ZyXEL Communications ZyWALL 1050 User manual

www.zyxel.com
ZyWALL 1050
Internet Security Appliance
User’s Guide
Version 2.11
11/2008
Edition 1
DEFAULT LOGIN
LAN Port 1
IP Address https://192.168.1.1
User Name admin
Password 1234

About This User's Guide
ZyWALL 1050 User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to configure the ZyWALL using the Web
Configurator.
How To Use This Guide
•ReadChapter 1 on page 53 chapter for an overview of features available on the ZyWALL.
•ReadChapter 3 on page 65 for web browser requirements and an introduction to the main
components, icons and menus in the ZyWALL Web Configurator.
•ReadChapter 4 on page 75 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
• It is highly recommended you read Chapter 5 on page 107 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a feature
and how to use that feature.
• It is highly recommended you read Chapter 6 on page 123 for ZyWALL application
examples.
• Subsequent chapters are arranged by menu item as defined in the Web Configurator. Read
each chapter carefully for detailed information on that menu item.
• To find specific information in this guide, use the Contents Overview, the Table of
Contents, the Index, or search the PDF file. E-mail [email protected] if you
cannot find the information you require.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the Web Configurator wizards. (See the wizard
real time help for information on configuring each screen.) It contains a connection
diagram, default settings, handy checklists and information on setting up your network
and configuring for Internet access.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
"It is recommended you use the Web Configurator to configure the ZyWALL.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disc

About This User's Guide
ZyWALL 1050 User’s Guide
4
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]
Disclaimer
Graphics in this book may differ slightly from the product due to differences in operating
systems, operating system versions, or if you installed updated firmware/software for your
device. Every effort has been made to ensure that the information in this manual is accurate.

Document Conventions
ZyWALL 1050 User’s Guide 5
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL 1050 may be referred to as the “ZyWALL”, the “device”, the “system” or
the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL 1050 User’s Guide
6
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router

Safety Warnings
ZyWALL 1050 User’s Guide 7
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug
to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE
INSTRUCTIONS. Dispose them at the applicable collection point for the recycling of
electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

Safety Warnings
ZyWALL 1050 User’s Guide
8
This product is recyclable. Dispose of it properly.

Contents Overview
ZyWALL 1050 User’s Guide 9
Contents Overview
Getting Started .......................................................................................................................51
Introducing the ZyWALL ............................................................................................................ 53
Features and Applications ......................................................................................................... 57
Web Configurator ....................................................................................................................... 65
Wizard Setup ............................................................................................................................. 75
Configuration Basics ................................................................................................................ 107
Tutorials ................................................................................................................................... 123
Status ....................................................................................................................................... 153
Registration ............................................................................................................................. 167
Signature Update .....................................................................................................................173
Network .................................................................................................................................179
Interface ................................................................................................................................... 181
Trunks ......................................................................................................................................231
Policy and Static Routes .......................................................................................................... 239
Routing Protocols .................................................................................................................... 251
Zones ....................................................................................................................................... 261
DDNS ...................................................................................................................................... 265
Virtual Servers ......................................................................................................................... 271
HTTP Redirect ........................................................................................................................ 285
ALG ......................................................................................................................................... 289
IP/MAC Binding ....................................................................................................................... 297
Firewall ..................................................................................................................................303
Firewall ....................................................................................................................................305
VPN ........................................................................................................................................319
IPSec VPN ............................................................................................................................... 321
SSL VPN ................................................................................................................................. 355
SSL User Screens ................................................................................................................... 365
SSL User Application Screens ................................................................................................ 371
SSL User File Sharing ............................................................................................................. 373
L2TP VPN ................................................................................................................................ 379
L2TP VPN Example .................................................................................................................383
Application Patrol ................................................................................................................ 411
Application Patrol .....................................................................................................................413

