ZyXEL Communications Unified Security Gateway ZyWALL 300 User manual

www.zyxel.com
ZyWALL USG 300
Unified Security Gateway
User’s Guide
Version 2.11
11/2008
Edition 1
DEFAULT LOGIN
LAN Port 1
IP Address http://192.168.1.1
User Name admin
Password 1234

About This User's Guide
ZyWALL USG 300 User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to want to configure the ZyWALL using the
Web Configurator.
How To Use This Guide
•ReadChapter 1 on page 53 chapter for an overview of features available on the ZyWALL.
•ReadChapter 3 on page 65 for web browser requirements and an introduction to the main
components, icons and menus in the ZyWALL Web Configurator.
•ReadChapter 4 on page 75 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
• It is highly recommended you read Chapter 5 on page 107 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a feature
and how to use that feature.
• It is highly recommended you read Chapter 6 on page 123 for ZyWALL application
examples.
• Subsequent chapters are arranged by menu item as defined in the Web Configurator. Read
each chapter carefully for detailed information on that menu item.
• To find specific information in this guide, use the Contents Overview, the Table of
Contents, the Index, or search the PDF file. E-mail [email protected] if you
cannot find the information you require.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the Web Configurator wizards. (See the wizard
real time help for information on configuring each screen.) It contains a connection
diagram, default settings, handy checklists and information on setting up your network
and configuring for Internet access.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
"It is recommended you use the Web Configurator to configure the ZyWALL.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disc

About This User's Guide
ZyWALL USG 300 User’s Guide
4
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]
Disclaimer
Graphics in this book may differ slightly from the product due to differences in operating
systems, operating system versions, or if you installed updated firmware/software for your
device. Every effort has been made to ensure that the information in this manual is accurate.

Document Conventions
ZyWALL USG 300 User’s Guide 5
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL USG 300 may be referred to as the “ZyWALL”, the “device”, the “system”
or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL USG 300 User’s Guide
6
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router

Safety Warnings
ZyWALL USG 300 User’s Guide 7
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug
to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

Safety Warnings
ZyWALL USG 300 User’s Guide
8
This product is recyclable. Dispose of it properly.

Contents Overview
ZyWALL USG 300 User’s Guide 9
Contents Overview
Getting Started .......................................................................................................................51
Introducing the ZyWALL ............................................................................................................ 53
Features and Applications ......................................................................................................... 57
Web Configurator ....................................................................................................................... 65
Wizard Setup ............................................................................................................................. 75
Configuration Basics ................................................................................................................107
Tutorials ................................................................................................................................... 123
Status .......................................................................................................................................151
Registration ............................................................................................................................. 165
Signature Update ..................................................................................................................... 171
Network .................................................................................................................................177
Interface ................................................................................................................................... 179
Trunks ...................................................................................................................................... 243
Policy and Static Routes .......................................................................................................... 251
Routing Protocols .................................................................................................................... 261
Zones .......................................................................................................................................273
DDNS ...................................................................................................................................... 277
Virtual Servers ......................................................................................................................... 283
HTTP Redirect ........................................................................................................................295
ALG .........................................................................................................................................299
IP/MAC Binding .................................................................................................................. 307
Firewall ..................................................................................................................................313
Firewall .................................................................................................................................... 315
VPN ........................................................................................................................................331
IPSec VPN ............................................................................................................................... 333
SSL VPN ................................................................................................................................. 367
SSL User Screens ................................................................................................................... 377
SSL User Application Screens ................................................................................................ 383
SSL User File Sharing ............................................................................................................. 385
L2TP VPN ................................................................................................................................ 391
L2TP VPN Example ................................................................................................................. 395
Application Patrol ................................................................................................................421
Application Patrol ..................................................................................................................... 423

