Ssl Vpn - ZyXEL Communications ZyWALL USG Series Application Notes

Check that the correct USG IP address and HTTPS port (if the default port was changed)
was entered.
Ping the USG from the computer on which the USG IPSec VPN Client is installed. If there
is no reply, check that the computer has Internet access.
If the computer has Internet access, contact the USG administrator .
• The entry is not activated:
Make sure that both Enable Configuration Provisioning in Configuration > VPN > IPSec
VPN > Configuration Provisioning is selected and that the entry has a yellow Status icon.
3.5

SSL VPN

SSL VPN uses remote users' web browsers to provide the easiest-to-use of the USG's VPN solutions.
A user just types the USG's web address and enters his user name and password to securely access
the USG's network. Here a user uses his browser to securely connect to network resources in the same
way as if he were part of the internal network.
Figure 33
• Click Configuration > Object > SSL Application and configure an SSL application object to
specify the type of application and the address of the local computer , server , or web site SSL users
are to be able to access.
• Click Configuration > VPN > SSL VPN > Access Privilege to configure SSL access policies.
• Use the Configuration > VPN > SSL VPN > Global Setting screen to set the IP address of the
USG (or a gateway device) on your network for full tunnel mode access, enter access messages or
upload a custom logo to be displayed on the remote user screen.
Remote users can access resources on the local network using one of the following methods:
• Using a supported web browser
Once you have successfully logged in through the USG, you can access intranet sites, web- based
applications, or web-based e-mails using one of the supported web browsers.
• Using the USG SecuExtender client
Once you have successfully logged into the USG, if the SSL VPN access policy has network
extension enabled the USG automatically loads the USG SecuExtender client program to your
computer . With the USG SecuExtender , you can access network resources, remote desktops and
manage files as if you were on the local network.
3.5.1 What Can Go Wrong
• If you uploaded a logo to show in the SSL VPN user screens but it does not display properly, check
that the logo graphic is in GIF , JPG, or PNG format. The graphic should use a resolution of
SSL VPN
144