ZyXEL Communications ZYWALL 35 - V4.04 Manuals

Manuals and User Guides for ZyXEL Communications ZYWALL 35 - V4.04. We have 1 ZyXEL Communications ZYWALL 35 - V4.04 manual available for free PDF download: User Manual

ZyXEL Communications ZYWALL 35 - V4.04 User Manual (824 pages)

Internet Security Appliance

Brand: ZyXEL Communications | Category: Gateway | Size: 16.15 MB

About this User's Guide

3
Document Conventions

4
Safety Warnings

6
Contents Overview

9
- Table of Contents
  9
Table of Contents

11
List of Figures

29
List of Tables

41
Introduction

49
PART I Introduction

49
Chapter 1 Getting to Know Your Zywall

51
Chapter 2 Hardware Installation

55
Chapter 3 Introducing the Web Configurator

61
Chapter 4 Wizard Setup

87
Chapter 5 Tutorials

109
Chapter 6 Registration Screens

141
- Overview
  141
  - What You Can Do in the Registration Screens
    141
  - What You Need to Know about Registration
    141
- The Registration Screen
  142
- Figure 79 REGISTRATION > Registration
  143
- Table 25 REGISTRATION > Registration
  143
- The Service Screen
  144
- Figure 80 REGISTRATION > Registration: Registered Device
  144
- Figure 81 REGISTRATION > Service
  145
- Table 26 REGISTRATION > Service
  145
Network

147
Part II: Network

147
- LAN Screens
  149
Chapter 7 LAN Screens

149
- Overview
  149
  - What You Can Do in the LAN Screens
    149
  - Figure 82 LAN and WAN
    149
  - What You Need to Know about LAN
    150
- The LAN Screen
  152
- Figure 83 NETWORK > LAN
  153
- Table 27 NETWORK > LAN
  153
- The LAN Static DHCP Screen
  155
- The LAN IP Alias Screen
  156
- Figure 84 NETWORK > LAN > Static DHCP
  156
- Table 28 NETWORK > LAN > Static DHCP
  156
- Figure 85 Physical Network & Partitioned Logical Networks
  157
- Figure 86 NETWORK > LAN > IP Alias
  157
- The LAN Port Roles Screen
  158
- Table 29 NETWORK > LAN > IP Alias
  158
- Figure 87 NETWORK > LAN > Port Roles
  159
- Figure 88 Port Roles Change Complete
  159
- Table 30 NETWORK > LAN > Port Roles
  159
- Bridge Screens
  161
Chapter 8 Bridge Screens

161
- Overview
  161
- The Bridge Screen
  163
- Figure 92 NETWORK > Bridge
  163
- Table 31 NETWORK > Bridge
  163
- The Bridge Port Roles Screen
  164
- Figure 93 NETWORK > Bridge > Port Roles
  165
- Figure 94 Port Roles Change Complete
  165
- Table 32 NETWORK > Bridge > Port Roles
  165
- Bridge Technical Reference
  166
- Table 33 STP Path Costs
  166
- Table 34 STP Port States
  167
- WAN Screens
  169
Chapter 9 WAN Screens

169
Chapter 10 DMZ Screens

207
- Overview
  207
- The DMZ Screen
  210
- Figure 116 DMZ Private and Public Address Example
  210
- Figure 117 NETWORK > DMZ
  211
- Table 50 NETWORK > DMZ
  211
- The Static DHCP Screen
  213
- The IP Alias Screen
  214
- Figure 118 NETWORK > DMZ > Static DHCP
  214
- Table 51 NETWORK > DMZ > Static DHCP
  214
- Figure 119 NETWORK > DMZ > IP Alias
  215
- Table 52 NETWORK > DMZ > IP Alias
  215
- The DMZ Port Roles Screen
  216
- Figure 120 NETWORK > DMZ > Port Roles
  216
- Table 53 NETWORK > DMZ > Port Roles
  216
- WLAN Screens
  219
Chapter 11 WLAN Screens

