Node Profile for PPTP Encapsulation654
- Figure 399 Menu 11.1.2: Remote Node Network Layer Options for Ethernet Encapsulation655
- Table 238 Remote Node Network Layer Options Menu Fields655
- Remote Node Filter656
- Figure 400 Menu 11.1.4: Remote Node Filter (Ethernet Encapsulation)657
- Figure 401 Menu 11.1.4: Remote Node Filter (Pppoe or PPTP Encapsulation)657
- IP Static Route Setup659
Chapter 42 IP Static Route Setup659
- Figure 402 Menu 12: IP Static Route Setup660
- Figure 403 Menu 12. 1: Edit IP Static Route660
- Table 239 Menu 12. 1: Edit IP Static Route660
Chapter 43663
- Network Address Translation (NAT)663
Chapter 44 Introducing the Zywall Firewall683
- Using Zywall SMT Menus683
Chapter 45 Filter Configuration685
- Introduction to Filters685
- Configuring a Filter Set688
- Example Filter694
- Figure 438 Telnet Filter Example694
- Figure 439 Example Filter: Menu 21.1.3.1695
- Figure 440 Example Filter Rules Summary: Menu 21.1.3695
- Filter Types and NAT696
- Firewall Versus Filters696
- Applying a Filter697
Chapter 46 SNMP Configuration701
- Figure 445 Menu 22: SNMP Configuration701
Chapter 47703
- System Information & Diagnosis703
Chapter 48 Firmware and Configuration File Maintenance715
- Introduction715
- Filename Conventions715
- Backup Configuration716
- Restore Configuration720
- Uploading Firmware and Configuration Files723
Chapter 49 System Maintenance Menus 8 to 10729
- Command Interpreter Mode729
- Figure 476 Command Mode in Menu 24729
- Call Control Support730
- Time and Date Setting732
- Figure 480 Menu 24: System Maintenance732
- Figure 481 Menu 24.10 System Maintenance: Time and Date Setting733
- Table 261 Menu 24.10 System Maintenance: Time and Date Setting733
Chapter 50 Remote Management735
- Figure 482 Menu 24.11 - Remote Management Control736
Chapter 51 IP Policy Routing739
- IP Routing Policy Summary739
- Figure 483 Menu 25: Sample IP Routing Policy Summary739
- Table 263 Menu 25: Sample IP Routing Policy Summary739
- IP Routing Policy Setup740
- IP Policy Routing Example743
- Figure 485 Menu 25.1.1: IP Routing Policy Setup743
- Table 266 Menu 25.1.1: IP Routing Policy Setup743
- Figure 486 Example of IP Policy Routing744
- Figure 487 IP Routing Policy Example 1744
- Figure 488 IP Routing Policy Example 2745
Chapter 52 Call Scheduling747
- Introduction to Call Scheduling747
- Figure 489 Schedule Setup747
- Figure 490 Schedule Set Setup748
- Table 267 Schedule Set Setup748
- Figure 491 Applying Schedule Set(S) to a Remote Node (Pppoe)749
- Figure 492 Applying Schedule Set(S) to a Remote Node (PPTP)750
Chapter 53 Troubleshooting751
- Power, Hardware Connections, and Leds751
- Zywall Access and Login752
- Internet Access754
- Wireless Router/Ap Troubleshooting755
- Upnp756
Chapter 54 Product Specifications757
- Table 268 Hardware Specifications757
Part VII: Appendices and Index765
Appendices and Index765
Appendix A Hardware Installation767
- Desktop Installation767
- Figure 495 Attaching Rubber Feet768
- Figure 496 Attaching Mounting Brackets and Screws769
- Figure 497 Rack Mounting769
Appendix B Pop-Up Windows, Javascripts and Java Permissions771
- Figure 498 Pop-Up Blocker771
- Figure 499 Internet Options: Privacy772
- Figure 500 Internet Options: Privacy773
- Figure 501 Pop-Up Blocker Settings773
- Figure 502 Internet Options: Security774
- Figure 503 Security Settings - Java Scripting775
- Figure 504 Security Settings - Java775
- Figure 505 Java (Sun)776
- Figure 506 Mozilla Firefox: Tools > Options777
- Figure 507 Mozilla Firefox Content Security777
Appendix C Removing and Installing a Fuse779
Appendix D Setting up Your Computer's IP Address781
- Figure 508 Windows 95/98/Me: Network: Configuration782
- Figure 509 Windows 95/98/Me: TCP/IP Properties: IP Address783
- Figure 510 Windows 95/98/Me: TCP/IP Properties: DNS Configuration784
- Figure 511 Windows XP: Start Menu785
- Figure 512 Windows XP: Control Panel785
- Figure 513 Windows XP: Control Panel: Network Connections: Properties786
- Figure 514 Windows XP: Local Area Connection Properties786
- Figure 515 Windows XP: Internet Protocol (TCP/IP) Properties787
- Figure 516 Windows XP: Advanced TCP/IP Properties788
- Figure 517 Windows XP: Internet Protocol (TCP/IP) Properties789