Contents Overview
ZyWALL USG 300 User’s Guide
10
Anti-X ....................................................................................................................................447
Anti-Virus ................................................................................................................................. 449
IDP .......................................................................................................................................... 463
ADP ........................................................................................................................................ 493
Content Filtering ......................................................................................................................511
Content Filter Reports ............................................................................................................. 533
Anti-Spam ................................................................................................................................ 541
Device HA .............................................................................................................................555
Device HA ............................................................................................................................... 557
Objects ..................................................................................................................................573
User/Group .............................................................................................................................. 575
Addresses ............................................................................................................................... 589
Services ...................................................................................................................................595
Schedules ................................................................................................................................ 601
AAA Server ............................................................................................................................. 607
Authentication Method ............................................................................................................. 617
Certificates ............................................................................................................................... 621
ISP Accounts ........................................................................................................................... 639
SSL Application ....................................................................................................................... 643
System ..................................................................................................................................649
System ................................................................................................................................... 651
Maintenance, Troubleshooting, & Specifications .............................................................693
File Manager ...........................................................................................................................695
Logs ........................................................................................................................................ 705
Reports ................................................................................................................................... 717
Diagnostics ............................................................................................................................. 731
Reboot .....................................................................................................................................733
Troubleshooting ....................................................................................................................... 735
Product Specifications ............................................................................................................. 739
Appendices and Index .........................................................................................................745

Table of Contents
ZyWALL USG 300 User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................29
List of Tables...........................................................................................................................43
Part I: Getting Started............................................................................ 51
Chapter 1
Introducing the ZyWALL ........................................................................................................53
1.1 Overview and Key Default Settings ..................................................................................... 53
1.2 Front Panel .......................................................................................................................... 53
1.2.1 Front Panel LEDs ....................................................................................................... 54
1.3 Management Overview ........................................................................................................54
1.4 Starting and Stopping the ZyWALL ...................................................................................... 55
Chapter 2
Features and Applications.....................................................................................................57
2.1 Features .............................................................................................................................. 57
2.2 Packet Flow ......................................................................................................................... 59
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 59
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 60
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 60
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 60
2.3 Applications ......................................................................................................................... 60
2.3.1 VPN Connectivity ....................................................................................................... 60
2.3.2 SSL VPN Network Access ......................................................................................... 61
2.3.3 User-Aware Access Control ....................................................................................... 62
2.3.4 Multiple WAN Interfaces ............................................................................................. 63
2.3.5 Device HA .................................................................................................................. 63

Table of Contents
ZyWALL USG 300 User’s Guide
12
Chapter 3
Web Configurator....................................................................................................................65
3.1 Web Configurator Requirements ......................................................................................... 65
3.2 Web Configurator Access ....................................................................................................65
3.3 Web Configurator Main Screen ........................................................................................... 67
3.3.1 Title Bar ...................................................................................................................... 68
3.3.2 Navigation Panel ........................................................................................................68
3.3.3 Main Window ..............................................................................................................72
3.3.4 Message Bar ..............................................................................................................72
Chapter 4
Wizard Setup...........................................................................................................................75
4.1 Wizard Setup Overview ....................................................................................................... 75
4.2 Installation Setup, One ISP ................................................................................................. 76
4.2.1 Ethernet: Auto IP Address Assignment ...................................................................... 77
4.2.2 Ethernet: Static IP Address Assignment .................................................................... 78
4.2.3 PPPoE: Auto IP Address Assignment ........................................................................ 80
4.2.4 PPPoE: Static IP Address Assignment ...................................................................... 82
4.2.5 PPTP: Auto IP Address Assignment .......................................................................... 84
4.2.6 PPTP: Static IP Address Assignment ......................................................................... 87
4.2.7 Internet Access - Finish ............................................................................................. 89
4.3 Device Registration .......................................................................................................... 89
4.4 Installation Setup, Two Internet Service Providers .............................................................. 91
4.4.1 Internet Access Wizard Setup Complete ................................................................... 93
4.5 VPN Setup ........................................................................................................................... 93
4.6 VPN Wizards ...................................................................................................................... 94
4.6.1 VPN Express Wizard .................................................................................................. 95
4.6.2 VPN Advanced Wizard ............................................................................................... 99
4.6.3 VPN Advanced Wizard - Finish ............................................................................... 105
Chapter 5
Configuration Basics............................................................................................................107
5.1 Object-based Configuration ............................................................................................... 107
5.2 Zones, Interfaces, and Physical Ports ............................................................................... 108
5.2.1 Interface Types .........................................................................................................108
5.2.2 Default Interface and Zone Configuration ................................................................109
5.3 Terminology in the ZyWALL ................................................................................................110
5.4 Feature Configuration Overview ........................................................................................111
5.4.1 Feature ......................................................................................................................111
5.4.2 Interface ....................................................................................................................111
5.4.3 Trunks .......................................................................................................................112
5.4.4 IPSec VPN ................................................................................................................112
5.4.5 SSL VPN ...................................................................................................................112

