ZyXEL Communications ZyWALL USG 100 Series User manual

www.zyxel.com
ZyWALL USG 100/200
Series
Unified Security Gateway
User’s Guide
Version 2.11
12/2008
Edition 1
DEFAULT LOGIN
LAN1 Port P4
IP Address https://192.168.1.1
User Name admin
Password 1234

About This User's Guide
ZyWALL USG 100/200 Series User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to want to configure the ZyWALL using the web
configurator.
How To Use This Guide
•ReadChapter 1 on page 55 chapter for an overview of features available on the ZyWALL.
•ReadChapter 3 on page 67 for web browser requirements and an introduction to the main
components, icons and menus in the ZyWALL web configurator.
•ReadChapter 4 on page 77 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
• It is highly recommended you read Chapter 5 on page 111 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a feature
and how to use that feature.
• It is highly recommended you read Chapter 6 on page 129 for ZyWALL application
examples.
• Subsequent chapters are arranged by menu item as defined in the web configurator. Read
each chapter carefully for detailed information on that menu item.
• To find specific information in this guide, use the Contents Overview, the Table of
Contents, the Index, or search the PDF file. E-mail [email protected] if you
cannot find the information you require.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the web configurator wizards. (See the wizard real
time help for information on configuring each screen.) It contains a connection diagram,
default settings, handy checklists and information on setting up your network and
configuring for Internet access.
• Configuration Reference Card
See this handy reference card to see what prerequisites are needed to configure a feature
and how to use this feature in the ZyWALL.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
"It is recommended you use the web configurator to configure the ZyWALL.
• Web Configurator Online Help

About This User's Guide
ZyWALL USG 100/200 Series User’s Guide
4
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
ZyWALL USG 100/200 Series User’s Guide 5
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL USG 100 and ZyWALL USG 200 may be referred to as the “ZyWALL”,
the “device”, the “system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL USG 100/200 Series User’s Guide
6
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router Printer

Safety Warnings
ZyWALL USG 100/200 Series User’s Guide 7
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug
to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO THE
INSTRUCTIONS. Dispose them at the applicable collection point for the recycling of
electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

Safety Warnings
ZyWALL USG 100/200 Series User’s Guide
8
This product is recyclable. Dispose of it properly.

Contents Overview
ZyWALL USG 100/200 Series User’s Guide 9
Contents Overview
Getting Started .......................................................................................................................53
Introducing the ZyWALL ............................................................................................................ 55
Features and Applications ......................................................................................................... 59
Web Configurator ....................................................................................................................... 67
Wizard Setup ............................................................................................................................. 77
Configuration Basics .................................................................................................................111
Tutorials ................................................................................................................................... 129
Status ...................................................................................................................................... 175
Registration ............................................................................................................................. 189
Signature Update ..................................................................................................................... 195
Network .................................................................................................................................201
Interface ...................................................................................................................................203
Trunks ...................................................................................................................................... 273
Policy and Static Routes .......................................................................................................... 281
Routing Protocols .................................................................................................................... 291
Zones ...................................................................................................................................... 301
DDNS ...................................................................................................................................... 305
Virtual Servers ..........................................................................................................................311
HTTP Redirect ........................................................................................................................ 323
ALG ......................................................................................................................................... 327
IP/MAC Binding .................................................................................................................. 335
Firewall ..................................................................................................................................341
Firewall .................................................................................................................................. 343
VPN ........................................................................................................................................359
IPSec VPN ............................................................................................................................... 361
SSL VPN ................................................................................................................................. 395
SSL User Screens ................................................................................................................... 405
SSL User Application Screens .................................................................................................411
SSL User File Sharing ............................................................................................................. 413
L2TP VPN ................................................................................................................................ 419
L2TP VPN Example .................................................................................................................425
Application Patrol ................................................................................................................451
Application Patrol ..................................................................................................................... 453

