21.1 Overview
Use SSL VPN to allow users to use a web browser for secure remote user login. The remote users
do not need a VPN router or VPN client software.
21.1.1 What You Can Do in this Chapter
• Use the VPN > SSL VPN > Access Privilege screens (see
configure SSL access policies.
• Use the Click VPN > SSL VPN > Global Setting screen (see
the IP address of the ZyWALL/USG (or a gateway device) on your network for full tunnel mode
access, enter access messages or upload a custom logo to be displayed on the remote user
screen.
• Use the VPN > SSL VPN > SecuExtender screen ( see
and check the current and latest version of the Security Extender.
21.1.2 What You Need to Know
Full Tunnel Mode
In full tunnel mode, a virtual connection is created for remote users with private IP addresses in the
same subnet as the local network. This allows them to access network resources in the same way
as if they were part of the internal network.
Figure 248 Network Access Mode: Full Tunnel Mode
SSL Access Policy
An SSL access policy allows the ZyWALL/USG to perform the following tasks:
• limit user access to specific applications or file sharing server on the network.
C
HAPTER
ZyWALL/USG Series User's Guide
380
SSL VPN
Section 21.2 on page
381) to
Section 21.3 on page
Section 21.4 on page
387) to update
2 1
385) to set