ZyXEL Communications ZYWALL USG 1000 Support Notes page 31

because the traffic sent from wan to internal must be decrypted first and only then can be
transmitted. Don't select the IPSec as the Action in this VPN traffic flow direction.
13) The overall firewall policy is shown on the following figure. The VPN tunnel between
ZyWALL and FortiGate has been successfully setup.
Tips for application:
1. Make sure the Pre-Shared Key is the same in both local and remote gateways.
2. Make sure both IKE and IPSec proposal are the same in both local and remote gateways.
3. Make sure the VPN policy route has been configured in ZyWALL USG 1000.
4. Make sure the Firewall rule has been configured in FortiGate.
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
12
13
31