Contents Overview
ZyWALL USG 100/200 Series User’s Guide
10
Anti-X ....................................................................................................................................477
Anti-Virus ................................................................................................................................. 479
IDP .......................................................................................................................................... 493
ADP ........................................................................................................................................521
Content Filtering ...................................................................................................................... 539
Content Filter Reports .............................................................................................................561
Anti-Spam ................................................................................................................................569
Device HA .............................................................................................................................583
Device HA ............................................................................................................................... 585
Objects ..................................................................................................................................601
User/Group ..............................................................................................................................603
Addresses ............................................................................................................................... 617
Services ................................................................................................................................... 623
Schedules ................................................................................................................................ 629
AAA Server ............................................................................................................................. 635
Authentication Method ............................................................................................................. 645
Certificates ...............................................................................................................................649
SSL Application ....................................................................................................................... 667
System ..................................................................................................................................673
System ................................................................................................................................... 675
Maintenance, Troubleshooting, & Specifications .............................................................713
File Manager ........................................................................................................................... 715
Logs ........................................................................................................................................ 725
Reports ................................................................................................................................... 737
Diagnostics ............................................................................................................................. 751
Reboot ..................................................................................................................................... 753
Troubleshooting ....................................................................................................................... 755
Product Specifications ............................................................................................................. 759
Appendices and Index .........................................................................................................767

Table of Contents
ZyWALL USG 100/200 Series User’s Guide 11
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................5
Safety Warnings........................................................................................................................7
Contents Overview ...................................................................................................................9
Table of Contents....................................................................................................................11
List of Figures.........................................................................................................................31
List of Tables...........................................................................................................................45
Part I: Getting Started............................................................................ 53
Chapter 1
Introducing the ZyWALL ........................................................................................................55
1.1 Overview and Key Default Settings ..................................................................................... 55
1.2 Front Panel LEDs ................................................................................................................ 55
1.3 Management Overview ........................................................................................................56
1.4 Starting and Stopping the ZyWALL ...................................................................................... 57
Chapter 2
Features and Applications.....................................................................................................59
2.1 Features .............................................................................................................................. 59
2.2 Packet Flow ......................................................................................................................... 61
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 61
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 62
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 62
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 62
2.3 Applications ......................................................................................................................... 62
2.3.1 VPN Connectivity ....................................................................................................... 62
2.3.2 SSL VPN Network Access ......................................................................................... 63
2.3.3 User-Aware Access Control ....................................................................................... 64
2.3.4 Multiple WAN Interfaces ............................................................................................. 65
2.3.5 Device HA .................................................................................................................. 65
Chapter 3
Web Configurator....................................................................................................................67

Table of Contents
ZyWALL USG 100/200 Series User’s Guide
12
3.1 Web Configurator Requirements ......................................................................................... 67
3.2 Web Configurator Access ....................................................................................................67
3.3 Web Configurator Main Screen ........................................................................................... 69
3.3.1 Title Bar ...................................................................................................................... 69
3.3.2 Navigation Panel ........................................................................................................70
3.3.3 Main Window ..............................................................................................................74
3.3.4 Message Bar ..............................................................................................................74
Chapter 4
Wizard Setup...........................................................................................................................77
4.1 Wizard Setup Overview ....................................................................................................... 77
4.2 Installation Setup, One ISP ................................................................................................. 78
4.3 Step 1 Internet Access ........................................................................................................ 79
4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 79
4.3.2 Ethernet: Static IP Address Assignment .................................................................... 80
4.3.3 Step 2 Internet Access Ethernet ................................................................................ 81
4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 83
4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 84
4.3.6 Step 2 Internet Access PPPoE .................................................................................. 86
4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 87
4.3.8 PPTP: Static IP Address Assignment ......................................................................... 90
4.3.9 Step 2 Internet Access PPTP .................................................................................... 91
4.3.10 Step 4 Internet Access - Finish ............................................................................... 92
4.4 Device Registration .......................................................................................................... 93
4.5 Installation Setup, Two Internet Service Providers .............................................................. 95
4.5.1 Internet Access Wizard Setup Complete ................................................................... 97
4.6 VPN Setup ........................................................................................................................... 97
4.7 VPN Wizards ...................................................................................................................... 98
4.7.1 VPN Express Wizard .................................................................................................. 98
4.8 VPN Express Wizard - Remote Gateway ........................................................................... 99
4.8.1 VPN Express Wizard - Policy Setting ...................................................................... 100
4.8.2 VPN Express Wizard - Summary ............................................................................ 101
4.8.3 VPN Express Wizard - Finish .................................................................................. 102
4.8.4 VPN Advanced Wizard ............................................................................................. 102
4.8.5 VPN Advanced Wizard - Remote Gateway .............................................................104
4.8.6 VPN Advanced Wizard - Phase 1 ........................................................................... 105
4.8.7 VPN Advanced Wizard - Phase 2 ........................................................................... 108
4.8.8 VPN Advanced Wizard - Summary ......................................................................... 109
4.8.9 VPN Advanced Wizard - Finish ............................................................................... 109
Chapter 5
Configuration Basics............................................................................................................111
5.1 Object-based Configuration ................................................................................................111

