Application Scenario; Configuration Guide - ZyXEL Communications ZyWALL USG Series Application Note

ZyXEL – USG Application Note
Scenario 7 - Deploying SSL VPN for Tele-workers to Access Company Resources –SSL VPN
with Apple Mac OSX

7.1 Application Scenario

Tele-workers who work out of the office sometimes need to access company resources by a secured way. While
building an IPSec tunnel to the company gateway is an option, the Windows VPN client configuration is too
complicated, and for an easier way to configure IPSec VPN, it requires installation of additional IPSec VPN client
software. The USG provides an SSL VPN function, which enables teleworkers to access company resources
through a secured VPN tunnel with little effort. All they need on their PC is a browser. Besides, in SSL VPN, the
network administrator can define different access rules to allow different users to access different company
resources. On USG 4.10 firmware have extend to support SSL VPN with Apple Mac OSX.
For example, the network administrator can set up an SSL VPN rule to allow administrator Tom remotely
control company servers by RDP or VNC through SSL VPN tunnel. He can also set up an SSL VPN Full tunnel rule
to allow sales Chris to remotely access company file-share resources to conduct his important daily job.

7.2 Configuration Guide

Step1. Go to Configuration > Object > Address, Add address object with "ssl_pool" (range
192.168.1.0~192.168.1.10)
Step2. Go to Configuration > Object > User/Group, Add SSL VPN user account, e.g. "test".
36