Contents Overview
ZyWALL 1050 User’s Guide
10
Anti-X ....................................................................................................................................437
Anti-Virus ................................................................................................................................. 439
IDP .......................................................................................................................................... 453
ADP ........................................................................................................................................ 481
Content Filtering ..................................................................................................................... 497
Content Filter Reports ............................................................................................................. 519
Anti-Spam ................................................................................................................................ 527
Device HA .............................................................................................................................541
Device HA ............................................................................................................................... 543
Objects ..................................................................................................................................559
User/Group .............................................................................................................................. 561
Addresses ............................................................................................................................... 575
Services ................................................................................................................................... 581
Schedules ................................................................................................................................ 587
AAA Server ............................................................................................................................. 593
Authentication Method ............................................................................................................. 603
Certificates ............................................................................................................................... 607
ISP Accounts ...........................................................................................................................625
SSL Application ....................................................................................................................... 629
System ..................................................................................................................................635
System ...................................................................................................................................637
Maintenance, Troubleshooting, & Specifications .............................................................679
File Manager ........................................................................................................................... 681
Logs ........................................................................................................................................ 691
Reports ................................................................................................................................... 701
Diagnostics ............................................................................................................................. 717
Reboot ..................................................................................................................................... 719
Troubleshooting ....................................................................................................................... 721
Product Specifications ............................................................................................................. 725
Appendices and Index .........................................................................................................731

Table of Contents
ZyWALL 1050 User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................29
List of Tables...........................................................................................................................43
Part I: Getting Started............................................................................ 51
Chapter 1
Introducing the ZyWALL ........................................................................................................53
1.1 Overview and Key Default Settings ..................................................................................... 53
1.2 Front Panel .......................................................................................................................... 53
1.2.1 Front Panel LEDs ....................................................................................................... 54
1.3 Management Overview ........................................................................................................54
1.4 Starting and Stopping the ZyWALL ...................................................................................... 55
Chapter 2
Features and Applications.....................................................................................................57
2.1 Features .............................................................................................................................. 57
2.2 Packet Flow ......................................................................................................................... 59
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 59
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 60
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 60
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 60
2.3 Applications ......................................................................................................................... 60
2.3.1 VPN Connectivity ....................................................................................................... 60
2.3.2 SSL VPN Network Access ......................................................................................... 61
2.3.3 User-Aware Access Control ....................................................................................... 62
2.3.4 Multiple WAN Interfaces ............................................................................................. 63
2.3.5 Device HA .................................................................................................................. 63

Table of Contents
ZyWALL 1050 User’s Guide
12
Chapter 3
Web Configurator....................................................................................................................65
3.1 Web Configurator Requirements ......................................................................................... 65
3.2 Web Configurator Access ....................................................................................................65
3.3 Web Configurator Main Screen ........................................................................................... 67
3.3.1 Title Bar ...................................................................................................................... 67
3.3.2 Navigation Panel ........................................................................................................68
3.3.3 Main Window ..............................................................................................................72
3.3.4 Message Bar ..............................................................................................................72
Chapter 4
Wizard Setup...........................................................................................................................75
4.1 Wizard Setup Overview ....................................................................................................... 75
4.2 Installation Setup, One ISP ................................................................................................. 76
4.2.1 Ethernet: Auto IP Address Assignment ...................................................................... 77
4.2.2 Ethernet: Static IP Address Assignment .................................................................... 78
4.2.3 PPP Over Ethernet: Auto IP Address Assignment ..................................................... 80
4.2.4 PPP Over Ethernet: Static IP Address Assignment ................................................... 82
4.2.5 PPTP: Auto IP Address Assignment .......................................................................... 84
4.2.6 PPTP: Static IP Address Assignment ......................................................................... 87
4.2.7 Internet Access - Finish ............................................................................................. 89
4.3 Device Registration .......................................................................................................... 89
4.4 Installation Setup, Two Internet Service Providers .............................................................. 91
4.4.1 Internet Access Wizard Setup Complete ................................................................... 93
4.5 VPN Setup ........................................................................................................................... 93
4.6 VPN Wizards ...................................................................................................................... 94
4.6.1 VPN Express Wizard .................................................................................................. 95
4.6.2 VPN Advanced Wizard ............................................................................................... 99
4.6.3 VPN Advanced Wizard - Finish ............................................................................... 105
Chapter 5
Configuration Basics............................................................................................................107
5.1 Object-based Configuration ............................................................................................... 107
5.2 Zones, Interfaces, and Physical Ports ............................................................................... 108
5.2.1 Interface Types .........................................................................................................108
5.2.2 Default Interface and Zone Configuration ................................................................ 109
5.3 Terminology in the ZyWALL ................................................................................................110
5.4 Feature Configuration Overview ........................................................................................110
5.4.1 Feature ......................................................................................................................110
5.4.2 Interface ....................................................................................................................111
5.4.3 Trunks .......................................................................................................................112
5.4.4 IPSec VPN ................................................................................................................112
5.4.5 SSL VPN ...................................................................................................................112

