ZyXEL Communications ZyWall 10W User Manual page 33

ZyWALL Series Internet Security Gateway
1.2.2 Non-Physical Features
Bandwidth Management Lite
Bandwidth management lite allows you to use firewall rules to perform basic bandwidth management.
Bandwidth management allows you to allocate network resources according to defined policies. This policy-
based bandwidth allocation helps your network to better handle real-time applications such as Voice-over-IP
(VoIP).
IPSec VPN Capability
Establish a Virtual Private Network (VPN) to connect with business partners and branch offices using data
encryption and the Internet to provide secure communications without the expense of leased site-to-site lines.
The ZyWALL VPN is based on the IPSec standard and is fully interoperable with other IPSec-based VPN
products.
X-Auth (Extended Authentication)
X-Auth provides added security for VPN by requiring each VPN client to use a username and password.
Certificates
The ZyWALL can use certificates (also called digital IDs) to authenticate users. Certificates are based on
public-private key pairs. Certificates provide a way to exchange public keys for use in authentication.
SSH
The ZyWALL uses the SSH (Secure Shell) secure communication protocol to provide secure encrypted
communication between two hosts over an unsecured network.
HTTPS
HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL is a web protocol that encrypts
and decrypts web sessions. Use HTTPS for secure web configurator access to the ZyWALL.
Firewall
The ZyWALL is a stateful inspection firewall with DoS (Denial of Service) protection. By default, when the
firewall is activated, all incoming traffic from the WAN to the LAN is blocked unless it is initiated from the
LAN. The ZyWALL firewall supports TCP/UDP inspection, DoS detection and prevention, real time alerts,
reports and logs.
Content Filtering
The ZyWALL can block web features such as ActiveX controls, Java applets and cookies, as well as disable
web proxies. The ZyWALL can block or allow access to web sites that you specify. The ZyWALL can also
block access to web sites containing keywords that you specify. You can define time periods and days during
which content filtering is enabled and include or exclude a range of users on the LAN from content filtering.
Getting to Know Your ZyWALL 1-3