ZyXEL Communications ZYWALL 1050 - V2.00 EDITION 1 User manual

www.zyxel.com
ZyWALL 1050
Internet Security Gateway
User’s Guide
Version 2.00
7/2007
Edition 1
DEFAULT LOGIN
LAN Port 1
IP Address http://192.168.1.1
User Name admin
Password 1234

About This User's Guide
ZyWALL 1050 User’s Guide 3
About This User's Guide
This manual is designed to guide you through the configuration of your ZyWALL for its
various applications. Generally, it is organized as follows.
• Introduction (ZyWALL, web configurator)
• Features (by menu item in the web configurator)
• Overview, including background
• Web Configurator screens
• Appendices
Intended Audience
This manual is intended for network administrators, or people who have a good knowledge of
TCP/IP networking concepts and topology, who want to want to configure the ZyWALL using
the web configurator.
1Read Chapter 1 on page 51 chapter for an overview of features available on the
ZyWALL.
2Read Chapter 3 on page 63 for web browser requirements and an introduction to the
main components, icons and menus in the ZyWALL web configurator.
3Read Chapter 4 on page 73 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
4It is highly recommended you read Chapter 5 on page 109 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a
feature and how to use that feature.
5It is highly recommended you read Chapter 6 on page 123 for multiple ZyWALL
application examples.
6Subsequent chapters are arranged by menu item as defined in the web configurator. Read
each chapter carefully for detailed information on that menu item.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the web configurator wizards. (See the wizard real
time help for information on configuring each screen.) It contains a connection diagram,
default settings, handy checklists and information on setting up your network and
configuring for Internet access.
• Configuration Reference Card
See this handy reference card to see what prerequisites are needed to configure a feature
and how to use this feature in the ZyWALL.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.

About This User's Guide
ZyWALL 1050 User’s Guide
4
"It is recommended you use the web configurator to configure the ZyWALL.
• Web Configurator Online Help
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
ZyWALL 1050 User’s Guide 5
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL 1050 may be referred to as the “ZyWALL”, the “device”, the “system” or
the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL 1050 User’s Guide
6
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router

Safety Warnings
ZyWALL 1050 User’s Guide 7
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.
This product is recyclable. Dispose of it properly.

Safety Warnings
ZyWALL 1050 User’s Guide
8

Contents Overview
ZyWALL 1050 User’s Guide 9
Contents Overview
Introduction ............................................................................................................................49
Introducing the ZyWALL ............................................................................................................ 51
Features and Applications ......................................................................................................... 55
Web Configurator ....................................................................................................................... 63
Wizard Setup ............................................................................................................................. 73
Configuration Basics ............................................................................................................... 109
Tutorials ................................................................................................................................... 123
Status ...................................................................................................................................... 153
Registration ............................................................................................................................. 161
Update .....................................................................................................................................167
Network .................................................................................................................................173
Interface ................................................................................................................................... 175
Trunks ...................................................................................................................................... 215
Policy and Static Routes .......................................................................................................... 221
Routing Protocols .................................................................................................................... 231
Zones ...................................................................................................................................... 241
DDNS ...................................................................................................................................... 245
Virtual Servers ......................................................................................................................... 251
HTTP Redirect ........................................................................................................................257
ALG .........................................................................................................................................261
Firewall and VPN ..................................................................................................................271
Firewall .................................................................................................................................. 273
IPSec VPN ............................................................................................................................... 287
SSL VPN ................................................................................................................................. 319
SSL User Screens ................................................................................................................... 327
SSL User Application Screens ................................................................................................ 333
SSL User File Sharing Screens ............................................................................................... 335
L2TP VPN ................................................................................................................................ 341
L2TP VPN Example ................................................................................................................. 347
Application Patrol & Anti-X .................................................................................................373
Application Patrol ..................................................................................................................... 375
Anti-Virus ................................................................................................................................. 399
IDP .......................................................................................................................................... 413
ADP ........................................................................................................................................ 441