Table of Contents
ZyWALL 1050 User’s Guide 13
5.4.6 L2TP VPN .................................................................................................................112
5.4.7 Zones ........................................................................................................................113
5.4.8 Device HA .................................................................................................................113
5.4.9 DDNS ........................................................................................................................113
5.4.10 Policy Routes ..........................................................................................................113
5.4.11 Static Routes ...........................................................................................................114
5.4.12 Firewall ....................................................................................................................114
5.4.13 Application Patrol ....................................................................................................115
5.4.14 Anti-Virus .................................................................................................................116
5.4.15 IDP ..........................................................................................................................116
5.4.16 ADP .........................................................................................................................116
5.4.17 Content Filter ...........................................................................................................116
5.4.18 Anti-Spam ................................................................................................................117
5.4.19 Virtual Server (Port Forwarding) .............................................................................117
5.4.20 HTTP Redirect ........................................................................................................117
5.4.21 ALG .........................................................................................................................118
5.5 Objects ...............................................................................................................................118
5.5.1 User/Group ................................................................................................................119
5.6 System Management and Maintenance .............................................................................119
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM ...................119
5.6.2 File Manager ............................................................................................................120
5.6.3 Licensing Registration .............................................................................................. 120
5.6.4 Licensing Update ..................................................................................................... 120
5.6.5 Logs and Reports ..................................................................................................... 120
5.6.6 Diagnostics ...............................................................................................................121
Chapter 6
Tutorials.................................................................................................................................123
6.1 Interfaces and Zones ......................................................................................................... 123
6.1.1 Set up Port Grouping ............................................................................................... 123
6.1.2 Set up Ethernet Interfaces ....................................................................................... 125
6.1.3 WAN Trunk ...............................................................................................................127
6.1.4 Zones ....................................................................................................................... 128
6.2 IPSec VPN ......................................................................................................................... 130
6.2.1 Set up the Ethernet Interfaces and Zones ............................................................... 130
6.2.2 Set up the VPN Gateway .........................................................................................130
6.2.3 Set up the VPN Connection ..................................................................................... 131
6.2.4 Set up the Policy Route for the VPN Tunnel ............................................................ 132
6.2.5 Set up the Zone for the VPN Tunnel ........................................................................ 133
6.3 How to Configure User-aware Access Control .................................................................. 134
6.3.1 Set Up User Accounts .............................................................................................. 134
6.3.2 Set Up User Groups ................................................................................................. 134
6.3.3 Set Up User Authentication Using the RADIUS Server ........................................... 135

