ZyXEL Communications ZyWall USG 50-H Series User manual

www.zyxel.com
ZyWALL USG 50-H Series
Unified Security Gateway
User’s Guide
Version 2.16
6/2009
Edition 1
DEFAULT LOGIN
Port LAN/DMZ 1
IP Address https://192.168.1.1
User Name admin
Password 1234

About This User's Guide
ZyWALL USG 50-H User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to want to configure the ZyWALL using the web
configurator.
How To Use This Guide
•ReadChapter 1 on page 31 chapter for an overview of features available on the ZyWALL.
•ReadChapter 3 on page 41 for web browser requirements and an introduction to the main
components, icons and menus in the ZyWALL web configurator.
•ReadChapter 4 on page 49 if you’re using the wizards for first time setup and you want
more detailed information than what the real time online help provides.
• It is highly recommended you read Chapter 5 on page 79 for detailed information on
essential terms used in the ZyWALL, what prerequisites are needed to configure a feature
and how to use that feature.
• It is highly recommended you read Chapter 6 on page 93 for ZyWALL application
examples.
• Subsequent chapters are arranged by menu item as defined in the web configurator. Read
each chapter carefully for detailed information on that menu item.
• To find specific information in this guide, use the Contents Overview, the Table of
Contents, the Index, or search the PDF file. E-mail [email protected] if you
cannot find the information you require.
Related Documentation
• Quick Start Guide
The Quick Start Guide is designed to show you how to make the ZyWALL hardware
connections, rack mounting and access the web configurator wizards. (See the wizard real
time help for information on configuring each screen.) It contains a connection diagram,
default settings, handy checklists and information on setting up your network and
configuring for Internet access.
• Configuration Reference Card
See this handy reference card to see what prerequisites are needed to configure a feature
and how to use this feature in the ZyWALL.
• CLI Reference Guide
The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to
configure the ZyWALL.
"It is recommended you use the web configurator to configure the ZyWALL.
• Web Configurator Online Help

About This User's Guide
ZyWALL USG 50-H User’s Guide
4
Click the help icon in any screen for help in configuring that screen and supplementary
information.
• Supporting Disk
Refer to the included CD for support documents.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]
Need More Help?
More help is available at www.zyxel.com.
• Download Library
Search for the latest product updates and documentation from this link. Read the Tech Doc
Overview to find out how to efficiently use the User Guide, Quick Start Guide and
Command Line Interface Reference Guide in order to better understand how to use your
product.
• Knowledge Base
If you have a specific question about your product, the answer may be here. This is a
collection of answers to previously asked questions about ZyXEL products.
•Forum
This contains discussions on ZyXEL products. Learn from others who use ZyXEL
products and share your experiences as well.

About This User's Guide
ZyWALL USG 50-H User’s Guide 5
Customer Support
Should problems arise that cannot be solved by the methods listed above, you should contact
your vendor. If you cannot contact your vendor, then contact a ZyXEL office for the region in
which you bought the device.
See http://www.zyxel.com/web/contact_us.php for contact information. Please have the
following information ready when you contact an office.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.

Document Conventions
ZyWALL USG 50-H User’s Guide
6
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL USG 50-H may be referred to as the “ZyWALL”, the “device”, the
“system” or the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL USG 50-H User’s Guide 7
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server Firewall Telephone
Switch Router Printer