Contents Overview
ZyWALL 1050 User’s Guide
10
Content Filter Screens ............................................................................................................. 459
Content Filter Reports ............................................................................................................. 479
Device HA & Objects ...........................................................................................................487
Device HA ............................................................................................................................... 489
User/Group ............................................................................................................................. 499
Addresses ................................................................................................................................511
Services ...................................................................................................................................515
Schedules ................................................................................................................................ 521
AAA Server ............................................................................................................................. 525
Authentication Objects ............................................................................................................ 535
Certificates ............................................................................................................................... 539
ISP Accounts ........................................................................................................................... 557
SSL Application ....................................................................................................................... 561
System ..................................................................................................................................567
System ................................................................................................................................... 569
System Remote Management ................................................................................................ 581
Maintenance & Troubleshooting ........................................................................................607
File Manager ............................................................................................................................ 609
Logs ........................................................................................................................................ 619
Reports ................................................................................................................................... 631
Diagnostics ............................................................................................................................. 641
Reboot .....................................................................................................................................643
Troubleshooting ....................................................................................................................... 645
Appendices and Index .........................................................................................................647

Table of Contents
ZyWALL 1050 User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................29
List of Tables...........................................................................................................................41
Part I: Introduction................................................................................. 49
Chapter 1
Introducing the ZyWALL ........................................................................................................51
1.1 Overview and Key Default Settings ..................................................................................... 51
1.2 Front Panel LEDs ................................................................................................................ 51
1.3 Management Overview ........................................................................................................52
1.4 Starting and Stopping the ZyWALL ...................................................................................... 53
Chapter 2
Features and Applications.....................................................................................................55
2.1 Features .............................................................................................................................. 55
2.2 Packet Flow ......................................................................................................................... 56
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 57
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 57
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 57
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 57
2.3 Applications ......................................................................................................................... 58
2.3.1 VPN Connectivity ....................................................................................................... 58
2.3.2 SSL VPN Network Access ......................................................................................... 58
2.3.3 User-Aware Access Control ....................................................................................... 59
2.3.4 Multiple WAN Interfaces ............................................................................................. 60
2.3.5 Device HA .................................................................................................................. 60
Chapter 3
Web Configurator....................................................................................................................63

Table of Contents
ZyWALL 1050 User’s Guide
12
3.1 Web Configurator Requirements ......................................................................................... 63
3.2 Web Configurator Access ....................................................................................................63
3.3 Web Configurator Main Screen ........................................................................................... 65
3.3.1 Title Bar ...................................................................................................................... 65
3.3.2 Navigation Panel ........................................................................................................66
3.3.3 Main Window ..............................................................................................................69
3.3.4 Message Bar ..............................................................................................................69
Chapter 4
Wizard Setup...........................................................................................................................73
4.1 Wizard Setup Overview ....................................................................................................... 73
4.2 Installation Setup, One ISP ................................................................................................. 74
4.3 Step 1 Internet Access ........................................................................................................75
4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 76
4.3.2 Ethernet: Static IP Address Assignment .................................................................... 76
4.3.3 Step 2 Internet Access Ethernet ................................................................................ 78
4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 79
4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 80
4.3.6 Step 2 Internet Access PPPoE .................................................................................. 82
4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 83
4.3.8 PPTP: Static IP Address Assignment ......................................................................... 86
4.3.9 Step 2 Internet Access PPTP .................................................................................... 87
4.3.10 Step 4 Internet Access - Finish ............................................................................... 89
4.4 Device Registration .......................................................................................................... 89
4.5 Installation Setup, Two Internet Service Providers .............................................................. 91
4.5.1 Internet Access Wizard Setup Complete ................................................................... 93
4.6 VPN Setup ........................................................................................................................... 93
4.7 VPN Wizards ...................................................................................................................... 94
4.7.1 VPN Express Wizard .................................................................................................. 95
4.8 VPN Express Wizard - Remote Gateway ........................................................................... 95
4.8.1 VPN Express Wizard - Policy Setting ........................................................................ 97
4.8.2 VPN Express Wizard - Summary .............................................................................. 98
4.8.3 VPN Express Wizard - Finish .................................................................................... 99
4.8.4 VPN Advanced Wizard ............................................................................................... 99
4.8.5 VPN Advanced Wizard - Remote Gateway ............................................................. 101
4.8.6 VPN Advanced Wizard - Phase 1 ........................................................................... 103
4.8.7 VPN Advanced Wizard - Phase 2 ........................................................................... 105
4.8.8 VPN Advanced Wizard - Summary ......................................................................... 106
4.8.9 VPN Advanced Wizard - Finish ............................................................................... 107
Chapter 5
Configuration Basics...........................................................................................................109
5.1 Granular Configuration ...................................................................................................... 109

