ZyXEL Communications ZyWALL SSL 10 User manual

www.zyxel.com
ZyWALL SSL 10
Integrated SSL-VPN Appliance
User’s Guide
Version 2.00
12/2008
Edition 1

About This User's Guide
ZyWALL SSL 10 User’s Guide 3
About This User's Guide
Intended Audience
This manual is intended for people who want to log into a network over secure connections
through the ZyWALL. You should have at least a basic knowledge of computer usage.
Related Documentation
• Web Configurator Online Help
Embedded web help for descriptions of individual screens and supplementary
information.
• ZyXEL Web Site
Please refer to www.zyxel.com for additional support documentation and product
certifications.
User Guide Feedback
Help us help you. Send all User Guide-related comments, questions or suggestions for
improvement to the following address, or use e-mail instead. Thank you!
The Technical Writing Team,
ZyXEL Communications Corp.,
6 Innovation Road II,
Science-Based Industrial Park,
Hsinchu, 300, Taiwan.
E-mail: [email protected]

Document Conventions
ZyWALL SSL 10 User’s Guide
4
Document Conventions
Warnings and Notes
These are how warnings and notes are shown in this User’s Guide.
1Warnings tell you about things that could harm you or your device.
"Notes tell you other important information (for example, other things you may
need to configure or helpful tips) or recommendations.
Syntax Conventions
• The ZyWALL SSL 10 may be referred to as the “ZyWALL”, the “device”, the “system” or
the “product” in this User’s Guide.
• Product labels, screen names, field labels and field choices are all in bold font.
• A key stroke is denoted by square brackets and uppercase text, for example, [ENTER]
means the “enter” or “return” key on your keyboard.
• “Enter” means for you to type one or more characters and then press the [ENTER] key.
“Select” or “choose” means for you to use one of the predefined choices.
• A right angle bracket ( > ) within a screen name denotes a mouse click. For example,
Maintenance > Log > Log Setting means you first click Maintenance in the navigation
panel, then the Log sub menu and finally the Log Setting tab to get to that screen.
• Units of measurement may denote the “metric” value or the “scientific” value. For
example, “k” for kilo may denote “1000” or “1024”, “M” for mega may denote “1000000”
or “1048576” and so on.
• “e.g.,” is a shorthand for “for instance”, and “i.e.,” means “that is” or “in other words”.

Document Conventions
ZyWALL SSL 10 User’s Guide 5
Icons Used in Figures
Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an
exact representation of your device.
ZyWALL Computer Notebook computer
Server DSLAM Firewall
Telephone Switch Router

Document Conventions
ZyWALL SSL 10 User’s Guide
6

Table of Contents
ZyWALL SSL 10 User’s Guide 7
Table of Contents
About This User's Guide..........................................................................................................3
Document Conventions............................................................................................................4
Table of Contents......................................................................................................................7
List of Figures...........................................................................................................................9
Part I: Remote User Access.................................................................. 13
Chapter 1
Introduction.............................................................................................................................15
1.1 Overview .............................................................................................................................. 15
1.1.1 Network Resource Access Methods .......................................................................... 15
1.1.2 System Requirements ................................................................................................ 16
1.1.3 Information You Need ................................................................................................ 16
1.1.4 Certificate ................................................................................................................... 16
1.2 Remote User Login .............................................................................................................. 16
1.3 Remote User Screen ........................................................................................................... 19
1.4 Bookmark ............................................................................................................................ 20
1.5 Logout .................................................................................................................................. 20
Chapter 2
Application ..............................................................................................................................23
2.1 Overview .............................................................................................................................. 23
2.1.1 The Application Screen .............................................................................................. 23
2.2 Accessing a Web-based Application ................................................................................... 24
2.3 Accessing a Non-Web Based Application ........................................................................... 24
Chapter 3
File Sharing .............................................................................................................................27
3.1 Overview .............................................................................................................................. 27
3.2 Main File Sharing Screen .................................................................................................... 27
3.3 Opening a File or Folder ...................................................................................................... 28
3.3.1 Downloading a File ..................................................................................................... 29
3.3.2 Saving a File .............................................................................................................. 29
3.4 Creating a New Folder ......................................................................................................... 30
3.5 Renaming a File or Folder ................................................................................................... 30