- Figure 518 Windows Vista: Start Menu790
- Figure 519 Windows Vista: Control Panel790
- Figure 520 Windows Vista: Network and Internet790
- Figure 521 Windows Vista: Network and Sharing Center790
- Figure 522 Windows Vista: Network and Sharing Center791
- Figure 523 Windows Vista: Local Area Connection Properties791
- Figure 524 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties792
- Figure 525 Windows Vista: Advanced TCP/IP Properties793
- Figure 526 Windows Vista: Internet Protocol Version 4 (Tcp/Ipv4) Properties794
- Figure 527 Macintosh os 8/9: Apple Menu795
- Figure 528 Macintosh os 8/9: TCP/IP795
- Figure 529 Macintosh os X: Apple Menu796
- Figure 530 Macintosh os X: Network797
- Figure 531 Red hat 9.0: KDE: Network Configuration: Devices798
- Figure 532 Red hat 9.0: KDE: Ethernet Device: General798
- Figure 533 Red hat 9.0: KDE: Network Configuration: DNS799
- Figure 534 Red hat 9.0: KDE: Network Configuration: Activate799
- Figure 535 Red hat 9.0: Dynamic IP Address Setting in Ifconfig-Eth0800
- Figure 536 Red hat 9.0: Static IP Address Setting in Ifconfig-Eth0800
- Figure 537 Red hat 9.0: DNS Settings in Resolv.conf800
- Figure 538 Red hat 9.0: Restart Ethernet Card800
- Figure 539 Red hat 9.0: Checking TCP/IP Properties801
Appendix E IP Addresses and Subnetting803
- Figure 540 Network Number and Host ID804
- Table 281 IP Address Network Number and Host ID Example804
- Table 282 Subnet Masks805
- Table 283 Maximum Host Numbers805
- Table 284 Alternative Subnet Mask Notation805
- Figure 541 Subnetting Example: before Subnetting806
- Figure 542 Subnetting Example: after Subnetting807
- Table 285 Subnet 1807
- Table 286 Subnet 2808
- Table 287 Subnet 3808
- Table 288 Subnet 4808
- Table 289 Eight Subnets808
- Table 290 24-Bit Network Number Subnet Planning809
- Table 291 16-Bit Network Number Subnet Planning809
- Configuring Ip Addresses810
- Figure 543 Conflicting Computer IP Addresses Example811
- Figure 544 Conflicting Computer IP Addresses Example811
- Figure 545 Conflicting Computer and Router IP Addresses Example812
Appendix F Common Services813
- Table 292 Commonly Used Services813
Appendix G Wireless Lans817
- Figure 546 Peer-To-Peer Communication in an Ad-Hoc Network817
- Figure 547 Basic Service Set818
- Figure 548 Infrastructure WLAN819
- Figure 549 RTS/CTS820
- Table 293 IEEE 802.11G821
- Table 294 Wireless Security Levels822
- Table 295 Comparison of EAP Authentication Types825
- Figure 550 WPA(2) with RADIUS Application Example827
- Figure 551 WPA(2)-PSK Authentication828
- Table 296 Wireless Security Relational Matrix828
Appendix H Windows 98 Se/Me Requirements for Anti-Virus Message Display831
- Figure 552 Windows 98 SE: Winpopup831
- Figure 553 Windows 98 SE: Program Task Bar832
- Figure 554 Windows 98 SE: Task Bar Properties832
- Figure 555 Windows 98 SE: Startup833
- Figure 556 Windows 98 SE: Startup: Create Shortcut833
- Figure 557 Windows 98 SE: Startup: Select a Title for the Program834
- Figure 558 Windows 98 SE: Startup: Shortcut834
Appendix I VPN Setup835
- General Notes835
- Figure 559 VPN Rules836
- Figure 560 Headquarters Gateway Policy Edit837
- Figure 561 Branch Office Gateway Policy Edit838
- Figure 562 Headquarters VPN Rule839
- Figure 563 Branch Office VPN Rule839
- Figure 564 Headquarters Network Policy Edit840
- Figure 565 Branch Office Network Policy Edit841
- Figure 566 VPN Rule Configured842
- Figure 567 VPN Dial842
- Figure 568 VPN Tunnel Established842
- Figure 569 VPN Log Example844
- Figure 570 Ike/Ipsec Debug Example845
Appendix J Importing Certificates847
- Figure 571 Security Certificate847
- Figure 572 Login Screen848
- Figure 573 Certificate General Information before Import848
- Figure 574 Certificate Import Wizard 1849
- Figure 575 Certificate Import Wizard 2849
- Figure 576 Certificate Import Wizard 3850
- Figure 577 Root Certificate Store850
- Figure 578 Certificate General Information after Import851
Appendix K Legal Information853
Appendix L Customer Support857
Index863

ZyXEL Communications ZYWALL 35 - Figure 560 Headquarters Gateway Policy Edit

Table of Contents

Other manuals for ZyXEL Communications ZYWALL 35

Related product manuals