Table of Contents
ZyWALL USG 100/200 Series User’s Guide 13
5.2 Zones, Interfaces, and Physical Ports ................................................................................112
5.2.1 Interface Types ..........................................................................................................112
5.2.2 Default Interface and Zone Configuration .................................................................113
5.3 Terminology in the ZyWALL ................................................................................................115
5.4 Feature Configuration Overview ........................................................................................116
5.4.1 Feature ......................................................................................................................116
5.4.2 Interface ....................................................................................................................117
5.4.3 Trunks .......................................................................................................................117
5.4.4 IPSec VPN ................................................................................................................118
5.4.5 SSL VPN ...................................................................................................................118
5.4.6 L2TP VPN .................................................................................................................118
5.4.7 Zones ........................................................................................................................118
5.4.8 Device HA .................................................................................................................119
5.4.9 DDNS ........................................................................................................................119
5.4.10 Policy Routes ..........................................................................................................119
5.4.11 Static Routes .......................................................................................................... 120
5.4.12 Firewall ................................................................................................................... 120
5.4.13 Application Patrol ................................................................................................... 121
5.4.14 Anti-Virus ................................................................................................................121
5.4.15 IDP ......................................................................................................................... 122
5.4.16 ADP ........................................................................................................................122
5.4.17 Content Filter ..........................................................................................................122
5.4.18 Anti-Spam ...............................................................................................................122
5.4.19 Virtual Server (Port Forwarding) ............................................................................123
5.4.20 HTTP Redirect ....................................................................................................... 123
5.4.21 ALG ........................................................................................................................124
5.5 Objects .............................................................................................................................. 124
5.5.1 User/Group ...............................................................................................................124
5.6 System Management and Maintenance ............................................................................ 125
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage CNM .................. 125
5.6.2 File Manager ............................................................................................................ 126
5.6.3 Licensing Registration ..............................................................................................126
5.6.4 Licensing Update ..................................................................................................... 126
5.6.5 Logs and Reports ..................................................................................................... 126
5.6.6 Diagnostics ...............................................................................................................126
Chapter 6
Tutorials.................................................................................................................................129
6.1 How to Configure Ethernet Interfaces and Port Roles ....................................................... 129
6.1.1 How to Configure a WAN Ethernet Interface ............................................................130
6.1.2 How to Configure the OPT Interface for a Local Network ........................................130
6.1.3 How to Configure Port Roles .................................................................................... 132
6.2 How to Configure a Cellular Interface ................................................................................ 133