Safety Warnings
ZyWALL USG 50-H User’s Guide
8
Safety Warnings
1For your safety, be sure to read and follow all warning notices and instructions.
• Do NOT use this product near water, for example, in a wet basement or near a swimming
pool.
• Do NOT expose your device to dampness, dust or corrosive liquids.
• Do NOT store things on the device.
• Do NOT install, use, or service this device during a thunderstorm. There is a remote risk
of electric shock from lightning.
• Connect ONLY suitable accessories to the device.
• Do NOT open the device or unit. Opening or removing covers can expose you to
dangerous high voltage points or other risks. ONLY qualified service personnel should
service or disassemble this device. Please contact your vendor for further information.
• Make sure to connect the cables to the correct ports.
• Place connecting cables carefully so that no one will step on them or stumble over them.
• Always disconnect all cables from this device before servicing or disassembling.
• Use ONLY an appropriate power adaptor or cord for your device. Connect it to the right
supply voltage (for example, 110V AC in North America or 230V AC in Europe).
• Do NOT remove the plug and connect it to a power outlet by itself; always attach the plug
to the power adaptor first before connecting it to a power outlet.
• Do NOT allow anything to rest on the power adaptor or cord and do NOT place the
product where anyone can walk on the power adaptor or cord.
• Do NOT use the device if the power adaptor or cord is damaged as it might cause
electrocution.
• If the power adaptor or cord is damaged, remove it from the device and the power source.
• Do NOT attempt to repair the power adaptor or cord. Contact your local vendor to order a
new one.
• Do not use the device outside, and make sure all the connections are indoors. There is a
remote risk of electric shock from lightning.
• CAUTION: RISK OF EXPLOSION IF BATTERY (on the motherboard) IS REPLACED
BY AN INCORRECT TYPE. DISPOSE OF USED BATTERIES ACCORDING TO
THE INSTRUCTIONS. Dispose them at the applicable collection point for the recycling
of electrical and electronic equipment. For detailed information about recycling of this
product, please contact your local city office, your household waste disposal service or the
store where you purchased the product.
• Antenna Warning! This device meets ETSI and FCC certification requirements when
using the included antenna(s). Only use the included antenna(s).
• Do NOT obstruct the device ventilation slots, as insufficient airflow may harm your
device.

Safety Warnings
ZyWALL USG 50-H User’s Guide 9
Your product is marked with this symbol, which is known as the WEEE mark. WEEE
stands for Waste Electronics and Electrical Equipment. It means that used electrical and
electronic products should not be mixed with general waste. Used electrical and
electronic equipment should be treated separately.

Safety Warnings
ZyWALL USG 50-H User’s Guide
10

Contents Overview
ZyWALL USG 50-H User’s Guide 11
Contents Overview
Getting Started .......................................................................................................................29
Introducing the ZyWALL ............................................................................................................ 31
Features and Applications ......................................................................................................... 35
Web Configurator ....................................................................................................................... 41
Wizard Setup ............................................................................................................................. 49
Configuration Basics .................................................................................................................. 79
Tutorials ..................................................................................................................................... 93
Status ...................................................................................................................................... 131
Network .................................................................................................................................145
Interface ...................................................................................................................................147
Trunks ...................................................................................................................................... 217
Policy and Static Routes .......................................................................................................... 225
Routing Protocols .................................................................................................................... 237
Zones ...................................................................................................................................... 247
DDNS ...................................................................................................................................... 251
Virtual Servers ......................................................................................................................... 257
HTTP Redirect ........................................................................................................................ 269
ALG ......................................................................................................................................... 273
IP/MAC Binding .................................................................................................................. 281
Firewall ..................................................................................................................................287
Firewall .................................................................................................................................. 289
VPN ........................................................................................................................................305
IPSec VPN ............................................................................................................................... 307
SSL VPN ................................................................................................................................. 341
SSL User Screens ................................................................................................................... 349
SSL User Application Screens ................................................................................................357
ZyWALL SecuExtender ........................................................................................................... 359
L2TP VPN ................................................................................................................................ 363
L2TP VPN Example .................................................................................................................369
Application Patrol ................................................................................................................395
Application Patrol/BWM ........................................................................................................... 397