219
- Overview
  219
- The WLAN Screen
  220
- Figure 122 NETWORK > WLAN
  221
- Table 54 NETWORK > WLAN
  221
- WLAN Static DHCP
  223
- WLAN IP Alias
  224
- Figure 123 NETWORK > WLAN > Static DHCP
  224
- Table 55 NETWORK > WLAN > Static DHCP
  224
- Figure 124 NETWORK > WLAN > IP Alias
  225
- Table 56 NETWORK > WLAN > IP Alias
  225
- WLAN Port Roles
  226
- Figure 125 WLAN Port Role Example
  226
- Figure 126 NETWORK > WLAN > Port Roles
  227
- Figure 127 NETWORK > WLAN > Port Roles: Change Complete
  227
- Table 57 NETWORK > WLAN > Port Roles
  227
Chapter 12 Wireless Screens

229
Security

249
Part III: Security

249
- Firewall Screens
  251
Chapter 13 Firewall Screens

251
Chapter 14 Intrusion Detection and Prevention (IDP) Screens

277
- Overview
  277
- The General Setup Screen
  279
- Figure 166 SECURITY > IDP > General
  279
- Table 77 SECURITY > IDP > General Setup
  280
- The Signatures Screen
  281
- The Anomaly Screen
  289
- Figure 171 Signature Query by Attribute
  289
- Figure 172 SECURITY > IDP > Anomaly
  290
- Table 83 SECURITY > IDP > Anomaly
  290
- The Update Screen
  291
  - Mysecurityzone
    291
  - Configuring the IDP Update Screen
    292
  - Figure 173 SECURITY > IDP > Update
    292
  - Table 84 SECURITY > IDP > Update
    292
- The Backup and Restore Screen
  293
- Technical Reference
  294
  - Figure 174 SECURITY > IDP > Backup & Restore
    294
  - Example Intrusions
    295
  - Host Idp
    295
  - Ids and Idp
    295
  - Network Idp
    295
Chapter 15 Anti-Virus Screens

299
- Overview
  299
- The General Screen
  301
- Figure 176 SECURITY > ANTI-VIRUS > General
  302
- Table 85 SECURITY > ANTI-VIRUS > General
  302
- The Signature Screen
  303
- The Update Screen
  306
  - Figure 179 Query Example Search Results
    306
  - Configuring Anti-Virus Update
    307
  - Figure 180 SECURITY > ANTI-VIRUS > Update
    307
  - Mysecurityzone
    307
- The Backup and Restore Screen
  309
- Figure 181 SECURITY > ANTI-VIRUS > Backup and Restore
  309
- Technical Reference
  310
- Table 87 Common Computer Virus Types
  310
Chapter 16 Anti-Spam Screens

313
- Overview
  313
- The General Screen
  315
- Figure 183 SECURITY > ANTI-SPAM > General
  316
- Table 88 SECURITY > ANTI-SPAM > General
  316
- The External DB Screen
  318
- Figure 184 SECURITY > ANTI-SPAM > External DB
  319
- Table 89 SECURITY > ANTI-SPAM > External DB
  319
- The Lists Screen
  320
- Figure 185 SECURITY > ANTI-SPAM > Lists
  321
- Table 90 SECURITY > ANTI-SPAM > Lists
  321
- Anti-Spam Lists Edit Screen
  322
- Figure 186 SECURITY > ANTI-SPAM > Lists > Edit
  322
- Table 91 SECURITY > ANTI-SPAM > Lists > Edit
  323
- Technical Reference
  324
  - Spamcontent Engine
    325
  - Spamtricks Engine
    325
Chapter 17 Content Filtering Screens

