ZyXEL Communications ISG50-ISDN User Manual page 681

The following table describes the labels in this screen.
Table 274 Configuration > System > WWW > Service Control
LABEL
HTTPS
Enable
Server Port
Authenticate Client
Certificates
Server Certificate
Redirect HTTP to
HTTPS
Admin/User Service
Control
Add
Edit
Remove
Move
#
Zone
Address
Action
HTTP
ISG50 User's Guide
DESCRIPTION
Select the check box to allow or disallow the computer with the IP address
that matches the IP address(es) in the Service Control table to access the
ISG50 Web Configurator using secure HTTPs connections.
The HTTPS server listens on port 443 by default. If you change the HTTPS
server port to a different number on the ISG50, for example 8443, then you
must notify people who need to access the ISG50 Web Configurator to use
"https://ISG50 IP Address:8443" as the URL.
Select Authenticate Client Certificates (optional) to require the SSL client
to authenticate itself to the ISG50 by sending the ISG50 a certificate. To do
that the SSL client must have a CA-signed certificate from a CA that has been
imported as a trusted CA on the ISG50 (see
importing certificates for details).
Select a certificate the HTTPS server (the ISG50) uses to authenticate itself
to the HTTPS client. You must have certificates already configured in the My
Certificates screen.
To allow only secure Web Configurator access, select this to redirect all HTTP
connection requests to the HTTPS server.
Admin Service Control specifies from which zones an administrator can use
HTTPS to manage the ISG50 (using the Web Configurator). You can also
specify the IP addresses from which the administrators can manage the
ISG50.
User Service Control specifies from which zones a user can use HTTPS to
log into the ISG50. You can also specify the IP addresses from which the
users can access the ISG50.
Click this to create a new entry. Select an entry and click Add to create a new
entry after the selected entry.
Double-click an entry or select it and click Edit to be able to modify the
entry's settings.
To remove an entry, select it and click Remove. The ISG50 confirms you
want to remove it before doing so. Note that subsequent entries move up by
one when you take this action.
To change an entry's position in the numbered list, select the method and
click Move to display a field to type a number for where you want to put it
and press [ENTER] to move the rule to the number that you typed.
This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the ISG50's (non-
configurable) default policy. The ISG50 applies this to traffic that does not
match any other configured rule. It is not an editable rule. To apply other
behavior, configure a rule that traffic will match so the ISG50 will not have to
use the default policy.
This is the zone on the ISG50 the user is allowed or denied to access.
This is the object name of the IP address(es) with which the computer is
allowed or denied to access.
This displays whether the computer with the IP address specified above can
access the ISG50 zone(s) configured in the Zone field (Accept) or not
(Deny).
Chapter 52 System
Section 52.7.7.4 on page 688 on
681