Table of Contents
ZyWALL USG 100/200 Series User’s Guide
14
6.3 How to Set Up a WLAN Interface ...................................................................................... 135
6.3.1 How to Set Up User Accounts .................................................................................. 135
6.3.2 How to Create the WLAN Interface ..........................................................................136
6.3.3 How to Set Up the Wireless Clients to Use the WLAN Interface ............................. 138
6.4 How to Set Up an IPSec VPN ........................................................................................... 148
6.4.1 How to Set Up the VPN Gateway ............................................................................ 148
6.4.2 How to Set Up the VPN Connection ........................................................................ 149
6.4.3 How to Set Up the Policy Route for the VPN Tunnel ...............................................150
6.4.4 How to Configure Security Policies for the VPN Tunnel ........................................... 151
6.5 How to Configure User-aware Access Control .................................................................. 152
6.5.1 How to Set Up User Accounts .................................................................................. 152
6.5.2 How to Set Up User Groups ..................................................................................... 152
6.5.3 How to Set Up User Authentication Using the RADIUS Server ............................... 153
6.5.4 How to Set Up Web Surfing Policies With Bandwidth Restrictions ..........................154
6.5.5 How to Set Up MSN Policies ....................................................................................156
6.5.6 How to Set Up Firewall Rules .................................................................................. 157
6.6 How to Configure Load Balancing ..................................................................................... 158
6.6.1 How to Set Up Available Bandwidth on Ethernet Interfaces ....................................159
6.6.2 How to Configure the Load Balancing in the WAN Trunk ........................................ 159
6.7 How to Configure Service Control ..................................................................................... 160
6.7.1 How to Allow HTTPS Administrator Access Only From the LAN .............................160
6.8 How to Allow Incoming H.323 Peer-to-peer Calls ............................................................. 163
6.8.1 How to Turn On the ALG .......................................................................................... 164
6.8.2 How to Set Up a Virtual Server Policy For H.323 ..................................................... 164
6.8.3 How to Set Up a Firewall Rule For H.323 ................................................................ 165
6.9 How to Use Device HA ......................................................................................................166
6.9.1 Before You Start ....................................................................................................... 167
6.9.2 How to Configure Device HA on the Master ZyWALL .............................................. 167
6.9.3 How to Configure the Backup ZyWALL .................................................................... 169
6.9.4 How to Deploy the Backup ZyWALL ........................................................................ 170
6.9.5 How to Check Your Device HA Setup ...................................................................... 170
6.10 How to Allow Public Access to a Server .......................................................................... 171
6.10.1 How to Create the Address Objects ....................................................................... 171
6.10.2 How to Configure a Virtual Server ..........................................................................172
Chapter 7
Status....................................................................................................................................175
7.1 Overview ............................................................................................................................175
7.1.1 What You Can Do in the Status Screens .................................................................. 175
7.2 The Status Screen .............................................................................................................175
7.2.1 The CPU Usage Screen ...........................................................................................180
7.2.2 The Memory Usage Screen ..................................................................................... 181
7.2.3 The Session Usage Screen ..................................................................................... 181

Table of Contents
ZyWALL USG 100/200 Series User’s Guide 15
7.2.4 The VPN Status Screen ........................................................................................... 182
7.2.5 The DHCP Table Screen .......................................................................................... 183
7.2.6 The Port Statistics Screen ........................................................................................ 184
7.2.7 The Port Statistics Graph Screen ............................................................................. 186
7.2.8 The Current Users Screen ....................................................................................... 187
7.2.9 The Cellular Status Detail Screen ............................................................................ 187
Chapter 8
Registration...........................................................................................................................189
8.1 Overview ............................................................................................................................189
8.1.1 What You Can Do in the Registration Screens ........................................................ 189
8.1.2 What you Need to Know About Service Registration ...............................................189
8.2 The Registration Screen ....................................................................................................190
8.3 The Service Screen ........................................................................................................... 193
Chapter 9
Signature Update ..................................................................................................................195
9.1 Overview ............................................................................................................................195
9.1.1 What You Can Do in the Update Screens ................................................................ 195
9.1.2 What you Need to Know About Signature Updates ................................................. 195
9.2 The Antivirus Update Screen .............................................................................................195
9.3 The IDP/AppPatrol Update Screen .................................................................................... 197
9.4 The System Protect Update Screen ................................................................................. 198
Part II: Network..................................................................................... 201
Chapter 10
Interface.................................................................................................................................203
10.1 Interface Overview ........................................................................................................... 203
10.1.1 What You Can Do in the Interface Screens ............................................................ 203
10.1.2 What You Need to Know About Interfaces ............................................................. 204
10.2 The Interface Status Screen ............................................................................................ 206
10.3 The Port Role Screen ......................................................................................................209
10.4 The Ethernet Summary Screen .......................................................................................210
10.4.1 The Ethernet Edit Screen ........................................................................................211
10.5 Interface Wizards ............................................................................................................. 218
10.5.1 Interface Wizard: OPT Interface First Screen ........................................................ 219
10.5.2 Interface Wizard: WAN Type .................................................................................. 219
10.5.3 Interface Wizard: Non-WAN OPT Interface Setup ................................................. 220
10.5.4 Interface Wizard: WAN Zone and IP Address Assignment .................................... 221
10.5.5 Interface Wizard: WAN ISP Connection Settings ................................................... 221