Table of Contents
ZyWALL 1050 User’s Guide
14
6.3.4 Set Up Web Surfing Policies With Bandwidth Restrictions ...................................... 136
6.3.5 Set Up MSN Policies ................................................................................................ 138
6.3.6 Set Up Firewall Rules ............................................................................................... 139
6.4 How to Configure Service Control ..................................................................................... 140
6.4.1 Allow HTTPS Administrator Access Only From the LAN ......................................... 140
6.5 How to Allow Incoming H.323 Peer-to-peer Calls ............................................................. 143
6.5.1 Turn On the ALG ......................................................................................................144
6.5.2 Set Up a Virtual Server Policy For H.323 ................................................................. 144
6.5.3 Set Up a Firewall Rule For H.323 ............................................................................ 145
6.6 How to Use Active-Passive Device HA .............................................................................146
6.6.1 Before You Start ....................................................................................................... 147
6.6.2 Configure Device HA on the Master ZyWALL .......................................................... 147
6.6.3 Configure the Backup ZyWALL ................................................................................ 148
6.6.4 Deploy the Backup ZyWALL .................................................................................... 150
6.6.5 Check Your Device HA Setup .................................................................................. 150
6.7 How to Allow Public Access to a Server ............................................................................ 150
6.7.1 Create the Address Objects ..................................................................................... 151
6.7.2 Configure a Virtual Server ........................................................................................ 151
Chapter 7
Status.....................................................................................................................................153
7.1 Overview ............................................................................................................................ 153
7.1.1 What You Can Do in the Status Screens .................................................................. 153
7.2 The Status Screen .............................................................................................................154
7.2.1 The CPU Usage Screen ........................................................................................... 158
7.2.2 The Memory Usage Screen ..................................................................................... 159
7.2.3 The Session Usage Screen ..................................................................................... 160
7.2.4 The VPN Status Screen ........................................................................................... 161
7.2.5 The DHCP Table Screen .......................................................................................... 162
7.2.6 The Port Statistics Screen ........................................................................................ 163
7.2.7 The Port Statistics Graph Screen ............................................................................. 164
7.2.8 The Current Users Screen ....................................................................................... 165
Chapter 8
Registration...........................................................................................................................167
8.1 Overview ............................................................................................................................ 167
8.1.1 What You Can Do in the Registration Screens ........................................................ 167
8.1.2 What you Need to Know About Service Registration ............................................... 167
8.2 The Registration Screen ....................................................................................................168
8.3 The Service Screen ...........................................................................................................170
Chapter 9
Signature Update ..................................................................................................................173

Table of Contents
ZyWALL 1050 User’s Guide 15
9.1 Overview ............................................................................................................................ 173
9.1.1 What You Can Do in the Update Screens ................................................................ 173
9.1.2 What you Need to Know About Signature Updates ................................................. 173
9.2 The Antivirus Update Screen ............................................................................................. 174
9.3 The IDP/AppPatrol Update Screen .................................................................................... 175
9.4 The System Protect Update Screen ................................................................................. 177
Part II: Network..................................................................................... 179
Chapter 10
Interface.................................................................................................................................181
10.1 Interface Overview ........................................................................................................... 181
10.1.1 What You Can Do in the Interface Screens ............................................................181
10.1.2 What You Need to Know About Interfaces ............................................................. 182
10.2 Interface Summary Screen .............................................................................................. 184
10.3 Port Grouping ................................................................................................................. 186
10.3.1 Port Grouping Overview ......................................................................................... 186
10.3.2 Port Grouping Screen ............................................................................................188
10.4 Ethernet Summary Screen .............................................................................................. 189
10.4.1 Ethernet Edit .........................................................................................................190
10.5 The Static DHCP Screen .................................................................................................195
10.6 The PPP Interfaces Screen .............................................................................................196
10.6.1 PPP Interface Edit Screen ..................................................................................... 198
10.7 Cellular Configuration Screen (3G) ................................................................................. 201
10.7.1 Cellular Add/Edit Screen ........................................................................................ 203
10.8 Cellular Status Screen .....................................................................................................207
10.9 VLAN Interfaces .............................................................................................................209
10.9.1 VLAN Overview ......................................................................................................209
10.9.2 VLAN Interfaces Overview ..................................................................................... 210
10.9.3 VLAN Summary Screen ..........................................................................................211
10.9.4 VLAN Add/Edit ...................................................................................................... 212
10.10 Virtual Interfaces ........................................................................................................... 216
10.10.1 Virtual Interfaces Add/Edit .................................................................................... 216
10.11 Bridge Interfaces ........................................................................................................... 217
10.11.1 Bridge Overview ................................................................................................... 217
10.11.2 Bridge Interface Overview .................................................................................... 218
10.11.3 Bridge Summary ...................................................................................................219
10.11.4 Bridge Add/Edit ................................................................................................... 220
10.12 Auxiliary Interface ......................................................................................................... 224
10.12.1 Auxiliary Interface Overview ................................................................................. 224
10.12.2 Configuring the Auxiliary Interface ....................................................................... 224