Table of Contents
ZyWALL 1050 User’s Guide 13
5.2 Terminology in the ZyWALL ................................................................................................110
5.3 Physical Ports, Interfaces, and Zones ................................................................................110
5.3.1 Network Topology Example .......................................................................................111
5.4 Feature Configuration Overview ........................................................................................112
5.5 Objects ...............................................................................................................................119
5.6 System Management and Maintenance ............................................................................ 121
Chapter 6
Tutorials.................................................................................................................................123
6.1 Interfaces and Zones ......................................................................................................... 123
6.1.1 Set up Port Grouping ...............................................................................................123
6.1.2 Set up Ethernet Interfaces ....................................................................................... 125
6.1.3 WAN Trunk ............................................................................................................... 127
6.1.4 Zones ....................................................................................................................... 128
6.2 IPSec VPN ......................................................................................................................... 130
6.2.1 Set up the Ethernet Interfaces and Zones ............................................................... 130
6.2.2 Set up the VPN Gateway ......................................................................................... 130
6.2.3 Set up the VPN Connection ..................................................................................... 131
6.2.4 Set up the Policy Route for the VPN Tunnel ............................................................ 132
6.2.5 Set up the Zone for the VPN Tunnel ........................................................................ 133
6.3 Device HA .......................................................................................................................... 134
6.3.1 Set up DNS for the Virtual Router ............................................................................ 134
6.3.2 Set up the VRRP Groups on the Master .................................................................. 134
6.3.3 Set up the Password for Synchronization ................................................................136
6.3.4 Finish Configuring the Master .................................................................................. 137
6.3.5 Set up the Ethernet Interfaces on the Backup ......................................................... 137
6.3.6 Set up the VRRP Groups on the Backup ................................................................. 137
6.3.7 Synchronize the Backup .......................................................................................... 138
6.4 User-Aware Access Control ............................................................................................... 138
6.4.1 Set up User Accounts .............................................................................................. 139
6.4.2 Set up User Groups ................................................................................................. 139
6.4.3 Set up User Authentication Using the RADIUS Server ............................................ 140
6.4.4 Set up Web Surfing Policies With Bandwidth Restrictions ....................................... 141
6.4.5 Set up MSN Policies ................................................................................................ 142
6.4.6 Set up LAN-to-DMZ Policies .................................................................................... 143
6.5 Trunks ................................................................................................................................ 144
6.5.1 Set up Available Bandwidth on Ethernet Interfaces ................................................. 144
6.5.2 Change WAN Trunk Algorithm ................................................................................. 145
6.6 NAT 1:1 Example ...............................................................................................................145
6.6.1 NAT 1:1 Address Objects ......................................................................................... 146
6.6.2 NAT 1:1 Virtual Server .............................................................................................. 147
6.6.3 NAT 1:1 Policy Route ............................................................................................... 147
6.6.4 NAT 1:1 Firewall Rule .............................................................................................. 148

