ZyXEL Communications ZyWALL USG100-Plus User Manual page 6

Chapter 1 Introduction
Password System for strong two-factor authentication for Web Configurator, Web access, SSL VPN,
and ZyXEL IPSec VPN client user logins.
Figure 3 Applications: VPN Connectivity
SSL VPN Network Access
SSL VPN lets remote users use their web browsers for a very easy-to-use VPN solution. A user just
browses to the ZyWALL's web address and enters his user name and password to securely connect
to the ZyWALL's network. Here full tunnel mode creates a virtual connection for a remote user and
gives him a private IP address in the same subnet as the local network so he can access network
resources in the same way as if he were part of the internal network.
Figure 4 SSL VPN With Full Tunnel Mode
https://
User-Aware Access Control
Set up security policies to restrict access to sensitive information and shared resources based on
the user who is trying to access it. In the following figure user A can access both the Internet and
an internal file server. User B has a lower level of access and can only access the Internet. User C is
not even logged in and cannot access either.
6
*****
OTP PIN
SafeWord 2008
Authentication Server
File
Email
Server
Server
LAN (192.168.1.X)
Web Mail File Share
Application Server
Web-based Application
ZyWALL USG100-PLUS User's Guide
Web-based
Application
Non-Web