ZyXEL Communications ZyWALL USG 300 - Profiles: Packet Inspection; Profile

To Next Page

To Previous Page

Chapter 34 IDP

ZyWALL USG 300 User’s Guide

603

34.6 Profiles: Packet Inspection

Select Configuration > Anti-X > IDP > Profile and then add a new or edit an

existing profile select. Packet inspection signatures examine the contents of a

packet for malicious data. It operates at layer-4 to layer-7.

34.6.1 Profile > Group View Screen

Figure 432 Configuration > Anti-X > IDP > Profile > Edit: Group View

Main Page

About this User's Guide3
Document Conventions6
- Syntax Conventions6
Safety Warnings8
Contents Overview9
- Table of Contents9
Table of Contents11
User's Guide31
PART I User's Guide31
Chapter 1 Introducing the Zywall33
- Overview and Key Default Settings33
- Rack-Mounted Installation33
  - Rack-Mounted Installation Procedure34
- Front Panel35
  - Front Panel Leds35
- Management Overview35
- Starting and Stopping the Zywall37
Chapter 2 Features and Applications39
- Features39
- Applications41
- Web Configurator47
Chapter 3 Web Configurator47
- Web Configurator Requirements47
- Web Configurator Access47
- Web Configurator Screens Overview49
Ssl Vpn54
- Main Window57
- Tables and Lists59
- Working with Table Entries62
Chapter 4 Installation Setup Wizard65
- Installation Setup Wizard Screens65
- Device Registration72
- Quick Setup75
Chapter 5 Quick Setup75
- Quick Setup Overview75
- WAN Interface Quick Setup76
- VPN Quick Setup81
- VPN Setup Wizard: Wizard Type82
- VPN Express Wizard - Scenario83
Chapter 6 Configuration Basics93
- Object-Based Configuration93
- Zones, Interfaces, and Physical Ports94
  - Interface Types95
  - Default Interface and Zone Configuration96
- Terminology in the Zywall97
- Packet Flow98
- Feature Configuration Overview101
- Objects112
  - User/Group112
- System113
Chapter 7 Tutorials117
- How to Configure Interfaces, Port Grouping, and Zones117
  - Configure a WAN Ethernet Interface118
- Configure Zones118
- Configure Port Grouping119
- How to Configure a Cellular Interface120
- How to Configure Load Balancing122
  - Set up Available Bandwidth on Ethernet Interfaces123
  - Configure the WAN Trunk124
- How to Set up a Wireless LAN125
- How to Set up an Ipsec VPN Tunnel141
- How to Configure a Hub-And-Spoke Ipsec VPN Without a VPN Concentrator144
- How to Configure User-Aware Access Control146
- How to Use a RADIUS Server to Authenticate User Accounts Based on Groups155
- How to Use Endpoint Security and Authentication Policies157
  - Configure the Endpoint Security Objects157
  - Configure the Authentication Policy159
- How to Configure Service Control160
  - Allow HTTPS Administrator Access Only from the LAN161
- How to Allow Incoming H.323 Peer-To-Peer Calls163
- How to Allow Public Access to a Web Server167
- How to Use an IPPBX on the DMZ170
- How to Use Multiple Static Public WAN IP Addresses for LAN to WAN Traffic176
Chapter 8 L2TP VPN Example185
- Configuring the Default L2TP VPN Gateway Example185
- Configuring the Default L2TP VPN Connection Example187
- Configuring the L2TP VPN Settings Example188
- Configuring L2TP VPN in Windows Vista, XP, or 2000189
Technical Reference221
Part II: Technical Reference221
- Dashboard223
Chapter 9 Dashboard223
- Overview223
  - What You Can Do in this Chapter223
- The Dashboard Screen223
Chapter 10 Monitor237
- Overview237
  - What You Can Do in this Chapter237
- The Port Statistics Screen238
  - The Port Statistics Graph Screen240
- Interface Status Screen241
- The Traffic Statistics Screen245
- The Session Monitor Screen248
- The DDNS Status Screen250
