ZyXEL Communications ZYWALL 5 - Access Control and Security VPN Connection (Security Policy Enforcement Ipsec)

ZyWALL 5 Support Notes
All contents copyright (c) 2006 ZyXEL Communications Corporation.
117
Access control and security VPN connection (Security policy enforcement IPSec)
Setup ZyWALL VPN with access control - Firewall
Setup ZyWALL VPN with security policy enofrcement – AV/IDP/AS
Setup ZyWALL VPN with web filtering rule – Content Filter
Normally, the traffic transmitted between VPN tunnel is treated as security connection due on multi
authentication and encryption methods. Thus, the security gateway won’t inspect the VPN traffic because
the traffic sending with cipher text format not in plaintext. The enhanced algorithm we adopted is
ZyWALL can inspect the VPN packet before encrypt or after decrypt the packet sending to or receiving
from VPN tunnel.
Check
SPD
Encrypt
Packet
Decrypt
Packet
Rout i ng
Rout i ng
IPSec Tunnel
packet
IPSec Local Gateway IPSec Remote Gateway
FW
IDP
AV
AS
FW
IDP
AV
AS