ZyXEL Communications ZYWALL SSL 10 Support Notes page 5

ZyWALL SSL 10 Support Notes
The network topology above is used to illustrate this application. We used one ZyWALL
as main office's gateway which is connected to the branch office's ZyWALL. The ZyWALL
SSL 10 is put behind main office's gateway at DMZ zone. Remote users could either access
the main office's LAN resource or access the remote office's LAN resource via IPSec VPN
tunnel after user pass the SSL authentication.
Since the SSL VPN traffic will be decrypted by ZyWALL SSL 10, the traffic could be
further inspected by ZyWALL UTM or third party firewall which has security checking
features like firewall, Anti-Virus, IDP and etc. In this way, MIS administrator will take it
easy to eliminate the worry that remote "trust" PC may distribute virus or attacks to internal
network.
5
All contents copyright (c) 2006 ZyXEL Communications Corporation.