- IP/MAC Binding Monitor251
- The Login Users Screen252
- WLAN Interface Station Monitor Screen253
- Cellular Status Screen254
- USB Storage Screen256
- Application Patrol Statistics257
  - Application Patrol Statistics: General Setup258
  - Application Patrol Statistics: Bandwidth Statistics259
  - Application Patrol Statistics: Protocol Statistics260
  - Application Patrol Statistics: Individual Protocol Statistics by Rule261
- The Ipsec Monitor Screen262
  - Regular Expressions in Searching Ipsec Sas264
- The SSL Connection Monitor Screen265
- L2TP over Ipsec Session Monitor Screen266
- The Anti-Virus Statistics Screen267
- The IDP Statistics Screen269
- The Content Filter Statistics Screen271
- Content Filter Cache Screen272
- The Anti-Spam Statistics Screen275
- The Anti-Spam Status Screen277
- Log Screen278
- Registration281
Chapter 11 Registration281
- Overview281
  - What You Can Do in this Chapter281
  - What You Need to Know281
- The Registration Screen283
- The Service Screen286
Chapter 12 Signature Update289
- Overview289
  - What You Can Do in this Chapter289
  - What You Need to Know289
- The Antivirus Update Screen290
- The Idp/Apppatrol Update Screen291
- The System Protect Update Screen293
- Interfaces295
Chapter 13 Interfaces295
- Interface Overview295
Add333
- WLAN Add/Edit: WEP Security335
- WLAN Add/Edit: WPA-PSK/WPA2-PSK Security336
- WLAN Add/Edit: WPA/WPA2 Security337
Chapter 14 Trunks369
- Overview369
Chapter 15379
Policy and Static Routes379
- Policy and Static Routes Overview379
  - What You Can Do in this Chapter379
  - What You Need to Know380
- Policy Route Screen382
  - Policy Route Edit Screen385
- IP Static Route Screen389
  - Static Route Add/Edit Screen390
- Policy Routing Technical Reference391
  - Port Triggering392
  - Maximize Bandwidth Usage393
Chapter 16 Routing Protocols395
- Routing Protocols Overview395
  - What You Can Do in this Chapter395
  - What You Need to Know395
- The RIP Screen396
- The OSPF Screen397
- Routing Protocol Technical Reference406
Chapter 17 Zones409
- Zones Overview409
  - What You Can Do in this Chapter409
  - What You Need to Know410
- The Zone Screen411
- Zone Edit412
- Ddns413
Chapter 18 DDNS413
- DDNS Overview413
  - What You Can Do in this Chapter413
  - What You Need to Know413
- The DDNS Screen414
  - The Dynamic DNS Add/Edit Screen416
- Nat419
Chapter 19 NAT419
- NAT Overview419
  - What You Can Do in this Chapter419
  - What You Need to Know420
- The NAT Screen420
  - The NAT Add/Edit Screen422
  - NAT Technical Reference425
Chapter 20 HTTP Redirect429
- Overview429
- Alg433
Chapter 21 ALG433
- ALG Overview433
Chapter 22 IP/MAC Binding441
- IP/MAC Binding Overview441
Chapter 23 Authentication Policy447
- Overview447
Edit449
- Adding Exceptional Services450
- Creating/Editing an Authentication Policy451
- Firewall455
Chapter 24 Firewall455
- Overview455
- The Firewall Screen463
  - Configuring the Firewall Screen464
  - The Firewall Add/Edit Screen467
- The Session Limit Screen468
  - The Session Limit Add/Edit Screen470
Chapter 25 Ipsec VPN473
- Ipsec VPN Overview473
- The VPN Connection Screen476
  - The VPN Connection Add/Edit (IKE) Screen478
  - The VPN Connection Add/Edit Manual Key Screen485
- The VPN Gateway Screen488
  - The VPN Gateway Add/Edit Screen489
- VPN Concentrator497
- Ipsec VPN Background Information501
  - Ike Sa Overview502
  - Ipsec Sa Overview508
- Ssl Vpn513
- Overview513
  - What You Can Do in this Chapter513
  - What You Need to Know513
Chapter 26 SSL VPN513
- The SSL Access Privilege Screen516
  - Access Policy516