Table of Contents
ZyWALL USG 300 User’s Guide 13
5.4.6 L2TP VPN .................................................................................................................113
5.4.7 Zones ........................................................................................................................113
5.4.8 Device HA .................................................................................................................113
5.4.9 DDNS ........................................................................................................................113
5.4.10 Policy Routes ..........................................................................................................114
5.4.11 Static Routes ...........................................................................................................114
5.4.12 Firewall ....................................................................................................................115
5.4.13 Application Patrol ....................................................................................................115
5.4.14 Anti-Virus .................................................................................................................116
5.4.15 IDP ..........................................................................................................................116
5.4.16 ADP .........................................................................................................................116
5.4.17 Content Filter ...........................................................................................................116
5.4.18 Anti-Spam ................................................................................................................117
5.4.19 Virtual Server (Port Forwarding) .............................................................................117
5.4.20 HTTP Redirect ........................................................................................................118
5.4.21 ALG .........................................................................................................................118
5.5 Objects ...............................................................................................................................118
5.5.1 User/Group ................................................................................................................119
5.6 System Management and Maintenance .............................................................................119
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM .................. 120
5.6.2 File Manager ............................................................................................................ 120
5.6.3 Licensing Registration .............................................................................................. 120
5.6.4 Licensing Update ..................................................................................................... 121
5.6.5 Logs and Reports ..................................................................................................... 121
5.6.6 Diagnostics ............................................................................................................... 121
Chapter 6
Tutorials.................................................................................................................................123
6.1 How to Configure Interfaces, Port Grouping, and Zones ................................................... 123
6.1.1 Configure a WAN Ethernet Interface ........................................................................124
6.1.2 Configure Zones ....................................................................................................... 124
6.1.3 Configure Port Grouping .......................................................................................... 124
6.2 How to Configure Load Balancing ..................................................................................... 125
6.2.1 Set Up Available Bandwidth on Ethernet Interfaces ................................................ 126
6.2.2 Configure the WAN Trunk ........................................................................................126
6.3 How to Set Up an IPSec VPN Tunnel ................................................................................127
6.3.1 Set Up the VPN Gateway ......................................................................................... 128
6.3.2 Set Up the VPN Connection .....................................................................................129
6.3.3 Set Up the Policy Route for the VPN Tunnel ............................................................130
6.3.4 Configure Security Policies for the VPN Tunnel .......................................................132
6.4 How to Configure User-aware Access Control .................................................................. 132
6.4.1 Set Up User Accounts ..............................................................................................132
6.4.2 Set Up User Groups ................................................................................................. 133