Table of Contents
ZyWALL 1050 User’s Guide
16
10.13 Interface Technical Reference ....................................................................................... 226
Chapter 11
Trunks....................................................................................................................................231
11.1 Overview .......................................................................................................................... 231
11.1.1 What You Can Do in the Trunk Screens ................................................................. 231
11.1.2 What You Need to Know About Trunks ..................................................................231
11.2 The Trunk Summary Screen ............................................................................................ 234
11.3 Configuring a Trunk ........................................................................................................ 235
11.4 Trunk Technical Reference .............................................................................................. 237
Chapter 12
Policy and Static Routes......................................................................................................239
12.1 Policy and Static Routes Overview .................................................................................. 239
12.1.1 What You Can Do in the Policy and Static Route Screens ..................................... 240
12.1.2 What You Need to Know About Policy and Static Routing ..................................... 240
12.2 Policy Route Screen ........................................................................................................ 241
12.2.1 Policy Route Edit Screen .......................................................................................243
12.3 IP Static Route Screen ....................................................................................................246
12.3.1 Static Route Add/Edit Screen ................................................................................. 246
12.4 Policy Routing Technical Reference ................................................................................ 247
Chapter 13
Routing Protocols.................................................................................................................251
13.1 Routing Protocols Overview ............................................................................................ 251
13.1.1 What You Can Do in the RIP and OSPF Screens .................................................. 251
13.1.2 What You Need to Know About Routing Protocols ................................................ 251
13.2 The RIP Screen ...............................................................................................................252
13.3 The OSPF Screen ...........................................................................................................253
13.3.1 Configuring the OSPF Screen ................................................................................ 256
13.3.2 OSPF Area Add/Edit Screen .................................................................................258
13.4 Routing Protocol Technical Reference ............................................................................259
Chapter 14
Zones .....................................................................................................................................261
14.1 Zones Overview ............................................................................................................... 261
14.1.1 What You Can Do in the Zones Screens ................................................................ 261
14.1.2 What You Need to Know About Zones ................................................................... 262
14.2 The Zone Screen .............................................................................................................263
14.3 Zone Add/Edit ................................................................................................................. 263
Chapter 15
DDNS......................................................................................................................................265

Table of Contents
ZyWALL 1050 User’s Guide 17
15.1 DDNS Overview ..............................................................................................................265
15.1.1 What You Can Do in the DDNS Screens ............................................................... 265
15.1.2 What You Need to Know About DDNS ................................................................... 265
15.2 The DDNS Screen ...........................................................................................................266
15.2.1 The Dynamic DNS Add/Edit Screen ...................................................................... 267
15.3 The DDNS Status Screen ................................................................................................ 270
Chapter 16
Virtual Servers.......................................................................................................................271
16.1 Virtual Servers Overview ................................................................................................. 271
16.1.1 What You Can Do in the Virtual Server Screens .................................................... 271
16.1.2 What You Need to Know About Virtual Servers ..................................................... 271
16.2 The Virtual Server Screen ............................................................................................... 272
16.2.1 The Virtual Server Add/Edit Screen ....................................................................... 273
16.3 NAT 1:1 and NAT Loopback Examples ........................................................................... 276
Chapter 17
HTTP Redirect......................................................................................................................285
17.1 Overview .......................................................................................................................... 285
17.1.1 What You Can Do in the HTTP Redirect Screens .................................................. 285
17.1.2 What You Need to Know About HTTP Redirect .....................................................286
17.2 The HTTP Redirect Screen ............................................................................................. 287
17.2.1 The HTTP Redirect Edit Screen ............................................................................. 288
Chapter 18
ALG ........................................................................................................................................289
18.1 ALG Overview ................................................................................................................. 289
18.1.1 What You Can Do in the ALG Screen .................................................................... 290
18.1.2 What You Need to Know About ALG ..................................................................... 290
18.1.3 Before You Begin ................................................................................................... 292
18.2 The ALG Screen ..............................................................................................................293
18.3 ALG Technical Reference ................................................................................................294
Chapter 19
IP/MAC Binding.....................................................................................................................297
19.1 IP/MAC Binding Overview ............................................................................................... 297
19.1.1 What You Can Do in the IP/MAC Binding Screens ................................................ 297
19.1.2 What You Need to Know About IP/MAC Binding ................................................... 298
19.2 IP/MAC Binding Summary ............................................................................................... 298
19.2.1 IP/MAC Binding Edit ...............................................................................................299
19.2.2 Static DHCP Edit .................................................................................................... 300
19.3 IP/MAC Binding Exempt List ........................................................................................... 300
19.4 IP/MAC Binding Monitor ..................................................................................................301