Table of Contents
ZyWALL USG 100/200 Series User’s Guide
16
10.5.6 Interface Wizard: Summary (Non-WAN) ................................................................ 223
10.5.7 Interface Wizard: Summary (WAN) ........................................................................ 223
10.6 The PPP Interfaces Screen .............................................................................................225
10.6.1 PPP Interface Edit Screen ..................................................................................... 226
10.7 Cellular Configuration Screen (3G) ................................................................................. 230
10.7.1 Cellular Add/Edit Screen ........................................................................................ 232
10.8 Cellular Status Screen .....................................................................................................235
10.9 WLAN Interface General Screen ..................................................................................... 237
10.9.1 WLAN Add/Edit Screen .......................................................................................... 239
10.9.2 WLAN Add/Edit Screen: WEP Security .................................................................. 245
10.9.3 WLAN Add/Edit Screen: WPA-PSK/WPA2-PSK Security ...................................... 246
10.9.4 WLAN Add/Edit Screen: WPA/WPA2 Security ....................................................... 247
10.10 WLAN Interface MAC Filter Screen ............................................................................... 249
10.10.1 MAC Filter Add/Edit Screen ................................................................................. 249
10.11 WLAN Interface Station Monitor Screen ........................................................................ 250
10.12 VLAN Interface Screen .................................................................................................. 251
10.12.1 Configuring the VLAN Summary Screen .............................................................. 253
10.12.2 Configuring the VLAN Add/Edit Screen ............................................................... 254
10.13 Bridge Interface Screen .................................................................................................259
10.13.1 Configuring the Bridge Summary Screen ............................................................. 260
10.13.2 Configuring the Bridge Add/Edit Screen ..............................................................261
10.14 Auxiliary Interface Screen ..............................................................................................266
10.15 Virtual Interface Screen .................................................................................................267
10.16 Interface Technical Reference ....................................................................................... 269
Chapter 11
Trunks....................................................................................................................................273
11.1 Overview .......................................................................................................................... 273
11.1.1 What You Can Do in the Trunk Screens ................................................................. 273
11.1.2 What you Need to Know About Trunks ..................................................................273
11.2 The Trunk Summary Screen ............................................................................................ 276
11.2.1 The Trunk Edit Screen ........................................................................................... 277
11.3 Trunk Technical Reference .............................................................................................. 279
Chapter 12
Policy and Static Routes......................................................................................................281
12.1 Policy and Static Routes Overview .................................................................................. 281
12.1.1 What You Can Do in the Policy and Static Route Screens ..................................... 282
12.1.2 What You Need to Know About Policy and Static Routing ..................................... 282
12.2 Policy Route Screen ........................................................................................................283
12.2.1 Policy Route Edit Screen ....................................................................................... 285
12.3 IP Static Route Screen ....................................................................................................287
12.3.1 Static Route Add/Edit Screen ................................................................................. 288