327
Chapter 18 Content Filtering Reports

349
- Overview
  349
- Checking Content Filtering Activation
  349
- Viewing Content Filtering Reports
  349
- Figure 196 Myzyxel.com: Login
  350
- Figure 197 Myzyxel.com: Welcome
  350
- Figure 198 Myzyxel.com: Service Management
  351
- Figure 199 Blue Coat: Login
  351
- Figure 200 Content Filtering Reports Main Screen
  352
- Figure 201 Blue Coat: Report Home
  352
- Figure 202 Global Report Screen Example
  353
- Web Site Submission
  354
- Figure 203 Requested Urls Example
  354
- Figure 204 Web Page Review Process Screen
  355
- Ipsec VPN
  357
Chapter 19 Ipsec VPN

357
Chapter 20 Certificates

399
Chapter 21 Authentication Server Screens

427
Advanced

433
Chapter 22 Network Address Translation (NAT)

435
- Overview
  435
  - What You Can Do Using the NAT Screens
    435
  - What You Need to Know about NAT
    435
  - Before You Begin
    436
- The NAT Overview Screen
  436
- Table 129 NAT Mapping Types
  436
- Figure 251 ADVANCED > NAT > NAT Overview
  437
- Table 130 ADVANCED > NAT > NAT Overview
  437
- The NAT Address Mapping Screen
  438
- The Port Forwarding Screen
  441
- The Port Triggering Screen
  445
- Technical Reference
  447
- Figure 259 NAT Overview
  448
- Figure 260 NAT Application with IP Alias
  449
- Figure 261 Port Restricted Cone NAT Example
  450
- Static Route Screens
  451
Chapter 23 Static Route Screens

451
- Overview
  451
  - What You Can Do in the Static Route Screens
    451
  - Figure 262 Example of Static Routing Topology
    451
- The IP Static Route Screen
  452
Chapter 24 Policy Route Screens

457
- Overview
  457
  - What You Can Do in the Policy Route Screens
    457
  - What You Need to Know about Policy Route
    457
- The Policy Route Summary Screen
  458
Chapter 25 Bandwidth Management Screens

465
Chapter 26 DNS Screens

479
- Overview
  479
  - What You Can Do in the DNS Screens
    479
  - What You Need to Know about DNS
    479
- The System Screen
  481
- The DNS Cache Screen
  485
- Figure 277 ADVANCED > DNS > Cache
  486
- The DHCP Screen
  487
- Figure 278 ADVANCED > DNS > DHCP
  487
- The DDNS Screen
  488
- Configuring the Dynamic DNS Screen
  489
- Figure 279 ADVANCED > DNS > DDNS
  489
Chapter 27 Remote Management Screens

491
Chapter 28 Upnp Screens

519
- Overview
  519
  - What You Can Do in the Upnp Screens
    519
  - What You Need to Know about Upnp
    519
- Upnp Examples
  520
  - Installing Upnp in Windows Example
    520
  - Using Upnp in Windows XP Example
    522
- The Upnp Screen
  526
- Figure 314 ADVANCED > Upnp
  526
- Table 157 ADVANCED > Upnp
  526
- The Ports Screen
  527
- Figure 315 ADVANCED > Upnp > Ports
  527
- Table 158 ADVANCED > Upnp > Ports
  527
Chapter 29 Custom Application Screen

529
- Overview
  529
  - What You Can Do in the Custom Application Screen
    529
  - What You Need to Know about Custom Application
    529
- The Custom Application Screen
  529
- Figure 316 ADVANCED > Custom APP
  530
- Table 159 ADVANCED > Custom APP
  530
- ALG Screen
  531
Chapter 30 ALG Screen

531
- Overview
  531
- Figure 319 H.323 Calls from the WAN with Multiple Outgoing Calls
  
  534
- Figure 320 SIP ALG Example
  535
- The ALG Screen
  535
- Figure 321 ADVANCED > ALG
  536
- Table 160 ADVANCED > ALG
  536
Reports, Logs and Maintenance

