ZyXEL Communications ZyWALL USG Series Application Note page 131

Figure 33
VP
N
https://
• Click Configuration > Object > SSL Application and configure an SSL application object to
specify the type of application and the address of the local computer , server , or web site SSL users
are to be able to access.
• Click Configuration > VPN > SSL VPN > Access Privilege to configure SSL access policies.
• Use the Configuration > VPN > SSL VPN > Global Setting screen to set the IP address of the
ZyWALL (or a gateway device) on your network for full tunnel mode access, enter access messages
or upload a custom logo to be displayed on the remote user screen.
Remote users can access resources on the local network using one of the following methods:
• Using a supported web browser
Once you have successfully logged in through the ZyWALL, you can access intranet sites, web-
based applications, or web-based e-mails using one of the supported web browsers.
• Using the ZyWALL SecuExtender client
Once you have successfully logged into the ZyWALL, if the SSL VPN access policy has network
extension enabled the ZyWALL automatically loads the ZyWALL SecuExtender client program to
your computer . With the ZyWALL SecuExtender , you can access network resources, remote
desktops and manage files as if you were on the local network.
3.5.1 What Can Go Wrong
• If you uploaded a logo to show in the SSL VPN user screens but it does not display properly, check
that the logo graphic is in GIF , JPG, or PNG format. The graphic should use a resolution of
103 x 29 pixels to avoid distortion when displayed. The ZyWALL automatically resizes a graphic of
a different resolution to 103 x 29 pixels. The file size must be 100 kilobytes or less.
T ransparent background is recommended.
• If users can log into the SSL VPN but cannot see some of the resource links check the SSL
application object's configuration.
• If the user account is not included in an SSL VPN access policy, the ZyWALL redirects the user to the
user aware screen.
• Operating system and browser requirements for the remote user's computer:
• Windows 7 (32 or 64-bit), Vista (32 or 64-bit), 2003 (32-bit), XP (32-bit), or 2000 (32-bit)
• Internet Explorer 7 and above or Firefox 1.5 and above
• Using RDP requires Internet Explorer
SSL
Web-based Application
LAN (192.168.1.X)
Non-Web
Web Mail File
Share
Application Server