Table of Contents
ZyWALL 1050 User’s Guide
14
6.7 NAT Loopback ................................................................................................................... 149
6.7.1 NAT Loopback Virtual Server ................................................................................... 150
6.7.2 NAT Loopback Policy Route .................................................................................... 151
Chapter 7
Status....................................................................................................................................153
7.1 Status Screen .................................................................................................................... 153
7.2 VPN Status ........................................................................................................................ 156
7.3 DHCP Table .......................................................................................................................157
7.4 Port Statistics .................................................................................................................... 158
7.5 Current Users .................................................................................................................... 159
Chapter 8
Registration...........................................................................................................................161
8.1 myZyXEL.com Overview ................................................................................................... 161
8.1.1 Subscription Services Available on the ZyWALL .....................................................161
8.2 Registration ....................................................................................................................... 162
8.3 Service ..............................................................................................................................164
Chapter 9
Update....................................................................................................................................167
9.0.1 Updating Anti-virus Signatures ................................................................................. 167
9.1 Updating IDP and Application Patrol Signatures ..............................................................168
9.2 Updating System Protect Signatures ................................................................................ 170
Part II: Network..................................................................................... 173
Chapter 10
Interface.................................................................................................................................175
10.1 Interface Overview ........................................................................................................... 175
10.1.1 Types of Interfaces ................................................................................................. 175
10.1.2 IP Address Assignment .......................................................................................... 176
10.1.3 Interface Parameters .............................................................................................. 178
10.1.4 DHCP Settings ....................................................................................................... 178
10.1.5 Ping Check Settings ............................................................................................... 179
10.1.6 Relationships Between Interfaces .......................................................................... 180
10.2 Ethernet Interfaces .......................................................................................................... 180
10.2.1 Ethernet Interfaces Overview ................................................................................. 180
10.2.2 Interface Summary Screen .................................................................................... 181
10.2.3 Ethernet Summary Screen ..................................................................................... 184
10.2.4 Ethernet Edit .........................................................................................................185

Table of Contents
ZyWALL 1050 User’s Guide 15
10.3 Port Grouping ................................................................................................................. 190
10.3.1 Port Grouping Overview ......................................................................................... 190
10.3.2 Port Grouping Screen ............................................................................................ 191
10.4 VLAN Interfaces ............................................................................................................. 192
10.4.1 VLAN Overview ......................................................................................................192
10.4.2 VLAN Interfaces Overview ..................................................................................... 194
10.4.3 VLAN Summary Screen ......................................................................................... 194
10.4.4 VLAN Add/Edit ...................................................................................................... 195
10.5 Bridge Interfaces ............................................................................................................ 199
10.5.1 Bridge Overview ..................................................................................................... 200
10.5.2 Bridge Interface Overview ...................................................................................... 201
10.5.3 Bridge Summary ....................................................................................................201
10.5.4 Bridge Add/Edit ..................................................................................................... 202
10.6 PPPoE/PPTP Interfaces ................................................................................................. 206
10.6.1 PPPoE/PPTP Overview ......................................................................................... 206
10.6.2 PPPoE/PPTP Interfaces Overview ........................................................................ 207
10.6.3 PPPoE/PPTP Interface Summary ..........................................................................208
10.6.4 PPPoE/PPTP Interface Add/Edit ........................................................................... 209
10.7 Auxiliary Interface ............................................................................................................211
10.7.1 Auxiliary Interface Overview ....................................................................................211
10.7.2 Auxiliary ...................................................................................................................211
10.8 Virtual Interfaces ............................................................................................................. 213
10.8.1 Virtual Interfaces Add/Edit ...................................................................................... 213
Chapter 11
Trunks....................................................................................................................................215
11.1 Trunks Overview ..............................................................................................................215
11.2 Trunk Scenario Examples ................................................................................................215
11.3 Load Balancing Introduction ............................................................................................ 215
11.4 Load Balancing Algorithms .............................................................................................. 216
11.4.1 Least Load First ...................................................................................................... 216
11.4.2 Weighted Round Robin .......................................................................................... 217
11.4.3 Spillover .................................................................................................................. 217
11.5 Trunk Summary ............................................................................................................... 218
11.6 Configuring a Trunk ........................................................................................................218
Chapter 12
Policy and Static Routes......................................................................................................221
12.1 Policy Route .................................................................................................................... 221
12.1.1 Benefits .................................................................................................................. 221
12.2 Routing Policy ..................................................................................................................221
12.2.1 NAT and SNAT ....................................................................................................... 222
12.2.2 Port Triggering ....................................................................................................... 222