537
Part V: Reports, Logs and Maintenance

537
Chapter 31 Reports Screens

539
Chapter 32 Logs Screens

555
- Overview
  555
  - What You Can Do in the Log Screens
    555
  - What You Need to Know about Logs
    555
- The View Log Screen
  555
  - Log Description Example
    556
  - Figure 336 LOGS > View Log
    556
  - Table 170 LOGS > View Log
    556
  - About the Certificate Not Trusted Log
    557
  - Table 171 Log Description Example
    557
- The Log Settings Screen
  558
- Figure 337 Myzyxel.com: Download Center
  558
- Figure 338 Myzyxel.com: Certificate Download
  558
- Figure 339 LOGS > Log Settings
  559
- Table 172 LOGS > Log Settings
  559
- Technical Reference
  561
- Table 173 System Maintenance Logs
  561
- Table 174 System Error Logs
  563
- Table 175 Access Control Logs
  563
- Table 176 TCP Reset Logs
  564
- Table 177 Packet Filter Logs
  565
- Table 178 ICMP Logs
  565
- Table 179 CDR Logs
  566
- Table 180 PPP Logs
  566
- Table 181 3G Logs
  566
- Table 182 Upnp Logs
  567
- Table 183 Content Filtering Logs
  568
- Table 184 Attack Logs
  568
- Table 185 Remote Management Logs
  570
- Table 186 Wireless Logs
  570
- Table 187 Ipsec Logs
  571
- Table 188 IKE Logs
  571
- Table 189 PKI Logs
  574
- Table 190 802.1X Logs
  576
- Table 191 ACL Setting Notes
  577
- Table 192 ICMP Notes
  578
- Table 193 IDP Logs
  579
- Table 194 AV Logs
  579
- Table 195 as Logs
  581
- Table 196 Syslog Logs
  583
- Table 197 RFC-2408 ISAKMP Payload Types
  584
Chapter 33 Maintenance Screens

585
Smt

603
Part VI: SMT

603
Chapter 34 Introducing the SMT

605
- Introduction to the SMT
  605
- Accessing the SMT Via the Console Port
  605
  - Initial Screen
    605
  - Entering the Password
    606
- Navigating the SMT Interface
  606
  - Figure 359 Initial Screen
    606
  - Figure 360 Password Screen
    606
  - Table 207 Main Menu Commands
    606
  - Figure 361 Main Menu (Router Mode)
    607
  - Main Menu
    607
  - Figure 362 Main Menu (Bridge Mode)
    608
  - Table 208 Main Menu Summary
    608
  - SMT Menus Overview
    609
  - Table 209 SMT Menus Overview
    609
- Changing the System Password
  610
- Resetting the Zywall
  611
- Figure 363 Menu 23: System Password
  611
Chapter 35 SMT Menu 1 - General Setup

613
- Introduction to General Setup
  613
- Configuring General Setup
  613
Chapter 36 WAN and Dial Backup Setup

619
Chapter 37 LAN Setup

633
- Introduction to LAN Setup
  633
- Accessing the LAN Menus
  633
- LAN Port Filter Setup
  633
- Figure 378 Menu 3: LAN Setup
  633
- TCP/IP and DHCP Ethernet Setup Menu
  634
- Internet Access
  639
Chapter 38 Internet Access

639
Chapter 39

645
- DMZ Setup
  
  645
  - Configuring DMZ Setup
    645
  - DMZ Port Filter Setup
    645
  - Figure 386 Menu 5: DMZ Setup
    645
  - Figure 387 Menu 5.1: DMZ Port Filter Setup
    645
  - TCP/IP Setup
    646
    
    IP Address
    646
    
    Figure 388 Menu 5: DMZ Setup
    646
    
    Figure 389 Menu 5.2: TCP/IP and DHCP Ethernet Setup
    646
    
    IP Alias Setup
    647
    
    Figure 390 Menu 5.2.1: IP Alias Setup
    647
  - Route Setup
    649
Chapter 40 Route Setup