Contents Overview
ZyWALL USG 50-H User’s Guide
12
Anti-X ....................................................................................................................................421
ADP ........................................................................................................................................423
Objects ..................................................................................................................................441
User/Group ..............................................................................................................................443
Addresses ............................................................................................................................... 457
Services ................................................................................................................................... 463
Schedules ................................................................................................................................ 469
AAA Server ............................................................................................................................. 475
Authentication Method ............................................................................................................. 485
Certificates ...............................................................................................................................489
SSL Application ....................................................................................................................... 507
System ..................................................................................................................................511
System ................................................................................................................................... 513
Maintenance, Troubleshooting, & Specifications .............................................................551
File Manager ........................................................................................................................... 553
Logs ........................................................................................................................................ 563
Reports ................................................................................................................................... 575
Diagnostics ............................................................................................................................. 583
Reboot ..................................................................................................................................... 585
Troubleshooting ....................................................................................................................... 587
Product Specifications ............................................................................................................. 591
Appendices and Index .........................................................................................................597

Table of Contents
ZyWALL USG 50-H User’s Guide 13
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................6
Safety Warnings........................................................................................................................8
Contents Overview .................................................................................................................11
Table of Contents....................................................................................................................13
Part I: Getting Started............................................................................ 29
Chapter 1
Introducing the ZyWALL ........................................................................................................31
1.1 Overview and Key Default Settings ..................................................................................... 31
1.2 Front Panel LEDs ................................................................................................................ 31
1.3 Management Overview ........................................................................................................32
1.4 Starting and Stopping the ZyWALL ...................................................................................... 33
Chapter 2
Features and Applications.....................................................................................................35
2.1 Features .............................................................................................................................. 35
2.2 Packet Flow ......................................................................................................................... 36
2.2.1 Interface to Interface (Through ZyWALL) ................................................................... 37
2.2.2 Interface to Interface (To/From ZyWALL) ................................................................... 37
2.2.3 Interface to Interface (From VPN Tunnel) .................................................................. 37
2.2.4 Interface to Interface (To VPN Tunnel) ....................................................................... 37
2.3 Applications ......................................................................................................................... 37
2.3.1 VPN Connectivity ....................................................................................................... 37
2.3.2 SSL VPN Network Access ......................................................................................... 38
2.3.3 User-Aware Access Control ....................................................................................... 39
2.3.4 Multiple WAN Interfaces ............................................................................................. 39
Chapter 3
Web Configurator....................................................................................................................41
3.1 Web Configurator Requirements ......................................................................................... 41
3.2 Web Configurator Access ....................................................................................................41
3.3 Web Configurator Main Screen ........................................................................................... 43

Table of Contents
ZyWALL USG 50-H User’s Guide
14
3.3.1 Title Bar ...................................................................................................................... 43
3.3.2 Navigation Panel ........................................................................................................44
3.3.3 Main Window ..............................................................................................................47
3.3.4 Message Bar ..............................................................................................................47
Chapter 4
Wizard Setup...........................................................................................................................49
4.1 Wizard Setup Overview ....................................................................................................... 49
4.2 Installation Setup, One ISP ................................................................................................. 50
4.3 Step 1 Internet Access ........................................................................................................ 51
4.3.1 Ethernet: Auto IP Address Assignment ...................................................................... 52
4.3.2 Ethernet: Static IP Address Assignment .................................................................... 52
4.3.3 Step 2 Internet Access Ethernet ................................................................................ 53
4.3.4 PPPoE: Auto IP Address Assignment ........................................................................ 54
4.3.5 PPPoE: Static IP Address Assignment ...................................................................... 55
4.3.6 Step 2 Internet Access PPPoE .................................................................................. 57
4.3.7 PPTP: Auto IP Address Assignment .......................................................................... 58
4.3.8 PPTP: Static IP Address Assignment ......................................................................... 60
4.3.9 Step 2 Internet Access PPTP .................................................................................... 61
4.3.10 Step 4 Internet Access - Finish ............................................................................... 63
4.4 Installation Setup, Two Internet Service Providers .............................................................. 63
4.4.1 Internet Access Wizard Setup Complete ................................................................... 65
4.5 Wireless Wizard - Configure Wireless Parameters ............................................................. 65
4.5.1 Wireless Wizard: IP Address and DHCP Settings .................................................... 66
4.5.2 Wireless Wizard - Finish ........................................................................................... 66
4.6 VPN Setup ........................................................................................................................... 67
4.6.1 VPN Express Wizard .................................................................................................. 68
4.6.2 VPN Advanced Wizard ............................................................................................... 71
4.6.3 VPN Advanced Wizard - Finish ................................................................................. 77
Chapter 5
Configuration Basics..............................................................................................................79
5.1 Object-based Configuration .................................................................................................79
5.2 Zones, Interfaces, and Physical Ports ................................................................................. 80
5.2.1 Interface Types ........................................................................................................... 80
5.2.2 Default Interface and Zone Configuration .................................................................. 81
5.3 Terminology in the ZyWALL .................................................................................................82
5.4 Feature Configuration Overview ......................................................................................... 83
5.4.1 Feature ....................................................................................................................... 83
5.4.2 Interface ..................................................................................................................... 83
5.4.3 Trunks ........................................................................................................................ 84
5.4.4 IPSec VPN ................................................................................................................. 84
5.4.5 SSL VPN .................................................................................................................... 84