Table of Contents
ZyWALL 1050 User’s Guide
16
12.2.3 Maximize Bandwidth Usage ................................................................................... 223
12.2.4 Reserving Bandwidth for Non-Bandwidth Class Traffic .......................................... 223
12.3 IP Routing Policy Setup ...................................................................................................223
12.4 Policy Route Edit ............................................................................................................ 225
12.5 IP Static Routes .............................................................................................................. 228
12.6 Static Route Summary .....................................................................................................229
12.7 Edit a Static Route ..........................................................................................................229
Chapter 13
Routing Protocols.................................................................................................................231
13.1 Routing Protocols Overview ............................................................................................ 231
13.1.1 RIP Overview ......................................................................................................... 231
13.1.2 Authentication Types .............................................................................................. 232
13.2 RIP Screen ...................................................................................................................... 232
13.3 OSPF Overview .............................................................................................................. 233
13.3.1 OSPF Areas ...........................................................................................................234
13.3.2 OSPF Routers ........................................................................................................ 235
13.3.3 Virtual Links ............................................................................................................236
13.3.4 OSPF Configuration ............................................................................................... 236
13.4 OSPF Screens .................................................................................................................237
13.4.1 OSPF Summary ..................................................................................................... 237
13.4.2 OSPF Area Add/Edit ............................................................................................. 238
Chapter 14
Zones ....................................................................................................................................241
14.1 Zones Overview ...............................................................................................................241
14.1.1 Effect of Zones on Different Types of Traffic .......................................................... 241
14.2 Zone Summary ................................................................................................................ 242
14.3 Zone Add/Edit .................................................................................................................243
Chapter 15
DDNS......................................................................................................................................245
15.1 DDNS Overview .............................................................................................................. 245
15.1.1 DYNDNS Wildcard ................................................................................................. 245
15.1.2 High Availability (HA) ............................................................................................. 246
15.1.3 Mail Exchanger ......................................................................................................246
15.2 DDNS Screens ................................................................................................................ 246
15.3 DDNS Summary ..............................................................................................................247
15.4 Dynamic DNS Add/Edit ..................................................................................................248
Chapter 16
Virtual Servers.......................................................................................................................251
16.1 Virtual Server Overview ...................................................................................................251

Table of Contents
ZyWALL 1050 User’s Guide 17
16.2 Virtual Server Example ....................................................................................................252
16.3 Virtual Server Screens ..................................................................................................... 252
16.4 Virtual Server Summary Screen ...................................................................................... 252
16.4.1 Virtual Server Add/Edit ..........................................................................................254
Chapter 17
HTTP Redirect......................................................................................................................257
17.1 HTTP Redirect Overview ................................................................................................. 257
17.1.1 Web Proxy Server ..................................................................................................257
17.2 HTTP Redirect, Firewall and Policy Route ...................................................................... 257
17.3 Configuring HTTP Redirect .............................................................................................258
17.4 HTTP Redirect Edit ......................................................................................................... 259
Chapter 18
ALG ........................................................................................................................................261
18.1 ALG Introduction .............................................................................................................. 261
18.1.1 Application Layer Gateway (ALG) and NAT ........................................................... 261
18.1.2 ALG and Trunks ..................................................................................................... 261
18.1.3 FTP ........................................................................................................................ 262
18.1.4 H.323 ......................................................................................................................262
18.1.5 RTP ........................................................................................................................ 262
18.1.6 SIP ......................................................................................................................... 263
18.2 Peer-to-Peer Calls and the ZyWALL ............................................................................... 264
18.2.1 VoIP Calls from the WAN with Multiple Outgoing Calls .......................................... 264
18.2.2 VoIP with Multiple WAN IP Addresses ................................................................... 264
18.3 ALG Screen ..................................................................................................................... 265
18.4 WAN to LAN SIP Peer-to-peer Calls Example ................................................................267
Part III: Firewall and VPN..................................................................... 271
Chapter 19
Firewall.................................................................................................................................273
19.1 Firewall Overview ............................................................................................................ 273
19.2 Firewall Rules .................................................................................................................. 274
19.2.1 Rule Directions .......................................................................................................274
19.2.2 Firewall and VPN Traffic ......................................................................................... 276
19.3 Firewall Rule Example Applications ................................................................................ 276
19.4 Alerts ............................................................................................................................... 278
19.5 Asymmetrical Routes .......................................................................................................278
19.5.1 Virtual Interfaces and Asymmetrical Routes ..........................................................279
19.6 Configuring the Firewall ...................................................................................................279