Table of Contents
ZyWALL USG 100/200 Series User’s Guide 17
12.4 Policy Routing Technical Reference ................................................................................ 289
Chapter 13
Routing Protocols.................................................................................................................291
13.1 Routing Protocols Overview ............................................................................................ 291
13.1.1 What You Can Do in the RIP and OSPF Screens .................................................. 291
13.1.2 What You Need to Know About Routing Protocols ................................................ 291
13.2 The RIP Screen ...............................................................................................................292
13.3 The OSPF Screen ...........................................................................................................293
13.3.1 Configuring the OSPF Screen ................................................................................ 296
13.3.2 OSPF Area Add/Edit Screen ................................................................................. 297
13.4 Routing Protocol Technical Reference ............................................................................ 299
Chapter 14
Zones ....................................................................................................................................301
14.1 Zones Overview ............................................................................................................... 301
14.1.1 What You Can Do in the Zones Screens ................................................................ 301
14.1.2 What You Need to Know About Zones ................................................................... 302
14.2 The Zone Screen .............................................................................................................302
14.2.1 The Zone Edit Screen ............................................................................................ 303
Chapter 15
DDNS......................................................................................................................................305
15.1 DDNS Overview ..............................................................................................................305
15.1.1 What You Can Do in the DDNS Screens ............................................................... 305
15.1.2 What You Need to Know About DDNS ................................................................... 305
15.2 The DDNS Screen ...........................................................................................................306
15.2.1 The Dynamic DNS Add/Edit Screen ...................................................................... 307
15.3 The DDNS Status Screen ................................................................................................ 309
Chapter 16
Virtual Servers.......................................................................................................................311
16.1 Virtual Servers Overview ..................................................................................................311
16.1.1 What You Can Do in the Virtual Server Screens .....................................................311
16.1.2 What You Need to Know About Virtual Servers ......................................................311
16.2 The Virtual Server Screen ............................................................................................... 312
16.2.1 The Virtual Server Add/Edit Screen ....................................................................... 313
16.3 NAT 1:1 and NAT Loopback Examples ........................................................................... 315
Chapter 17
HTTP Redirect......................................................................................................................323
17.1 Overview .......................................................................................................................... 323
17.1.1 What You Can Do in the HTTP Redirect Screens .................................................. 323

Table of Contents
ZyWALL USG 100/200 Series User’s Guide
18
17.1.2 What You Need to Know About HTTP Redirect ..................................................... 324
17.2 The HTTP Redirect Screen ............................................................................................. 324
17.2.1 The HTTP Redirect Edit Screen .............................................................................325
Chapter 18
ALG ........................................................................................................................................327
18.1 ALG Overview .................................................................................................................327
18.1.1 What You Can Do in the ALG Screen .................................................................... 327
18.1.2 What You Need to Know About ALG .....................................................................328
18.1.3 Before You Begin ................................................................................................... 330
18.2 The ALG Screen ..............................................................................................................330
18.3 ALG Technical Reference ................................................................................................ 332
Chapter 19
IP/MAC Binding................................................................................................................335
19.1 IP/MAC Binding Overview ............................................................................................... 335
19.1.1 What You Can Do in the IP/MAC Binding Screens ................................................ 335
19.1.2 What You Need to Know About IP/MAC Binding ................................................... 336
19.2 IP/MAC Binding Summary ............................................................................................... 336
19.2.1 IP/MAC Binding Edit ............................................................................................... 336
19.2.2 Static DHCP Edit .................................................................................................... 337
19.3 IP/MAC Binding Exempt List ........................................................................................... 338
19.4 IP/MAC Binding Monitor .................................................................................................. 339
Part III: Firewall .................................................................................... 341
Chapter 20
Firewall.................................................................................................................................343
20.1 Overview .......................................................................................................................... 343
20.1.1 What You Can Do in the Firewall Screens ............................................................. 343
20.1.2 What You Need to Know About the Firewall .......................................................... 344
20.1.3 Firewall Rule Example Applications ....................................................................... 346
20.1.4 Firewall Rule Configuration Example .....................................................................348
20.2 The Firewall Screen ......................................................................................................... 351
20.2.1 Configuring the Firewall Screen ............................................................................. 351
20.2.2 The Firewall Edit Screen ........................................................................................ 354
20.3 The Session Limit Screen ................................................................................................ 355
20.3.1 The Session Limit Edit Screen ............................................................................... 357
Part IV: VPN.......................................................................................... 359