Table of Contents
ZyWALL SSL 10 User’s Guide
8
3.6 Deleting a File or Folder ...................................................................................................... 31
3.7 Uploading a File ................................................................................................................... 32
Chapter 4
ZyWALL SecuExtender...........................................................................................................33
4.1 Connecting Using the ZyWALL SecuExtender .................................................................... 33
4.2 Statistics .............................................................................................................................. 34
4.3 Proxy Settings ..................................................................................................................... 35
4.4 View Log .............................................................................................................................. 36
Part II: Troubleshooting, Appendices and Index ................................ 39
Chapter 5
Troubleshooting......................................................................................................................41
Appendix A Setting Up Your Computer’s IP Address.............................................................45
Appendix B Importing Certificates..........................................................................................69
Appendix C Legal Information................................................................................................93
Appendix D Customer Support...............................................................................................95

List of Figures
ZyWALL SSL 10 User’s Guide 9
List of Figures
Figure 1 Network Example .................................................................................................................... 15
Figure 2 Enter the Address in a Web Browser ..................................................................................... 16
Figure 3 Login Security Screen ........................................................................................................... 17
Figure 4 Login Screen ......................................................................................................................... 17
Figure 5 Software Upgrade Prompt ..................................................................................................... 18
Figure 6 Login Warning Message ....................................................................................................... 18
Figure 7 ZyWALL SecuExtender Icon ................................................................................................. 18
Figure 8 Remote User Screen ............................................................................................................. 19
Figure 9 Add Favorite ............................................................................................................................ 20
Figure 10 Logout: Prompt ...................................................................................................................... 20
Figure 11 Logout: Information Window .................................................................................................. 20
Figure 12 Logout: Successful ................................................................................................................ 21
Figure 13 Application ............................................................................................................................. 23
Figure 14 Application: Access Web-based Application ......................................................................... 24
Figure 15 Application: Access Non-Web based Application .................................................................. 25
Figure 16 Application: Telnet Example .................................................................................................. 25
Figure 17 File Sharing ........................................................................................................................... 28
Figure 18 File Sharing: Enter Access User Name and Password ........................................................ 28
Figure 19 File Sharing: Open a Word File ............................................................................................ 29
Figure 20 File Sharing: Save a Word File ............................................................................................. 30
Figure 21 File Sharing: Save a Word File ............................................................................................. 30
Figure 22 File Sharing: Rename ............................................................................................................ 31
Figure 23 File Sharing: Rename ............................................................................................................ 31
Figure 24 File Sharing: Delete Prompt .................................................................................................. 32
Figure 25 File Sharing: File Upload ....................................................................................................... 32
Figure 26 Opening the ZyWALL SecuExtender ...................................................................................33
Figure 27 ZyWALL SecuExtender Connect Screen ............................................................................ 34
Figure 28 ZyWALL SecuExtender Icon ............................................................................................... 34
Figure 29 ZyWALL SecuExtender Statistics .......................................................................................... 34
Figure 30 Proxy Settings ....................................................................................................................... 36
Figure 31 ZyWALL SecuExtender Log ................................................................................................... 37
Figure 32 Windows XP: Start Menu ........................................................................................................46
Figure 33 Windows XP: Control Panel ................................................................................................... 46
Figure 34 Windows XP: Control Panel > Network Connections > Properties ........................................ 47
Figure 35 Windows XP: Local Area Connection Properties ................................................................... 47
Figure 36 Windows XP: Internet Protocol (TCP/IP) Properties .............................................................. 48
Figure 37 Windows Vista: Start Menu ..................................................................................................... 49
Figure 38 Windows Vista: Control Panel ................................................................................................ 49