Table of Contents
ZyWALL USG 50-H User’s Guide 15
5.4.6 L2TP VPN .................................................................................................................. 85
5.4.7 Zones ......................................................................................................................... 85
5.4.8 DDNS ......................................................................................................................... 85
5.4.9 Policy Routes ............................................................................................................. 85
5.4.10 Static Routes ............................................................................................................ 86
5.4.11 Firewall ..................................................................................................................... 86
5.4.12 Application Patrol .....................................................................................................87
5.4.13 ADP .......................................................................................................................... 88
5.4.14 Virtual Server (Port Forwarding) .............................................................................. 88
5.4.15 HTTP Redirect ......................................................................................................... 88
5.4.16 ALG .......................................................................................................................... 89
5.5 Objects ................................................................................................................................ 89
5.5.1 User/Group ................................................................................................................. 90
5.6 System Management and Maintenance .............................................................................. 90
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, .................................................................. 90
5.6.2 File Manager .............................................................................................................. 91
5.6.3 Logs and Reports ....................................................................................................... 91
5.6.4 Diagnostics ................................................................................................................. 91
Chapter 6
Tutorials...................................................................................................................................93
6.1 How to Configure an Ethernet Interface .............................................................................. 93
6.2 How to Configure Port Roles ...............................................................................................94
6.3 How to Configure a Cellular Interface .................................................................................. 95
6.4 How to Set Up a WLAN Interface ........................................................................................ 97
6.4.1 How to Set Up User Accounts .................................................................................... 98
6.4.2 How to Create the WLAN Interface ............................................................................ 98
6.4.3 How to Set Up the Wireless Clients to Use the WLAN Interface ............................. 100
6.5 How to Set Up an IPSec VPN ............................................................................................110
6.5.1 How to Set Up the VPN Gateway .............................................................................110
6.5.2 How to Set Up the VPN Connection .........................................................................111
6.5.3 How to Set Up the Policy Route for the VPN Tunnel ................................................112
6.5.4 How to Configure Security Policies for the VPN Tunnel ............................................113
6.6 How to Configure User-aware Access Control ...................................................................114
6.6.1 How to Set Up User Accounts ...................................................................................114
6.6.2 How to Set Up User Groups ......................................................................................114
6.6.3 How to Set Up User Authentication Using the RADIUS Server ................................115
6.6.4 How to Set Up Web Surfing Policies With Bandwidth Restrictions ...........................116
6.6.5 How to Set Up MSN Policies .....................................................................................118
6.6.6 How to Set Up Firewall Rules ...................................................................................119
6.7 How to Configure Load Balancing ..................................................................................... 120
6.7.1 How to Set Up Available Bandwidth on Ethernet Interfaces ....................................121
6.7.2 How to Configure the Load Balancing in the WAN Trunk ........................................ 121

