ZyXEL Communications ZyWALL USG 300 User Manual page 834

Chapter 50 System
Table 244 Configuration > System > WWW > Service Control (continued)
LABEL
Server Port
Authenticate Client
Certificates
Server Certificate
Redirect HTTP to
HTTPS
Admin/User
Service Control
Add
Edit
Remove
Move
#
Zone
Address
Action
834
DESCRIPTION
The HTTPS server listens on port 443 by default. If you change the
HTTPS server port to a different number on the ZyWALL, for example
8443, then you must notify people who need to access the ZyWALL
Web Configurator to use "https://ZyWALL IP Address:8443" as the
URL.
Select Authenticate Client Certificates (optional) to require the
SSL client to authenticate itself to the ZyWALL by sending the
ZyWALL a certificate. To do that the SSL client must have a CA-
signed certificate from a CA that has been imported as a trusted CA
on the ZyWALL (see Section 50.7.7.5 on page 842
certificates for details).
Select a certificate the HTTPS server (the ZyWALL) uses to
authenticate itself to the HTTPS client. You must have certificates
already configured in the My Certificates screen.
To allow only secure Web Configurator access, select this to redirect
all HTTP connection requests to the HTTPS server.
Admin Service Control specifies from which zones an administrator
can use HTTPS to manage the ZyWALL (using the Web Configurator).
You can also specify the IP addresses from which the administrators
can manage the ZyWALL.
User Service Control specifies from which zones a user can use
HTTPS to log into the ZyWALL (to log into SSL VPN for example). You
can also specify the IP addresses from which the users can access
the ZyWALL.
Click this to create a new entry. Select an entry and click Add to
create a new entry after the selected entry.
Double-click an entry or select it and click Edit to be able to modify
the entry's settings.
To remove an entry, select it and click Remove. The ZyWALL
confirms you want to remove it before doing so. Note that
subsequent entries move up by one when you take this action.
To change an entry's position in the numbered list, select the method
and click Move to display a field to type a number for where you
want to put it and press [ENTER] to move the rule to the number
that you typed.
This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the ZyWALL's
(non-configurable) default policy. The ZyWALL applies this to traffic
that does not match any other configured rule. It is not an editable
rule. To apply other behavior, configure a rule that traffic will match
so the ZyWALL will not have to use the default policy.
This is the zone on the ZyWALL the user is allowed or denied to
access.
This is the object name of the IP address(es) with which the
computer is allowed or denied to access.
This displays whether the computer with the IP address specified
above can access the ZyWALL zone(s) configured in the Zone field
(Accept) or not (Deny).
on importing
ZyWALL USG 300 User's Guide