Table of Contents
ZyWALL USG 300 User’s Guide
14
6.4.3 Set Up User Authentication Using the RADIUS Server ........................................... 133
6.4.4 Set Up Web Surfing Policies With Bandwidth Restrictions ...................................... 135
6.4.5 Set Up MSN Policies ................................................................................................ 137
6.4.6 Set Up Firewall Rules ............................................................................................... 137
6.5 How to Configure Service Control ..................................................................................... 139
6.5.1 Allow HTTPS Administrator Access Only From the LAN ......................................... 139
6.6 How to Allow Incoming H.323 Peer-to-peer Calls ............................................................. 141
6.6.1 Turn On the ALG ......................................................................................................142
6.6.2 Set Up a Virtual Server Policy For H.323 ................................................................. 142
6.6.3 Set Up a Firewall Rule For H.323 ............................................................................ 143
6.7 How to Use Active-Passive Device HA ............................................................................. 144
6.7.1 Before You Start .......................................................................................................145
6.7.2 Configure Device HA on the Master ZyWALL .......................................................... 145
6.7.3 Configure the Backup ZyWALL ................................................................................ 146
6.7.4 Deploy the Backup ZyWALL .................................................................................... 148
6.7.5 Check Your Device HA Setup ..................................................................................148
6.8 How to Allow Public Access to a Server ............................................................................ 148
6.8.1 Create the Address Objects ..................................................................................... 149
6.8.2 Configure a Virtual Server ........................................................................................ 149
Chapter 7
Status.....................................................................................................................................151
7.1 Overview ............................................................................................................................ 151
7.1.1 What You Can Do in the Status Screens .................................................................. 151
7.2 The Status Screen ............................................................................................................. 151
7.2.1 The CPU Usage Screen ........................................................................................... 155
7.2.2 The Memory Usage Screen .....................................................................................156
7.2.3 The Session Usage Screen .....................................................................................157
7.2.4 The VPN Status Screen ........................................................................................... 158
7.2.5 The DHCP Table Screen .......................................................................................... 159
7.2.6 The Port Statistics Screen ........................................................................................160
7.2.7 The Port Statistics Graph Screen ............................................................................. 162
7.2.8 The Current Users Screen .......................................................................................163
Chapter 8
Registration...........................................................................................................................165
8.1 Overview ............................................................................................................................ 165
8.1.1 What You Can Do in the Registration Screens ........................................................ 165
8.1.2 What you Need to Know About Service Registration ............................................... 165
8.2 The Registration Screen ....................................................................................................166
8.3 The Service Screen ........................................................................................................... 169
Chapter 9
Signature Update ..................................................................................................................171

Table of Contents
ZyWALL USG 300 User’s Guide 15
9.1 Overview ............................................................................................................................ 171
9.1.1 What You Can Do in the Update Screens ................................................................ 171
9.1.2 What you Need to Know About Signature Updates .................................................171
9.2 The Antivirus Update Screen ............................................................................................. 171
9.3 The IDP/AppPatrol Update Screen .................................................................................... 173
9.4 The System Protect Update Screen .................................................................................174
Part II: Network..................................................................................... 177
Chapter 10
Interface.................................................................................................................................179
10.1 Interface Overview ........................................................................................................... 179
10.1.1 What You Can Do in the Interface Screens ............................................................ 179
10.1.2 What You Need to Know About Interfaces ............................................................. 180
10.2 Interface Summary Screen .............................................................................................. 182
10.3 Port Grouping ................................................................................................................. 185
10.3.1 Port Grouping Overview ......................................................................................... 185
10.3.2 Port Grouping Screen ............................................................................................ 186
10.4 Ethernet Summary Screen ..............................................................................................187
10.4.1 Ethernet Edit .........................................................................................................188
10.5 The Static DHCP Screen ................................................................................................. 194
10.6 The PPP Interfaces Screen .............................................................................................194
10.6.1 PPP Interface Edit Screen .....................................................................................196
10.7 Cellular Configuration Screen (3G) ................................................................................. 198
10.7.1 Cellular Add/Edit Screen ........................................................................................ 200
10.8 Cellular Status Screen .....................................................................................................205
10.9 WLAN Interface General Screen ..................................................................................... 207
10.9.1 WLAN Add/Edit Screen .......................................................................................... 209
10.9.2 WLAN Add/Edit Screen: WEP Security .................................................................. 215
10.9.3 WLAN Add/Edit Screen: WPA-PSK/WPA2-PSK Security ...................................... 216
10.9.4 WLAN Add/Edit Screen: WPA/WPA2 Security .......................................................217
10.10 WLAN Interface MAC Filter Screen ............................................................................... 218
10.10.1 MAC Filter Add/Edit Screen ................................................................................. 219
10.11 WLAN Interface Station Monitor Screen ........................................................................ 220
10.12 VLAN Interfaces ........................................................................................................... 221
10.12.1 VLAN Overview .................................................................................................... 221
10.12.2 VLAN Interfaces Overview ................................................................................... 222
10.12.3 VLAN Summary Screen ....................................................................................... 223
10.12.4 VLAN Add/Edit .................................................................................................... 224
10.13 Virtual Interfaces ........................................................................................................... 228
10.13.1 Virtual Interfaces Add/Edit .................................................................................... 229