Table of Contents
ZyWALL USG 50-H User’s Guide
16
6.8 How to Configure Service Control ..................................................................................... 122
6.8.1 How to Allow HTTPS Administrator Access Only From the LAN .............................122
6.9 How to Allow Incoming H.323 Peer-to-peer Calls ............................................................. 124
6.9.1 How to Turn On the ALG .......................................................................................... 125
6.9.2 How to Set Up a Virtual Server Policy For H.323 ..................................................... 125
6.9.3 How to Set Up a Firewall Rule For H.323 ................................................................ 126
6.10 How to Allow Public Access to a Server .......................................................................... 127
6.10.1 How to Create the Address Objects ....................................................................... 128
6.10.2 How to Configure a Virtual Server ..........................................................................128
Chapter 7
Status....................................................................................................................................131
7.1 Overview ............................................................................................................................131
7.1.1 What You Can Do in the Status Screens .................................................................. 131
7.2 The Status Screen .............................................................................................................131
7.2.1 The CPU Usage Screen ...........................................................................................134
7.2.2 The Memory Usage Screen ..................................................................................... 135
7.2.3 The Session Usage Screen ..................................................................................... 136
7.2.4 The VPN Status Screen ........................................................................................... 137
7.2.5 The DHCP Table Screen .......................................................................................... 138
7.2.6 The Port Statistics Screen ........................................................................................ 139
7.2.7 The Port Statistics Graph Screen ............................................................................. 141
7.2.8 The Current Users Screen ....................................................................................... 142
7.2.9 The Cellular Status Detail Screen ............................................................................ 142
Part II: Network..................................................................................... 145
Chapter 8
Interface.................................................................................................................................147
8.1 Interface Overview ............................................................................................................. 147
8.1.1 What You Can Do in the Interface Screens .............................................................. 147
8.1.2 What You Need to Know About Interfaces ............................................................... 148
8.2 The Interface Status Screen .............................................................................................. 150
8.3 The Port Role Screen ........................................................................................................152
8.4 The Ethernet Summary Screen ......................................................................................... 153
8.4.1 The Ethernet Edit Screen ......................................................................................... 154
8.5 WAN Interface Wizards ..................................................................................................... 162
8.5.1 WAN Interface Wizard WAN Type ............................................................................ 162
8.5.2 WAN Interface Wizard: WAN Zone and IP Address Assignment ............................. 163
8.5.3 WAN Interface Wizard: WAN ISP Connection Settings ........................................... 163
8.5.4 Interface Wizard: Summary (WAN) ..........................................................................165

Table of Contents
ZyWALL USG 50-H User’s Guide 17
8.6 The PPP Interfaces Screen ............................................................................................... 166
8.6.1 PPP Interface Edit Screen .......................................................................................167
8.7 Cellular Configuration Screen (3G) ................................................................................... 171
8.7.1 Cellular Add/Edit Screen .......................................................................................... 173
8.8 Cellular Status Screen ....................................................................................................... 176
8.9 Tunnel Interface Screen ....................................................................................................179
8.9.1 Configuring the Tunnel Screen ................................................................................. 179
8.9.2 Configuring the Tunnel Edit Screen ......................................................................... 180
8.10 WLAN Interface General Screen .....................................................................................183
8.10.1 WLAN Add/Edit Screen .......................................................................................... 186
8.10.2 WLAN Add/Edit Screen: WEP Security .................................................................. 191
8.10.3 WLAN Add/Edit Screen: WPA-PSK/WPA2-PSK Security ...................................... 192
8.10.4 WLAN Add/Edit Screen: WPA/WPA2 Security ....................................................... 193
8.11 WLAN Interface MAC Filter Screen ................................................................................. 195
8.11.1 MAC Filter Add/Edit Screen ................................................................................... 195
8.12 WLAN Interface Station Monitor Screen .......................................................................... 196
8.13 VLAN Interface Screen .................................................................................................... 197
8.13.1 Configuring the VLAN Summary Screen ................................................................ 199
8.13.2 Configuring the VLAN Add/Edit Screen ................................................................. 200
8.14 Bridge Interface Screen ...................................................................................................205
8.14.1 Configuring the Bridge Summary Screen ............................................................... 206
8.14.2 Configuring the Bridge Add/Edit Screen ................................................................ 207
8.15 Virtual Interface Screen ...................................................................................................212
8.16 Interface Technical Reference ......................................................................................... 213
Chapter 9
Trunks....................................................................................................................................217
9.1 Overview ............................................................................................................................217
9.1.1 What You Can Do in the Trunk Screens .................................................................. 217
9.1.2 What you Need to Know About Trunks ....................................................................217
9.2 The Trunk Summary Screen .............................................................................................. 220
9.2.1 The Trunk Edit Screen ............................................................................................ 221
9.3 Trunk Technical Reference ................................................................................................ 223
Chapter 10
Policy and Static Routes......................................................................................................225
10.1 Policy and Static Routes Overview .................................................................................. 225
10.1.1 What You Can Do in the Policy and Static Route Screens ..................................... 226
10.1.2 What You Need to Know About Policy and Static Routing ..................................... 226
10.1.3 DiffServ ..................................................................................................................227
10.2 Policy Route Screen ........................................................................................................228
10.2.1 Policy Route Edit Screen ....................................................................................... 229
10.3 IP Static Route Screen ....................................................................................................233