Table of Contents
ZyWALL 1050 User’s Guide
18
19.6.1 Edit a Firewall Rule ................................................................................................ 282
19.7 Firewall Rule Configuration Example ..............................................................................283
Chapter 20
IPSec VPN..............................................................................................................................287
20.1 IPSec VPN Overview ....................................................................................................... 287
20.1.1 IPSec SA Overview ................................................................................................ 288
20.1.2 Additional Topics for IPSec SA ............................................................................... 290
20.2 VPN Related Configuration ............................................................................................. 292
20.3 VPN Connection Screens ................................................................................................ 293
20.3.1 VPN Connection Summary .................................................................................... 293
20.3.2 VPN Connection Add/Edit IKE .............................................................................. 294
20.3.3 VPN Connection Add/Edit Manual Key .................................................................. 298
20.4 VPN Gateway Screens ................................................................................................... 302
20.4.1 IKE SA Overview ....................................................................................................302
20.4.2 Additional Topics for IKE SA .................................................................................. 306
20.4.3 VPN Gateway Summary ........................................................................................308
20.4.4 VPN Gateway Add/Edit .........................................................................................309
20.5 VPN Concentrator ........................................................................................................... 314
20.5.1 VPN Concentrator Summary .................................................................................. 315
20.5.2 VPN Concentrator Add/Edit ..................................................................................315
20.6 SA Monitor Screen .........................................................................................................316
20.6.1 Regular Expressions in Searching IPSec SAs by Name or Policy .........................318
Chapter 21
SSL VPN.................................................................................................................................319
21.1 SSL Access Policy ...........................................................................................................319
21.1.1 SSL Access Policy Objects ....................................................................................319
21.1.2 SSL Access Policy Limitations ............................................................................... 320
21.2 SSL Access Privilege List ................................................................................................320
21.3 Creating/Editing an SSL Access Policy .......................................................................... 321
21.4 SSL Connection Monitor .................................................................................................. 322
21.5 Configuring SSL Global Setting ....................................................................................... 323
21.5.1 Uploading a Custom Logo ......................................................................................325
21.6 Establishing an SSL VPN Connection .............................................................................325
Chapter 22
SSL User Screens.................................................................................................................327
22.1 Overview .......................................................................................................................... 327
22.1.1 Network Resource Access Methods ...................................................................... 327
22.1.2 System Requirements ............................................................................................ 327
22.1.3 Information You Need ............................................................................................ 328
22.1.4 Certificates .............................................................................................................328