Table of Contents
ZyWALL USG 300 User’s Guide
16
10.14 Bridge Interfaces .......................................................................................................... 230
10.14.1 Bridge Overview ................................................................................................... 230
10.14.2 Bridge Interface Overview .................................................................................... 231
10.14.3 Bridge Summary .................................................................................................. 232
10.14.4 Bridge Add/Edit ................................................................................................... 232
10.15 Auxiliary Interface ......................................................................................................... 237
10.15.1 Auxiliary Interface Overview ................................................................................. 237
10.15.2 Configuring the Auxiliary Interface ....................................................................... 237
10.16 Interface Technical Reference ....................................................................................... 239
Chapter 11
Trunks....................................................................................................................................243
11.1 Overview .......................................................................................................................... 243
11.1.1 What You Can Do in the Trunk Screens ................................................................. 243
11.1.2 What You Need to Know About Trunks ..................................................................243
11.2 The Trunk Summary Screen ............................................................................................246
11.3 Configuring a Trunk ........................................................................................................ 247
11.4 Trunk Technical Reference .............................................................................................. 249
Chapter 12
Policy and Static Routes......................................................................................................251
12.1 Policy and Static Routes Overview .................................................................................. 251
12.1.1 What You Can Do in the Policy and Static Route Screens ..................................... 252
12.1.2 What You Need to Know About Policy and Static Routing ..................................... 252
12.2 Policy Route Screen ........................................................................................................ 253
12.2.1 Policy Route Edit Screen ....................................................................................... 255
12.3 IP Static Route Screen ....................................................................................................257
12.3.1 Static Route Add/Edit Screen ................................................................................. 258
12.4 Policy Routing Technical Reference ................................................................................ 259
Chapter 13
Routing Protocols.................................................................................................................261
13.1 Routing Protocols Overview ............................................................................................261
13.1.1 What You Can Do in the RIP and OSPF Screens ..................................................261
13.1.2 What You Need to Know About Routing Protocols ................................................ 261
13.2 The RIP Screen ............................................................................................................... 262
13.3 The OSPF Screen ...........................................................................................................263
13.3.1 Configuring the OSPF Screen ................................................................................ 266
13.3.2 OSPF Area Add/Edit Screen ................................................................................. 267
13.4 Routing Protocol Technical Reference ............................................................................ 269
Chapter 14
Zones .....................................................................................................................................273