List of Figures
ZyWALL SSL 10 User’s Guide
10
Figure 39 Windows Vista: Network And Internet .................................................................................... 49
Figure 40 Windows Vista: Network and Sharing Center ......................................................................... 50
Figure 41 Windows Vista: Network and Sharing Center ......................................................................... 50
Figure 42 Windows Vista: Local Area Connection Properties ................................................................ 51
Figure 43 Windows Vista: Internet Protocol Version 4 (TCP/IPv4) Properties ....................................... 52
Figure 44 Mac OS X 10.4: Apple Menu .................................................................................................. 53
Figure 45 Mac OS X 10.4: System Preferences ..................................................................................... 53
Figure 46 Mac OS X 10.4: Network Preferences ...................................................................................54
Figure 47 Mac OS X 10.4: Network Preferences > TCP/IP Tab. ............................................................ 54
Figure 48 Mac OS X 10.4: Network Preferences > Ethernet .................................................................. 55
Figure 49 Mac OS X 10.4: Network Utility .............................................................................................. 55
Figure 50 Mac OS X 10.5: Apple Menu .................................................................................................. 56
Figure 51 Mac OS X 10.5: Systems Preferences ...................................................................................56
Figure 52 Mac OS X 10.5: Network Preferences > Ethernet .................................................................. 57
Figure 53 Mac OS X 10.5: Network Preferences > Ethernet .................................................................. 58
Figure 54 Mac OS X 10.5: Network Utility .............................................................................................. 58
Figure 55 Ubuntu 8: System > Administration Menu ..............................................................................59
Figure 56 Ubuntu 8: Network Settings > Connections ............................................................................ 59
Figure 57 Ubuntu 8: Administrator Account Authentication .................................................................... 60
Figure 58 Ubuntu 8: Network Settings > Connections ............................................................................ 60
Figure 59 Ubuntu 8: Network Settings > Properties ............................................................................... 61
Figure 60 Ubuntu 8: Network Settings > DNS ....................................................................................... 61
Figure 61 Ubuntu 8: Network Tools ........................................................................................................ 62
Figure 62 openSUSE 10.3: K Menu > Computer Menu ......................................................................... 63
Figure 63 openSUSE 10.3: K Menu > Computer Menu ......................................................................... 63
Figure 64 openSUSE 10.3: YaST Control Center ..................................................................................64
Figure 65 openSUSE 10.3: Network Settings ........................................................................................ 64
Figure 66 openSUSE 10.3: Network Card Setup ...................................................................................65
Figure 67 openSUSE 10.3: Network Settings ........................................................................................ 66
Figure 68 openSUSE 10.3: KNetwork Manager .....................................................................................67
Figure 69 openSUSE: Connection Status - KNetwork Manager ............................................................ 67
Figure 70 Internet Explorer 7: Certification Error .................................................................................... 70
Figure 71 Internet Explorer 7: Certification Error .................................................................................... 70
Figure 72 Internet Explorer 7: Certificate Error ....................................................................................... 70
Figure 73 Internet Explorer 7: Certificate ................................................................................................ 71
Figure 74 Internet Explorer 7: Certificate Import Wizard ........................................................................ 71
Figure 75 Internet Explorer 7: Certificate Import Wizard ........................................................................ 72
Figure 76 Internet Explorer 7: Certificate Import Wizard ........................................................................ 72
Figure 77 Internet Explorer 7: Select Certificate Store ........................................................................... 72
Figure 78 Internet Explorer 7: Certificate Import Wizard ........................................................................ 73
Figure 79 Internet Explorer 7: Security Warning ..................................................................................... 73
Figure 80 Internet Explorer 7: Certificate Import Wizard ........................................................................ 74
Figure 81 Internet Explorer 7: Website Identification .............................................................................. 74