  - The SSL Access Policy Add/Edit Screen518
- The SSL Global Setting Screen521
Ssl Vpn521
- How to Upload a Custom Logo522
- Establishing an SSL VPN Connection523
Chapter 27 SSL User Screens525
- Overview525
  - What You Need to Know525
- Remote User Login526
- The SSL VPN User Screens531
- Bookmarking the Zywall532
- Logging out of the SSL VPN User Screens532
Chapter 28 SSL User Application Screens535
- SSL User Application Screens Overview535
- The Application Screen535
Chapter 29 SSL User File Sharing537
- Overview537
  - What You Need to Know537
- The Main File Sharing Screen538
- Opening a File or Folder538
  - Downloading a File540
  - Saving a File541
- Creating a New Folder541
- Renaming a File or Folder542
- Deleting a File or Folder542
- Uploading a File543
Chapter 30 Zywall Secuextender545
- The Zywall Secuextender Icon545
- Statistics546
- View Log547
- Suspend and Resume the Connection547
- Stop the Connection548
- Uninstalling the Zywall Secuextender548
Chapter 31 L2TP VPN549
- Overview549
  - What You Can Do in this Chapter549
  - What You Need to Know549
- L2TP VPN Screen551
Chapter 32 Application Patrol553
- Overview553
Chapter 33 Anti-Virus579
- Overview579
Chapter 34 IDP595
- Overview595
Chapter 35 ADP629
- ADP and IDP Comparison629
- What You Can Do in this Chapter629
- What You Need to Know629
- Before You Begin630
- The ADP General Screen631
- The Profile Summary Screen632
Chapter 36 Content Filtering649
- Overview649
Chapter 37 Content Filter Reports675
- Overview675
- Viewing Content Filter Reports675
- Anti-Spam683
Chapter 38 Anti-Spam683
- Overview683
- Before You Begin685
- The Anti-Spam General Screen685
  - The Anti-Spam Policy Add or Edit Screen687
- The Anti-Spam Black List Screen689
  - The Anti-Spam Black or White List Add/Edit Screen691
  - Regular Expressions in Black or White List Entries692
- The Anti-Spam White List Screen693
- The DNSBL Screen694
- Anti-Spam Technical Reference696
- Device HA701
Chapter 39 Device HA701
- Overview701
- Device HA General703
- The Active-Passive Mode Screen704
  - Configuring Active-Passive Mode Device HA706
- Configuring an Active-Passive Mode Monitored Interface709
- The Legacy Mode Screen711
- Configuring the Legacy Mode Screen712
- Device HA Technical Reference716
- User/Group723
Chapter 40 User/Group723
- Overview723
  - What You Can Do in this Chapter723
  - What You Need to Know723
- User Summary Screen726
  - User Add/Edit Screen726
- User Group Summary Screen729
  - Group Add/Edit Screen730
- Setting Screen731
  - Default User Authentication Timeout Settings Edit Screens734
  - User Aware Login Example736
- User /Group Technical Reference737
  - Addresses739
Chapter 41 Addresses739
- Overview739
  - What You Can Do in this Chapter739
  - What You Need to Know739
- Address Summary Screen739
  - Address Add/Edit Screen741
- Address Group Summary Screen742
  - Address Group Add/Edit Screen743
- Services745
Chapter 42 Services745
- Overview745
  - What You Can Do in this Chapter745
  - What You Need to Know745
- The Service Summary Screen746
  - The Service Add/Edit Screen748
- The Service Group Summary Screen748
  - The Service Group Add/Edit Screen750
- Schedules751
Chapter 43 Schedules751
- Overview751
  - What You Can Do in this Chapter751
  - What You Need to Know751
- The Schedule Summary Screen752
Chapter 44 AAA Server757
- Overview757
- Active Directory or LDAP Server Summary761
  - Adding an Active Directory or LDAP Server761
- RADIUS Server Summary763
  - Adding a RADIUS Server765
Chapter 45 Authentication Method767
- Overview767