Table of Contents
ZyWALL USG 50-H User’s Guide
18
10.3.1 Static Route Add/Edit Screen ................................................................................. 233
10.4 Policy Routing Technical Reference ................................................................................ 234
Chapter 11
Routing Protocols.................................................................................................................237
11.1 Routing Protocols Overview ............................................................................................. 237
11.1.1 What You Can Do in the RIP and OSPF Screens .................................................. 237
11.1.2 What You Need to Know About Routing Protocols .................................................237
11.2 The RIP Screen ............................................................................................................... 238
11.3 The OSPF Screen ............................................................................................................239
11.3.1 Configuring the OSPF Screen ................................................................................242
11.3.2 OSPF Area Add/Edit Screen .................................................................................243
11.4 Routing Protocol Technical Reference ............................................................................. 245
Chapter 12
Zones ....................................................................................................................................247
12.1 Zones Overview ............................................................................................................... 247
12.1.1 What You Can Do in the Zones Screens ................................................................ 247
12.1.2 What You Need to Know About Zones ................................................................... 247
12.2 The Zone Screen .............................................................................................................248
12.2.1 The Zone Edit Screen ............................................................................................ 249
Chapter 13
DDNS......................................................................................................................................251
13.1 DDNS Overview ..............................................................................................................251
13.1.1 What You Can Do in the DDNS Screens ............................................................... 251
13.1.2 What You Need to Know About DDNS ................................................................... 251
13.2 The DDNS Screen ...........................................................................................................252
13.2.1 The Dynamic DNS Add/Edit Screen ...................................................................... 253
13.3 The DDNS Status Screen ................................................................................................ 256
Chapter 14
Virtual Servers.......................................................................................................................257
14.1 Virtual Servers Overview ................................................................................................. 257
14.1.1 What You Can Do in the Virtual Server Screens .................................................... 257
14.1.2 What You Need to Know About Virtual Servers ..................................................... 257
14.2 The Virtual Server Screen ............................................................................................... 258
14.2.1 The Virtual Server Add/Edit Screen ....................................................................... 259
14.3 NAT 1:1 and NAT Loopback Examples ........................................................................... 261
Chapter 15
HTTP Redirect......................................................................................................................269
15.1 Overview .......................................................................................................................... 269

