ZyXEL Communications ZYWALL USG 1000 Support Notes page 5

F10. Why port trigger does not work? ....................................................................... 323
F11. How do I use the traffic redirect feature in ZyWALL USG? ............................ 324
F12. Why can't ZyWALL learn the route from RIP and/or OSPF? .......................... 324
G. VPN and Certificate....................................................................................................... 325
G01. Why can't the VPN connections dial to a remote gateway?.............................. 325
G02. VPN connections are dialed successfully, but the traffic still cannot go through
the IPsec tunnel. ......................................................................................................... 325
G03. Why ZyWALL USG VPN tunnel had been configured correctly and the VPN
connection status is connected but the traffic still can not reach the remote VPN
subnet?........................................................................................................................ 325
G04. VPN connections are dialed successfully, and the policy route is set. But the
traffic is lost or there is no response from remote site. .............................................. 326
G05. Why don't the Inbound/Outbound traffic NAT in VPN work? ........................ 326
H. Firewall FAQ................................................................................................................. 327
H01. Why doesn't my LAN to WAN or WAN to LAN rule work? .......................... 327
H02. Why does the intra-zone blocking malfunction after I disable the firewall? .... 327
H03. Can I have access control rules to the device in firewall? ................................ 327
I. Application Patrol FAQ................................................................................................... 328
I01. What is Application Patrol?................................................................................ 328
I02. What applications can the Application Patrol function inspect? ........................ 328
I03. Why does the application patrol fail to drop/reject invalid access for some
applications?............................................................................................................... 329
I04. What is the difference between "Auto" and "Service Ports" settings in the
Application Patrol configuration page? ..................................................................... 330
I05. What is the difference between BWM (bandwidth management) in Policy Route
and App. Patrol ?........................................................................................................ 331
I06. Do I have to purchase iCards specifically for using AppPatrol feature?............ 332
I07. Can I configure different access level based on application for different users?332
I08. Can I migrate AppPatrol policy and bandwidth management control from
ZLD1.0x to ZLD2.0x? ............................................................................................... 332
J. lDP FAQ ......................................................................................................................... 333
J01. Why doesn't the IDP work? Why has the signature updating failed?................ 333
J02. When I use a web browser to configure the IDP, sometimes it will popup
"wait data timeout"..................................................................................................... 333
J03. When I want to configure the packet inspection (signatures), the GUI becomes
very slow. ................................................................................................................... 333
J04. After I select "Auto Update" for IDP, when will it update the signatures?........ 333
All contents copyright (c) 2007 ZyXEL Communications Corporation.
ZyWALL USG 1000 Support Notes
5