Table of Contents
ZyWALL 1050 User’s Guide
18
Part III: Firewall .................................................................................... 303
Chapter 20
Firewall...................................................................................................................................305
20.1 Overview .......................................................................................................................... 305
20.1.1 What You Can Do in the Firewall Screens ............................................................. 305
20.1.2 What You Need to Know About the Firewall .......................................................... 306
20.1.3 Firewall Rule Example Applications ....................................................................... 308
20.1.4 Firewall Rule Configuration Example .....................................................................310
20.2 The Firewall Screen ......................................................................................................... 312
20.2.1 Configuring the Firewall Screen ............................................................................. 312
20.2.2 The Firewall Edit Screen ........................................................................................ 315
20.3 The Session Limit Screen ................................................................................................ 316
20.3.1 The Session Limit Edit Screen ............................................................................... 318
Part IV: VPN .......................................................................................... 319
Chapter 21
IPSec VPN..............................................................................................................................321
21.1 IPSec VPN Overview .......................................................................................................321
21.1.1 What You Can Do in the IPSec VPN Screens ........................................................ 321
21.1.2 What You Need to Know About IPSec VPN ........................................................... 322
21.1.3 Before You Begin ................................................................................................... 324
21.2 The VPN Connection Screen .......................................................................................... 324
21.2.1 The VPN Connection Add/Edit (IKE) Screen ......................................................... 327
21.2.2 The VPN Connection Add/Edit Manual Key Screen .............................................. 332
21.3 The VPN Gateway Screen .............................................................................................. 335
21.3.1 The VPN Gateway Add/Edit Screen ...................................................................... 336
21.4 The VPN Concentrator Screen ........................................................................................ 340
21.4.1 The VPN Concentrator Add/Edit Screen ................................................................ 342
21.5 The SA Monitor Screen .................................................................................................. 343
21.6 IPSec VPN Background Information ............................................................................... 344
Chapter 22
SSL VPN.................................................................................................................................355
22.1 Overview .......................................................................................................................... 355
22.1.1 What You Can Do in the SSL VPN Screens ..........................................................355
22.1.2 What You Need to Know About SSL VPN ..............................................................355
22.2 The SSL Access Privilege Screen ................................................................................... 358
22.2.1 The SSL Access Policy Add/Edit Screen .............................................................. 359
22.3 The SSL Connection Monitor Screen .............................................................................. 361