- Authentication Method Objects768
  - Creating an Authentication Method Object769
- Certificates773
Chapter 46 Certificates773
- Overview773
- The My Certificates Screen777
- The Trusted Certificates Screen787
  - The Trusted Certificates Edit Screen788
  - The Trusted Certificates Import Screen792
- Certificates Technical Reference793
- ISP Accounts795
Chapter 47 ISP Accounts795
- Overview795
  - What You Can Do in this Chapter795
- ISP Account Summary795
  - ISP Account Edit796
  - Stac Compression798
- SSL Application799
Chapter 48 SSL Application799
- Overview799
- The SSL Application Screen801
  - Creating/Editing a Web-Based SSL Application Object802
  - Creating/Editing a File Sharing SSL Application Object804
- Endpoint Security807
Chapter 49 Endpoint Security807
- Overview807
  - What You Can Do in this Chapter808
  - What You Need to Know808
- Endpoint Security Screen809
- Endpoint Security Add/Edit810
Chapter 50 System815
- Overview815
  - What You Can Do in this Chapter815
- Host Name816
System Name816
- USB Storage817
- Date and Time818
  - Pre-Defined NTP Time Servers List820
  - Time Server Synchronization821
- Console Port Speed822
- DNS Overview822
- WWW Overview830
- Ssh847
- Telnet852
  - Configuring Telnet853
- Ftp854
  - Configuring FTP854
- Snmp856
Chapter 51 Log and Report867
- Overview867
  - What You Can Do in this Chapter867
- Email Daily Report867
- Log Setting Screens869
Chapter 52 File Manager887
- Overview887
- The Configuration File Screen890
- The Firmware Package Screen894
- The Shell Script Screen896
  - Diagnostics899
Chapter 53 Diagnostics899
- Overview899
  - What You Can Do in this Chapter899
- The Diagnostic Screen899
  - The Diagnostics Files Screen900
- The Packet Capture Screen901
  - The Packet Capture Files Screen904
  - Example of Viewing a Packet Capture File905
- Core Dump Screen906
  - Core Dump Files Screen906
- The System Log Screen907
- Packet Flow Explore909
Chapter 54 Packet Flow Explore909
- Overview909
  - What You Can Do in this Chapter909
- The Routing Status Screen909
- The SNAT Status Screen913
- Reboot917
Chapter 55 Reboot917
- Overview917
  - What You Need to Know917
- The Reboot Screen917
- Shutdown919
Chapter 56 Shutdown919
- Overview919
  - What You Need to Know919
- The Shutdown Screen919
- Troubleshooting921
Chapter 57 Troubleshooting921
- Troubleshooting922
- Resetting the Zywall939
- System-Default.conf939
- Getting more Troubleshooting Help940
Chapter 58 Product Specifications941
- Static Routes942
- PCMCIA Card Installation947
Appendix A Log Descriptions949
Appendix B Common Services1015
Protocol1015
Syslog1017
Appendix C Displaying Anti-Virus Alert Messages in Windows1019
Appendix D Importing Certificates1025
Appendix D Importing Certificates1026
Appendix E Wireless Lans1051
- Wireless Lan Topologies1051
- Fragmentation Threshold1055
- Preamble Type1055
- Wireless Security Overview1056
- Dynamic Wep Key Exchange1059
- Security Parameters Summary1064
- Antenna Characteristics1065
- Types of Antennas for Wlan1065
- Positioning Antennas1066
Appendix F Open Software Announcements1067
Appendix G Legal Information1125
Appendix G Legal Information1126
- Zyxel Limited Warranty1127
Index1129
- SSL Policy1136
- And OSPF1137
And RIP1137
- And ALG1137
- Statistics1139
Types1140
- Static DHCP1140
Metric1140
- Bandwidth1140
- Anti-Virus1151
- Application Patrol1151
Idp1151
- Traffic1151

ZyXEL Communications ZyWALL USG 300 - Profiles: Packet Inspection; Profile > Group View Screen

Table of Contents

Other manuals for ZyXEL Communications ZyWALL USG 300

Related product manuals