649
- Configuring Route Setup
  649
- Route Assessment
  649
- Figure 391 Menu 6: Route Setup
  649
- Figure 392 Menu 6.1: Route Assessment
  649
- Traffic Redirect
  650
- Figure 393 Menu 6.2: Traffic Redirect
  650
- Table 230 Menu 6.1: Route Assessment
  650
- Table 231 Menu 6.2: Traffic Redirect
  650
- Route Failover
  651
- Figure 394 Menu 6.3: Route Failover
  651
- Table 232 Menu 6.3: Route Failover
  651
- Wireless Setup
  653
Chapter 41 Wireless Setup

653
- Wireless LAN Setup
  653
- TCP/IP Setup
  656
  - IP Address
    656
  - Figure 397 Menu 7: WLAN Setup
    656
  - Table 234 Menu 7.1.1: WLAN MAC Address Filter
    656
  - IP Alias Setup
    657
  - Figure 398 Menu 7.2: TCP/IP and DHCP Ethernet Setup
    657
  - Figure 399 Menu 7.2.1: IP Alias Setup
    658
Chapter 42 Remote Node Setup

659
Chapter 43 IP Static Route Setup

669
- Figure 407 Menu 12: IP Static Route Setup
  670
  - Figure 408 Menu 12. 1: Edit IP Static Route
    670
  - Table 239 Menu 12. 1: Edit IP Static Route
    670
  - Network Address Translation (NAT)
    673
  - Using NAT
    673
    
    SUA (Single User Account) Versus NAT
    673
    
    Applying NAT
    673
Chapter 44 Network Address Translation (NAT)

674
- Figure 409 Menu 4: Applying NAT for Internet Access
  674
Chapter 45 Introducing the Zywall Firewall

693
- Using Zywall SMT Menus
  693
- Filter Configuration
  695
Chapter 46 Filter Configuration

695
- Introduction to Filters
  695
- Configuring a Filter Set
  698
- Example Filter
  704
- Figure 443 Telnet Filter Example
  704
- Figure 444 Example Filter: Menu 21.1.3.1
  705
- Figure 445 Example Filter Rules Summary: Menu 21.1.3
  705
- Filter Types and NAT
  706
- Firewall Versus Filters
  706
  - Packet Filtering
    706
  - Figure 446 Protocol and Device Filter Sets
    706
  - Firewall
    707
- Applying a Filter
  707
  - Applying LAN Filters
    708
  - Applying DMZ Filters
    708
  - Figure 447 Filtering LAN Traffic
    708
  - Figure 448 Filtering DMZ Traffic
    708
  - Applying Remote Node Filters
    709
  - Figure 449 Filtering Remote Node Traffic
    709
- SNMP Configuration
  711
Chapter 47 SNMP Configuration

711
- Figure 450 Menu 22: SNMP Configuration
  711
  - Table 250 SNMP Configuration Menu Fields
    711
  - SNMP Traps
    712
  - Table 251 SNMP Traps
    712
Chapter 48 System Information & Diagnosis

713
Chapter 49 Firmware and Configuration File Maintenance

725
Chapter 50 System Maintenance Menus 8 to 10

739
- Command Interpreter Mode
  739
- Figure 481 Command Mode in Menu 24
  739
- Call Control Support
  740
  - Budget Management
    740
  - Figure 482 Call Control
    740
  - Figure 483 Budget Management
    740
  - Call History
    741
  - Figure 484 Call History
    741
  - Table 259 Budget Management
    741
  - Table 260 Call History
    741
- Time and Date Setting
  742
- Figure 485 Menu 24: System Maintenance
  742
- Figure 486 Menu 24.10 System Maintenance: Time and Date Setting
  743
- Table 261 Menu 24.10 System Maintenance: Time and Date Setting
  743
Chapter 51 Remote Management

745
- Figure 487 Menu 24.11 - Remote Management Control
  746
Chapter 52 IP Policy Routing

749
Chapter 53 Call Scheduling

757
Part VII: Troubleshooting and Product Specifications

761
- Troubleshooting
  763
Troubleshooting and Product Specifications

761
Chapter 54 Troubleshooting

763
- Power, Hardware Connections, and Leds
  763
- Zywall Access and Login
  764
- Internet Access
  766
- Wireless Router/Ap Troubleshooting
  767
- Upnp
  768
Chapter 55 Product Specifications