List of Figures
ZyWALL SSL 10 User’s Guide 11
Figure 82 Internet Explorer 7: Public Key Certificate File ....................................................................... 75
Figure 83 Internet Explorer 7: Open File - Security Warning .................................................................. 75
Figure 84 Internet Explorer 7: Tools Menu ............................................................................................. 76
Figure 85 Internet Explorer 7: Internet Options ...................................................................................... 76
Figure 86 Internet Explorer 7: Certificates .............................................................................................. 77
Figure 87 Internet Explorer 7: Certificates .............................................................................................. 77
Figure 88 Internet Explorer 7: Root Certificate Store .............................................................................. 77
Figure 89 Firefox 2: Website Certified by an Unknown Authority ........................................................... 78
Figure 90 Firefox 2: Page Info ................................................................................................................ 78
Figure 91 Firefox 2: Tools Menu ............................................................................................................. 79
Figure 92 Firefox 2: Options ................................................................................................................... 79
Figure 93 Firefox 2: Certificate Manager ............................................................................................... 80
Figure 94 Firefox 2: Select File .............................................................................................................. 80
Figure 95 Firefox 2: Tools Menu ............................................................................................................. 81
Figure 96 Firefox 2: Options ................................................................................................................... 81
Figure 97 Firefox 2: Certificate Manager ............................................................................................... 82
Figure 98 Firefox 2: Delete Web Site Certificates .................................................................................. 82
Figure 99 Opera 9: Certificate signer not found ..................................................................................... 83
Figure 100 Opera 9: Security information ............................................................................................... 83
Figure 101 Opera 9: Tools Menu ............................................................................................................ 84
Figure 102 Opera 9: Preferences ........................................................................................................... 84
Figure 103 Opera 9: Certificate manager .............................................................................................. 85
Figure 104 Opera 9: Import certificate ................................................................................................... 85
Figure 105 Opera 9: Install authority certificate ..................................................................................... 86
Figure 106 Opera 9: Install authority certificate ..................................................................................... 86
Figure 107 Opera 9: Tools Menu ............................................................................................................ 87
Figure 108 Opera 9: Preferences ........................................................................................................... 87
Figure 109 Opera 9: Certificate manager .............................................................................................. 88
Figure 110 Konqueror 3.5: Server Authentication .................................................................................. 89
Figure 111 Konqueror 3.5: Server Authentication ................................................................................... 89
Figure 112 Konqueror 3.5: KDE SSL Information ................................................................................... 89
Figure 113 Konqueror 3.5: Public Key Certificate File ............................................................................ 90
Figure 114 Konqueror 3.5: Certificate Import Result .............................................................................. 90
Figure 115 Konqueror 3.5: Kleopatra ...................................................................................................... 90
Figure 116 Konqueror 3.5: Settings Menu .............................................................................................. 91
Figure 117 Konqueror 3.5: Configure ..................................................................................................... 91

List of Figures
ZyWALL SSL 10 User’s Guide
12

13
PART I
Remote User
Access
•Introduction (15)
•Application (23)
•File Sharing (27)

14

ZyWALL SSL 10 User’s Guide 15
CHAPTER 1
Introduction
This chapter introduces secure network access and gives an overview of the remote user
screens on the ZyWALL.
1.1 Overview
The ZyWALL provides secure connections to network resources such as applications, files,
intranet sites or e-mails through web-based interface using Microsoft Outlook Web Access
(OWA). No additional computer configuration or software installation is required.
The following figure shows a network example where a remote user (A) logs into the
ZyWALL (SSL10) from the Internet to access a web server (WWW) on the local network.
Figure 1 Network Example
1.1.1 Network Resource Access Methods
As a remote user, you can access resources on the ZyWALL’s local network using one of the
following methods.
• Using a web browser
Once you have successfully logged in through the ZyWALL, you can access any intranet
site, web-based applications or web-based e-mails using a supported web browser. You do
not have to install or pre-launch any application on your computer.
• Using the ZyWALL SecuExtender client
Once you have successfully logged into the ZyWALL, the ZyWALL automatically loads
the ZyWALL SecuExtender client program to your computer. With the ZyWALL
SecuExtender, you can access servers, remote desktops and manage files as if you were on
the local network. See Chapter 4 on page 33 for more on the ZyWALL SecuExtender.
ASSL10
WWW
Internet
Internet