Table of Contents
ZyWALL 1050 User’s Guide 19
22.4 The SSL Global Setting Screen ....................................................................................... 362
22.4.1 How to Upload a Custom Logo .............................................................................. 363
22.5 Establishing an SSL VPN Connection ............................................................................. 364
Chapter 23
SSL User Screens.................................................................................................................365
23.1 Overview .......................................................................................................................... 365
23.1.1 What You Need to Know About the SSL User Screens ......................................... 365
23.2 Remote User Login .......................................................................................................... 366
23.3 The SSL VPN User Screens ........................................................................................... 368
23.4 Bookmarking the ZyWALL ............................................................................................... 369
23.5 Logging Out of the SSL VPN User Screens .................................................................... 369
Chapter 24
SSL User Application Screens ............................................................................................371
24.1 SSL User Application Screens Overview ........................................................................ 371
24.2 The Application Screen ................................................................................................... 371
Chapter 25
SSL User File Sharing ..........................................................................................................373
25.1 Overview .......................................................................................................................... 373
25.1.1 What You Need to Know About the SSL VPN File Sharing ................................... 373
25.2 The Main File Sharing Screen .........................................................................................374
25.3 Opening a File or Folder ..................................................................................................374
25.3.1 Downloading a File ................................................................................................. 375
25.3.2 Saving a File ..........................................................................................................376
25.4 Creating a New Folder .....................................................................................................376
25.5 Renaming a File or Folder ............................................................................................... 377
25.6 Deleting a File or Folder ..................................................................................................377
25.7 Uploading a File ............................................................................................................... 378
Chapter 26
L2TP VPN...............................................................................................................................379
26.1 Overview .......................................................................................................................... 379
26.1.1 What You Can Do in the L2TP VPN Screens ......................................................... 379
26.1.2 What You Need to Know About L2TP VPN ............................................................379
26.2 L2TP VPN Screen ...........................................................................................................381
26.3 L2TP VPN Session Monitor Screen ................................................................................ 382
Chapter 27
L2TP VPN Example...............................................................................................................383
27.1 L2TP VPN Example .........................................................................................................383
27.2 Configuring the Default L2TP VPN Gateway Example .................................................... 384

Table of Contents
ZyWALL 1050 User’s Guide
20
27.3 Configuring the Default L2TP VPN Connection Example ................................................ 385
27.4 Configuring the L2TP VPN Settings Example ................................................................. 385
27.5 Configuring the Policy Route for L2TP Example ............................................................. 387
27.6 Configuring L2TP VPN in Windows XP and 2000 ........................................................... 387
27.6.1 Configuring L2TP in Windows XP .......................................................................... 388
27.6.2 Configuring L2TP in Windows 2000 ....................................................................... 394
Part V: Application Patrol.....................................................................411
Chapter 28
Application Patrol.................................................................................................................413
28.1 Overview .......................................................................................................................... 413
28.1.1 What You Can Do in the Application Patrol Screens ..............................................413
28.1.2 What You Need to Know About Application Patrol ................................................ 414
28.1.3 Application Patrol Bandwidth Management Examples ........................................... 418
28.2 Application Patrol General Screen .................................................................................. 422
28.3 Application Patrol Applications ........................................................................................ 423
28.3.1 The Application Patrol Edit Screen ........................................................................ 424
28.3.2 The Application Patrol Policy Edit Screen ............................................................. 427
28.4 The Other Applications Screen ........................................................................................ 429
28.4.1 The Other Applications Add/Edit Screen ................................................................ 431
28.5 Application Patrol Statistics .............................................................................................432
28.5.1 Application Patrol Statistics: General Setup ........................................................... 433
28.5.2 Application Patrol Statistics: Bandwidth Statistics .................................................. 433
28.5.3 Application Patrol Statistics: Protocol Statistics ..................................................... 434
Part VI: Anti-X....................................................................................... 437
Chapter 29
Anti-Virus...............................................................................................................................439
29.1 Overview .......................................................................................................................... 439
29.1.1 What You Can Do in the Anti-Virus Screens .......................................................... 439
29.1.2 What You Need to Know About Anti-Virus ............................................................. 440
29.1.3 Before You Begin ................................................................................................... 441
29.2 Anti-Virus Summary Screen ............................................................................................ 442
29.2.1 Anti-Virus Policy Add or Edit Screen ...................................................................... 444
29.3 Anti-Virus Black List .........................................................................................................446
29.4 Anti-Virus Black List or White List Add/Edit ..................................................................... 447
29.5 Anti-Virus White List ........................................................................................................448
29.6 Signature Searching ........................................................................................................449