769
- Table 268 Hardware Specifications
  769
Part VIII: Appendices and Index

779
Appendices and Index

779
Appendix A Removing and Installing a Fuse

781
Appendix A Removing and Installing a Fuse

782
Appendix B Common Services

783
- Table 283 Commonly Used Services
  783
Appendix C Wireless Lans

787
- Figure 499 Peer-To-Peer Communication in an Ad-Hoc Network
  787
- Figure 500 Basic Service Set
  788
- Figure 501 Infrastructure WLAN
  789
- Figure 502 RTS/CTS
  790
- Table 284 IEEE 802.11G
  791
- Table 285 Wireless Security Levels
  792
- Types of Eap Authentication
  793
Appendix D Windows 98 Se/Me Requirements for Anti-Virus Message Display

801
Appendix E Legal Information

805
Appendix E Legal Information

806
- Zyxel Limited Warranty
  807
Appendix F Customer Support

809
Appendix F Customer Support

810
Index

815

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications ZYWALL 35 - V4.04 Manuals

ZyXEL Communications ZYWALL 35 - V4.04 User Manual (824 pages)

Table of Contents

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

List of Figures

List of Tables

Introduction

PART I Introduction

Chapter 1 Getting to Know Your Zywall

Chapter 2 Hardware Installation

Chapter 3 Introducing the Web Configurator

Chapter 4 Wizard Setup

Chapter 5 Tutorials

Chapter 6 Registration Screens

Network

Part II: Network

Chapter 7 LAN Screens

Chapter 8 Bridge Screens

Chapter 9 WAN Screens

Chapter 10 DMZ Screens

Chapter 11 WLAN Screens

Chapter 12 Wireless Screens

Security

Part III: Security

Chapter 13 Firewall Screens

Chapter 14 Intrusion Detection and Prevention (IDP) Screens

Chapter 15 Anti-Virus Screens

Chapter 16 Anti-Spam Screens

Chapter 17 Content Filtering Screens

Chapter 18 Content Filtering Reports

Chapter 19 Ipsec VPN

Chapter 20 Certificates

Chapter 21 Authentication Server Screens

Advanced

Chapter 22 Network Address Translation (NAT)

Chapter 23 Static Route Screens

Chapter 24 Policy Route Screens

Chapter 25 Bandwidth Management Screens

Chapter 26 DNS Screens

Chapter 27 Remote Management Screens

Chapter 28 Upnp Screens

Chapter 29 Custom Application Screen

Chapter 30 ALG Screen

Figure 319 H.323 Calls from the WAN with Multiple Outgoing Calls

Reports, Logs and Maintenance

Part V: Reports, Logs and Maintenance

Chapter 31 Reports Screens

Chapter 32 Logs Screens

Chapter 33 Maintenance Screens

Smt

Part VI: SMT

Chapter 34 Introducing the SMT

Chapter 35 SMT Menu 1 - General Setup

Chapter 36 WAN and Dial Backup Setup

Chapter 37 LAN Setup

Chapter 38 Internet Access

Chapter 39

DMZ Setup

Chapter 40 Route Setup

Chapter 41 Wireless Setup

Chapter 42 Remote Node Setup

Chapter 43 IP Static Route Setup

Chapter 44 Network Address Translation (NAT)

Chapter 45 Introducing the Zywall Firewall

Chapter 46 Filter Configuration

Chapter 47 SNMP Configuration

Chapter 48 System Information & Diagnosis

Chapter 49 Firmware and Configuration File Maintenance

Chapter 50 System Maintenance Menus 8 to 10

Chapter 51 Remote Management

Chapter 52 IP Policy Routing

Chapter 53 Call Scheduling

Part VII: Troubleshooting and Product Specifications

Troubleshooting and Product Specifications

Chapter 54 Troubleshooting

Chapter 55 Product Specifications