ZyXEL Communications ZyWALL 110 Handbook page 5

3.6.3 Test the Result .........................................................................................................................77
3.6.4 What Can Go Wrong? .............................................................................................................77
3.7 How To Control Access To Google Drive ..........................................................................................78
3.7.1 Set Up the Application Patrol on the ZyWALL/USG ................................................................78
3.7.2 Set Up the SSL Inspection on the ZyWALL/USG ....................................................................79
3.7.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................80
3.7.4 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............80
3.7.5 Test the Result .........................................................................................................................83
3.7.6 What Can Go Wrong? .............................................................................................................83
3.8 How To Block HTTPS Websites Using Content Filtering and SSL Inspection ..................................84
3.8.1 Set Up the Content Filter on the ZyWALL/USG .......................................................................84
3.8.2 Set Up SSL Inspection on the ZyWALL/USG ..........................................................................85
3.8.3 Set Up the Security Policy on the ZyWALL/USG .....................................................................86
3.8.4 Export Certificate from ZyWALL/USG and Import it to Windows 7 Operation System ............86
3.8.5 Test the Result .........................................................................................................................89
3.8.6 What Can Go Wrong? .............................................................................................................89
3.9 How To Block the Spotify Music Streaming Service ..........................................................................90
3.9.1 Set Up IDP Profile on the ZyWALL/USG .................................................................................90
3.9.2 Test the Result .........................................................................................................................91
3.9.3 What Can Go Wrong? .............................................................................................................92
3.10 How To Test the EICAR Anti-Virus Test File ....................................................................................92
3.10.1 Set Up the Anti-Virus Profile on the ZyWALL/USG ...............................................................93
3.10.2 Set Up the Security Policy on the ZyWALL/USG ...................................................................93
3.10.3 Test the Result .......................................................................................................................94
3.10.4 What Can Go Wrong? ...........................................................................................................94
3.11 How To Block Downloading of DOC, PDF, XLS and ZIP Files ........................................................94
3.11.1 Set Up the Anti-Virus Profile on the ZyWALL/USG ................................................................95
3.11.2 Set Up the Security Policy on the ZyWALL/USG ...................................................................96
3.11.3 Test the Result .......................................................................................................................97
3.11.4 What Can Go Wrong? ............................................................................................................97
3.12 How To Configure an Anti-Spam Policy with Mail Scan and DNSBL ..............................................98
3.12.1 Set Up the Anti-Spam Profile on the ZyWALL/USG ..............................................................98
3.12.2 Set Up the Security Policy on the ZyWALL/USG .................................................................100
3.12.3 Test the Result .....................................................................................................................101
3.12.4 What Can Go Wrong? .........................................................................................................102
Chapter 4
Create Site-to-Site VPN Tunnels......................................................................................................104
4.1 How to Configure Site-to-site IPSec VPN Where the Peer has a Static IP Address .......................104
4.1.1 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (HQ) ...........................104
4.1.2 Set Up the ZyWALL/USG IPSec VPN Tunnel of Corporate Network (Branch) .....................107
4.1.3 Test the IPSec VPN Tunnel ...................................................................................................109
4.1.4 What Can Go Wrong? ........................................................................................................... 110
ZyWALL/USG Series User's Guide
5