Chapter 1 Introduction
ZyWALL SSL 10 User’s Guide
16
1.1.2 System Requirements
The following lists the browser and computer system requirements for remote user access.
• Internet Explorer 5.5 with Microsoft XML (MSXML) service pack installed or 6.0 and
above
• Netscape 7.2 and above
• Firefox 1.0 and above
• Mozilla 1.7.3 and above
• Windows 2000 Professional, Windows 2003, Windows XP Home/Professional (with
service pack 2 and above), Windows Vista, or Linux.
• Sun Java Virtual Machine (JVM) installed with a minimum version of 1.4.2_07 for
Netscape/Mozilla/Firefox and 1.4.2_02 for Internet Explorer and Linux computers.
• Java enabled in Internet Explorer on Windows computers.
1.1.3 Information You Need
Your network administrator should provide the following information that allows you to log in
and access network resources.
• Domain name or IP address of the ZyWALL.
• Login account user name and password
• Specific computer requirements. For example, if you must use Windows XP with service
pack 2, etc.
• If also required, the user name and/or password to access the network resource.
1.1.4 Certificate
Your computer establishes an HTTPS connection to the ZyWALL to access the login screen. If
instructed by your network administrator, you must install or import a certificate (provided by
the ZyWALL or your network administrator).
Refer to Appendix B on page 69 for more information.
1.2 Remote User Login
This section shows you how to access and log into the network through the ZyWALL.
Example screens for Internet Explorer are shown.
1Open a web browser and enter the web site address or IP address of the ZyWALL. For
example, “http://sslvpn.mycompany.com”.
Figure 2 Enter the Address in a Web Browser
2Click OK or Yes if a security screen displays.

Chapter 1 Introduction
ZyWALL SSL 10 User’s Guide 17
Figure 3 Login Security Screen
3A login screen displays. Enter the user name and password of your login account. If a
token password is also required, enter it in the One-Time Password screen.
Select I am connecting via my own computer if you log in using your personal
computer.
If you are using a public computer to log in, select I am connecting via Public
computer. The ZyWALL automatically clears history information from your browser
cache after you log out. This prevents anyone from obtaining information that may be
stored in the browser cache.
Click Login.
Figure 4 Login Screen
4After the login is successful, your computer starts establishing a secure connection to the
ZyWALL. This may take up to two minutes.
5Download the installation software if you are prompted to upgrade the JVM. Click the
link to access the Sun Java software web site. It is recommended you select the Offline
Installation option.

Chapter 1 Introduction
ZyWALL SSL 10 User’s Guide
18
Figure 5 Software Upgrade Prompt
6If the following warning screen displays, click Continue.
Figure 6 Login Warning Message
7The ZyWALL SecuExtender icon displays in the system tray.
Figure 7 ZyWALL SecuExtender Icon
8When the list of available resources displays in the Application screen, you have
successfully logged into the network. See Figure 8 on page 19.

Chapter 1 Introduction
ZyWALL SSL 10 User’s Guide 19
"Available resource links vary depending on how the network administrator
configures the ZyWALL.
1.3 Remote User Screen
This section describes the main elements in the remote user screens.
Figure 8 Remote User Screen
The following table describes the various parts of a remote user screen.
Table 1 Remote User Screen Overview
#DESCRIPTION
1 Click on a menu tab to go to the Application or File Sharing screen.
2 Click this icon to display the on-line help window.
3 Click this icon to log out and terminate the secure connection.
4 Click Add to Favorite to create a bookmark for the ZyWALL in your web
browser.
5 This part of the screen displays a list of the resources available to you.
In the Application screen, click on a link to access or display the access
method.
In the File Sharing screen, click on a link to open a file or directory.
23
4
5
1

Chapter 1 Introduction
ZyWALL SSL 10 User’s Guide
20
1.4 Bookmark
To bookmark the ZyWALL, click Add to Favorite. This lets you use the bookmark to access
the ZyWALL instead of entering the ZyWALL’s address every time.
1In any remote user screen, click Add to favorite.
2A descriptive name is entered in the Name field. You can accept the default or enter a
name.
3Click OK to create a bookmark in your web browser.
Figure 9 Add Favorite
1.5 Logout
To properly terminate a connection, click on the Logout icon in any remote user screen.
If you selected I am connecting via Public computer in the login screen, history information
in your browser cache is also erased once you log out.
1Click the Logout icon in any remote user screen.
2A prompt window displays. Click OK to continue.
Figure 10 Logout: Prompt
3An information screen displays. This indicates that all connections have been
successfully terminated.
Figure 11 Logout: Information Window
4The login screen displays with the “Logged out successfully!” message.