Table of Contents
ZyWALL USG 50-H User’s Guide 19
15.1.1 What You Can Do in the HTTP Redirect Screens .................................................. 269
15.1.2 What You Need to Know About HTTP Redirect ..................................................... 270
15.2 The HTTP Redirect Screen ............................................................................................. 270
15.2.1 The HTTP Redirect Edit Screen .............................................................................271
Chapter 16
ALG ........................................................................................................................................273
16.1 ALG Overview .................................................................................................................273
16.1.1 What You Can Do in the ALG Screen .................................................................... 273
16.1.2 What You Need to Know About ALG .....................................................................274
16.1.3 Before You Begin ................................................................................................... 276
16.2 The ALG Screen ..............................................................................................................276
16.3 ALG Technical Reference ................................................................................................ 278
Chapter 17
IP/MAC Binding................................................................................................................281
17.1 IP/MAC Binding Overview ............................................................................................... 281
17.1.1 What You Can Do in the IP/MAC Binding Screens ................................................ 281
17.1.2 What You Need to Know About IP/MAC Binding ................................................... 282
17.2 IP/MAC Binding Summary ............................................................................................... 282
17.2.1 IP/MAC Binding Edit ............................................................................................... 282
17.2.2 Static DHCP Edit .................................................................................................... 283
17.3 IP/MAC Binding Exempt List ........................................................................................... 284
17.4 IP/MAC Binding Monitor .................................................................................................. 285
Part III: Firewall .................................................................................... 287
Chapter 18
Firewall.................................................................................................................................289
18.1 Overview .......................................................................................................................... 289
18.1.1 What You Can Do in the Firewall Screens ............................................................. 289
18.1.2 What You Need to Know About the Firewall .......................................................... 290
18.1.3 Firewall Rule Example Applications ....................................................................... 292
18.1.4 Firewall Rule Configuration Example .....................................................................294
18.2 The Firewall Screen ......................................................................................................... 296
18.2.1 Configuring the Firewall Screen ............................................................................. 297
18.2.2 The Firewall Edit Screen ........................................................................................ 299
18.3 The Session Limit Screen ................................................................................................ 301
18.3.1 The Session Limit Edit Screen ...............................................................................302

Table of Contents
ZyWALL USG 50-H User’s Guide
20
Part IV: VPN.......................................................................................... 305
Chapter 19
IPSec VPN..............................................................................................................................307
19.1 IPSec VPN Overview ....................................................................................................... 307
19.1.1 What You Can Do in the IPSec VPN Screens ........................................................ 307
19.1.2 What You Need to Know About IPSec VPN ........................................................... 308
19.1.3 Before You Begin ................................................................................................... 309
19.2 The VPN Connection Screen .......................................................................................... 310
19.2.1 The VPN Connection Add/Edit (IKE) Screen ......................................................... 312
19.2.2 The VPN Connection Add/Edit Manual Key Screen .............................................. 318
19.3 The VPN Gateway Screen .............................................................................................. 320
19.3.1 The VPN Gateway Add/Edit Screen ...................................................................... 321
19.4 The VPN Concentrator Screen ........................................................................................326
19.4.1 The VPN Concentrator Add/Edit Screen ................................................................ 327
19.5 The SA Monitor Screen .................................................................................................. 328
19.6 IPSec VPN Background Information ...............................................................................330
Chapter 20
SSL VPN.................................................................................................................................341
20.1 Overview .......................................................................................................................... 341
20.1.1 What You Can Do in the SSL VPN Screens .......................................................... 341
20.1.2 What You Need to Know About SSL VPN .............................................................. 341
20.2 The SSL Access Privilege Screen ................................................................................... 343
20.2.1 The SSL Access Policy Add/Edit Screen .............................................................. 343
20.3 The SSL VPN Connection Monitor Screen ......................................................................345
20.4 The SSL Global Setting Screen ....................................................................................... 346
20.4.1 How to Upload a Custom Logo .............................................................................. 348
20.5 Establishing an SSL VPN Connection ............................................................................. 348
Chapter 21
SSL User Screens.................................................................................................................349
21.1 Overview .......................................................................................................................... 349
21.1.1 What You Need to Know About the SSL User Screens .........................................349
21.2 Remote User Login ..........................................................................................................350
21.3 The SSL VPN User Screens ........................................................................................... 354
21.4 Bookmarking the ZyWALL ............................................................................................... 355
21.5 Logging Out of the SSL VPN User Screens .................................................................... 355
Chapter 22
SSL User Application Screens ............................................................................................357
22.1 The Application Screen ...................................................................................................357