Table of Contents
ZyWALL 1050 User’s Guide 19
22.2 Remote User Login ..........................................................................................................328
22.3 SSL VPN User Screens ................................................................................................... 330
22.4 Bookmark ........................................................................................................................ 331
22.5 Logout .............................................................................................................................. 331
Chapter 23
SSL User Application Screens ............................................................................................333
23.1 Overview .......................................................................................................................... 333
23.1.1 The Application Screen .......................................................................................... 333
Chapter 24
SSL User File Sharing Screens ...........................................................................................335
24.1 Overview .......................................................................................................................... 335
24.2 Main File Sharing Screen ................................................................................................ 335
24.3 Opening a File or Folder ..................................................................................................336
24.3.1 Downloading a File ................................................................................................. 337
24.3.2 Saving a File ..........................................................................................................337
24.4 Creating a New Folder .....................................................................................................338
24.5 Renaming a File or Folder ............................................................................................... 338
24.6 Deleting a File or Folder ..................................................................................................339
24.7 Uploading a File ............................................................................................................... 340
Chapter 25
L2TP VPN...............................................................................................................................341
25.1 L2TP VPN Overview ........................................................................................................341
25.2 IPSec Configuration .........................................................................................................341
25.2.1 Using the Default L2TP VPN Connection ..............................................................342
25.3 Policy Route .................................................................................................................... 342
25.4 L2TP VPN Configuration ................................................................................................. 343
25.5 L2TP VPN Session Monitor ............................................................................................. 344
Chapter 26
L2TP VPN Example...............................................................................................................347
26.1 L2TP VPN Example ......................................................................................................... 347
26.2 Configuring the Default L2TP VPN Gateway Example ....................................................347
26.3 Configuring the Default L2TP VPN Connection Example ................................................ 349
26.4 Configuring the L2TP VPN Settings Example ................................................................. 350
26.5 Configuring the Policy Route for L2TP Example ............................................................. 350
26.6 Configuring L2TP VPN in Windows XP and 2000 ...........................................................351
26.6.1 Configuring L2TP in Windows XP .......................................................................... 352
26.6.2 Configuring L2TP in Windows 2000 ....................................................................... 357

Table of Contents
ZyWALL 1050 User’s Guide
20
Part IV: Application Patrol & Anti-X.................................................... 373
Chapter 27
Application Patrol.................................................................................................................375
27.1 Application Patrol Overview ............................................................................................. 375
27.2 Classification of Applications ...........................................................................................375
27.3 Configurable Application Policies .................................................................................... 376
27.4 Bandwidth Management .................................................................................................. 376
27.4.1 Connection and Packet Directions ......................................................................... 377
27.4.2 Outbound and Inbound Bandwidth Limits .............................................................. 377
27.4.3 Bandwidth Management Priority ............................................................................ 378
27.4.4 Maximize Bandwidth Usage ................................................................................... 378
27.4.5 Bandwidth Management Behavior ......................................................................... 378
27.5 Application Patrol Bandwidth Management Examples .................................................... 380
27.5.1 Setting the Interface’s Bandwidth ........................................................................... 381
27.5.2 SIP Any to WAN Bandwidth Management Example .............................................. 381
27.5.3 SIP WAN to Any Bandwidth Management Example .............................................. 382
27.5.4 HTTP Any to WAN Bandwidth Management Example ........................................... 382
27.5.5 FTP WAN to DMZ Bandwidth Management Example ............................................382
27.5.6 FTP LAN to DMZ Bandwidth Management Example ............................................. 383
27.6 Other Applications ........................................................................................................... 384
27.7 Application Patrol Screens .............................................................................................. 384
27.8 Application Patrol General ............................................................................................... 384
27.9 Application Patrol Applications ........................................................................................ 386
27.9.1 Application Patrol Edit ............................................................................................ 386
27.9.2 Application Patrol Policy Edit ................................................................................ 389
27.10 Other Protocol Screen .................................................................................................. 391
27.10.1 Other Configuration Add/Edit .............................................................................. 392
27.11 Application Patrol Statistics ............................................................................................394
27.11.1 Application Patrol Statistics: General Setup ......................................................... 394
27.11.2 Application Patrol Statistics: Bandwidth Statistics ................................................ 395
27.11.3 Application Patrol Statistics: Protocol Statistics ...................................................396
Chapter 28
Anti-Virus...............................................................................................................................399
28.1 Anti-Virus Overview ......................................................................................................... 399
28.1.1 Types of Computer Viruses ................................................................................... 399
28.1.2 Computer Virus Infection and Prevention .............................................................. 399
28.1.3 Types of Anti-Virus Scanner .................................................................................. 400
28.2 Introduction to the ZyWALL Anti-Virus Scanner .............................................................. 400
28.2.1 How the ZyWALL Anti-Virus Scanner Works ........................................................ 400
28.2.2 Notes About the ZyWALL Anti-Virus ...................................................................... 401
28.3 Anti-Virus Summary .........................................................................................................402