Table of Contents
ZyWALL USG 100/200 Series User’s Guide 19
Chapter 21
IPSec VPN..............................................................................................................................361
21.1 IPSec VPN Overview ....................................................................................................... 361
21.1.1 What You Can Do in the IPSec VPN Screens ........................................................ 361
21.1.2 What You Need to Know About IPSec VPN ........................................................... 362
21.1.3 Before You Begin ................................................................................................... 362
21.2 The VPN Connection Screen .......................................................................................... 363
21.2.1 The VPN Connection Add/Edit (IKE) Screen ......................................................... 365
21.2.2 The VPN Connection Add/Edit Manual Key Screen .............................................. 370
21.3 The VPN Gateway Screen .............................................................................................. 373
21.3.1 The VPN Gateway Add/Edit Screen ...................................................................... 374
21.4 The VPN Concentrator Screen ........................................................................................379
21.4.1 The VPN Concentrator Add/Edit Screen ................................................................ 380
21.5 The SA Monitor Screen .................................................................................................. 381
21.6 IPSec VPN Background Information ...............................................................................383
Chapter 22
SSL VPN.................................................................................................................................395
22.1 Overview .......................................................................................................................... 395
22.1.1 What You Can Do in the SSL VPN Screens .......................................................... 395
22.1.2 What You Need to Know About SSL VPN .............................................................. 395
22.2 The SSL Access Privilege Screen ................................................................................... 397
22.2.1 The SSL Access Policy Add/Edit Screen .............................................................. 398
22.3 The SSL VPN Connection Monitor Screen ......................................................................400
22.4 The SSL Global Setting Screen ....................................................................................... 401
22.4.1 How to Upload a Custom Logo .............................................................................. 403
22.5 Establishing an SSL VPN Connection ............................................................................. 403
Chapter 23
SSL User Screens.................................................................................................................405
23.1 Overview .......................................................................................................................... 405
23.1.1 What You Need to Know About the SSL User Screens .........................................405
23.2 Remote User Login ..........................................................................................................406
23.3 The SSL VPN User Screens ........................................................................................... 408
23.4 Bookmarking the ZyWALL ............................................................................................... 409
23.5 Logging Out of the SSL VPN User Screens .................................................................... 409
Chapter 24
SSL User Application Screens ............................................................................................411
24.1 SSL User Application Screens Overview .........................................................................411
24.2 The Application Screen ....................................................................................................411

Table of Contents
ZyWALL USG 100/200 Series User’s Guide
20
Chapter 25
SSL User File Sharing ..........................................................................................................413
25.1 Overview .......................................................................................................................... 413
25.1.1 What You Need to Know About the SSL VPN File Sharing ................................... 413
25.2 The Main File Sharing Screen .........................................................................................413
25.3 Opening a File or Folder ..................................................................................................414
25.3.1 Downloading a File ................................................................................................. 415
25.3.2 Saving a File ..........................................................................................................415
25.4 Creating a New Folder .....................................................................................................416
25.5 Renaming a File or Folder ............................................................................................... 416
25.6 Deleting a File or Folder ..................................................................................................417
25.7 Uploading a File ............................................................................................................... 417
Chapter 26
L2TP VPN...............................................................................................................................419
26.1 Overview .......................................................................................................................... 419
26.1.1 What You Can Do in the L2TP VPN Screens .........................................................419
26.1.2 What You Need to Know About L2TP VPN ............................................................ 419
26.2 L2TP VPN Screen ...........................................................................................................421
26.3 L2TP VPN Session Monitor Screen ................................................................................ 422
Chapter 27
L2TP VPN Example...............................................................................................................425
27.1 L2TP VPN Example .........................................................................................................425
27.2 Configuring the Default L2TP VPN Gateway Example .................................................... 425
27.3 Configuring the Default L2TP VPN Connection Example ................................................ 426
27.4 Configuring the L2TP VPN Settings Example ................................................................. 428
27.5 Configuring the Policy Route for L2TP Example ............................................................. 428
27.6 Configuring L2TP VPN in Windows XP and 2000 ........................................................... 429
27.6.1 Configuring L2TP in Windows XP .......................................................................... 429
27.6.2 Configuring L2TP in Windows 2000 .......................................................................435
Part V: Application Patrol.................................................................... 451
Chapter 28
Application Patrol.................................................................................................................453
28.1 Overview .......................................................................................................................... 453
28.1.1 What You Can Do in the Application Patrol Screens .............................................. 453
28.1.2 What You Need to Know About Application Patrol ................................................ 454
28.1.3 Application Patrol Bandwidth Management Examples ........................................... 458
28.2 Application Patrol General Screen .................................................................................. 461