Table of Contents
ZyWALL USG 300 User’s Guide 17
14.1 Zones Overview ...............................................................................................................273
14.1.1 What You Can Do in the Zones Screens ................................................................273
14.1.2 What You Need to Know About Zones ................................................................... 274
14.2 The Zone Screen ............................................................................................................. 274
14.3 Zone Add/Edit ................................................................................................................. 275
Chapter 15
DDNS......................................................................................................................................277
15.1 DDNS Overview .............................................................................................................. 277
15.1.1 What You Can Do in the DDNS Screens ...............................................................277
15.1.2 What You Need to Know About DDNS ................................................................... 277
15.2 The DDNS Screen ...........................................................................................................278
15.2.1 The Dynamic DNS Add/Edit Screen ...................................................................... 279
15.3 The DDNS Status Screen ................................................................................................ 281
Chapter 16
Virtual Servers.......................................................................................................................283
16.1 Virtual Servers Overview .................................................................................................283
16.1.1 What You Can Do in the Virtual Server Screens ....................................................283
16.1.2 What You Need to Know About Virtual Servers ..................................................... 283
16.2 The Virtual Server Screen ............................................................................................... 284
16.2.1 The Virtual Server Add/Edit Screen ....................................................................... 285
16.3 NAT 1:1 and NAT Loopback Examples ........................................................................... 287
Chapter 17
HTTP Redirect......................................................................................................................295
17.1 Overview .......................................................................................................................... 295
17.1.1 What You Can Do in the HTTP Redirect Screens .................................................. 295
17.1.2 What You Need to Know About HTTP Redirect ..................................................... 296
17.2 The HTTP Redirect Screen ............................................................................................. 296
17.2.1 The HTTP Redirect Edit Screen ............................................................................. 297
Chapter 18
ALG ........................................................................................................................................299
18.1 ALG Overview ................................................................................................................. 299
18.1.1 What You Can Do in the ALG Screen ....................................................................299
18.1.2 What You Need to Know About ALG ..................................................................... 300
18.1.3 Before You Begin ................................................................................................... 302
18.2 The ALG Screen ..............................................................................................................302
18.3 ALG Technical Reference ................................................................................................304
Chapter 19
IP/MAC Binding................................................................................................................307

Table of Contents
ZyWALL USG 300 User’s Guide
18
19.1 IP/MAC Binding Overview ............................................................................................... 307
19.1.1 What You Can Do in the IP/MAC Binding Screens ................................................ 307
19.1.2 What You Need to Know About IP/MAC Binding ................................................... 308
19.2 IP/MAC Binding Summary ...............................................................................................308
19.2.1 IP/MAC Binding Edit ............................................................................................... 309
19.2.2 Static DHCP Edit .................................................................................................... 310
19.3 IP/MAC Binding Exempt List ...........................................................................................310
19.4 IP/MAC Binding Monitor ...................................................................................................311
Part III: Firewall .................................................................................... 313
Chapter 20
Firewall...................................................................................................................................315
20.1 Overview .......................................................................................................................... 315
20.1.1 What You Can Do in the Firewall Screens ............................................................. 315
20.1.2 What You Need to Know About the Firewall .......................................................... 316
20.1.3 Firewall Rule Example Applications ....................................................................... 318
20.1.4 Firewall Rule Configuration Example ..................................................................... 320
20.2 The Firewall Screen ......................................................................................................... 322
20.2.1 Configuring the Firewall Screen ............................................................................. 323
20.2.2 The Firewall Edit Screen ........................................................................................326
20.3 The Session Limit Screen ................................................................................................327
20.3.1 The Session Limit Edit Screen ............................................................................... 329
Part IV: VPN .......................................................................................... 331
Chapter 21
IPSec VPN..............................................................................................................................333
21.1 IPSec VPN Overview .......................................................................................................333
21.1.1 What You Can Do in the IPSec VPN Screens ........................................................333
21.1.2 What You Need to Know About IPSec VPN ........................................................... 334
21.1.3 Before You Begin ................................................................................................... 335
21.2 The VPN Connection Screen .......................................................................................... 336
21.2.1 The VPN Connection Add/Edit (IKE) Screen ......................................................... 338
21.2.2 The VPN Connection Add/Edit Manual Key Screen .............................................. 343
21.3 The VPN Gateway Screen .............................................................................................. 346
21.3.1 The VPN Gateway Add/Edit Screen ...................................................................... 347
21.4 The VPN Concentrator Screen ........................................................................................ 352
21.4.1 The VPN Concentrator Add/Edit Screen ................................................................ 353
21.5 The SA Monitor Screen .................................................................................................. 354

Table of Contents
ZyWALL USG 300 User’s Guide 19
21.6 IPSec VPN Background Information ............................................................................... 356
Chapter 22
SSL VPN.................................................................................................................................367
22.1 Overview .......................................................................................................................... 367
22.1.1 What You Can Do in the SSL VPN Screens .......................................................... 367
22.1.2 What You Need to Know About SSL VPN .............................................................. 367
22.2 The SSL Access Privilege Screen ................................................................................... 369
22.2.1 The SSL Access Policy Add/Edit Screen ..............................................................369
22.3 The SSL Connection Monitor Screen ..............................................................................371
22.4 The SSL Global Setting Screen ....................................................................................... 372
22.4.1 How to Upload a Custom Logo .............................................................................. 374
22.5 Establishing an SSL VPN Connection .............................................................................374
Chapter 23
SSL User Screens.................................................................................................................377
23.1 Overview .......................................................................................................................... 377
23.1.1 What You Need to Know About the SSL User Screens .........................................377
23.2 Remote User Login .......................................................................................................... 378
23.3 The SSL VPN User Screens ...........................................................................................380
23.4 Bookmarking the ZyWALL ............................................................................................... 381
23.5 Logging Out of the SSL VPN User Screens .................................................................... 381
Chapter 24
SSL User Application Screens ............................................................................................383
24.1 SSL User Application Screens Overview ........................................................................ 383
24.2 The Application Screen ................................................................................................... 383
Chapter 25
SSL User File Sharing ..........................................................................................................385
25.1 Overview .......................................................................................................................... 385
25.1.1 What You Need to Know About the SSL VPN File Sharing ...................................385
25.2 The Main File Sharing Screen ......................................................................................... 385
25.3 Opening a File or Folder ..................................................................................................386
25.3.1 Downloading a File ................................................................................................. 387
25.3.2 Saving a File ..........................................................................................................387
25.4 Creating a New Folder .....................................................................................................388
25.5 Renaming a File or Folder ............................................................................................... 388
25.6 Deleting a File or Folder ..................................................................................................389
25.7 Uploading a File ............................................................................................................... 389
Chapter 26
L2TP VPN...............................................................................................................................391

Table of Contents
ZyWALL USG 300 User’s Guide
20
26.1 Overview .......................................................................................................................... 391
26.1.1 What You Can Do in the L2TP VPN Screens ......................................................... 391
26.1.2 What You Need to Know About L2TP VPN ............................................................ 391
26.2 L2TP VPN Screen ...........................................................................................................393
26.3 L2TP VPN Session Monitor Screen ................................................................................394
Chapter 27
L2TP VPN Example...............................................................................................................395
27.1 L2TP VPN Example .........................................................................................................395
27.2 Configuring the Default L2TP VPN Gateway Example .................................................... 395
27.3 Configuring the Default L2TP VPN Connection Example ................................................ 396
27.4 Configuring the L2TP VPN Settings Example ................................................................. 398
27.5 Configuring the Policy Route for L2TP Example ............................................................. 398
27.6 Configuring L2TP VPN in Windows XP and 2000 ........................................................... 399
27.6.1 Configuring L2TP in Windows XP .......................................................................... 399
27.6.2 Configuring L2TP in Windows 2000 ....................................................................... 405
Part V: Application Patrol.................................................................... 421
Chapter 28
Application Patrol.................................................................................................................423
28.1 Overview .......................................................................................................................... 423
28.1.1 What You Can Do in the Application Patrol Screens .............................................. 423
28.1.2 What You Need to Know About Application Patrol ................................................423
28.1.3 Application Patrol Bandwidth Management Examples ........................................... 428
28.2 Application Patrol General Screen .................................................................................. 431
28.3 Application Patrol Applications ........................................................................................ 433
28.3.1 The Application Patrol Edit Screen ........................................................................ 434
28.3.2 The Application Patrol Policy Edit Screen ............................................................. 436
28.4 The Other Applications Screen ........................................................................................ 438
28.4.1 The Other Applications Add/Edit Screen ................................................................ 440
28.5 Application Patrol Statistics .............................................................................................442
28.5.1 Application Patrol Statistics: General Setup ........................................................... 442
28.5.2 Application Patrol Statistics: Bandwidth Statistics .................................................. 442
28.5.3 Application Patrol Statistics: Protocol Statistics ..................................................... 443
Part VI: Anti-X....................................................................................... 447
Chapter 29
Anti-Virus...............................................................................................................................449