Viewing Sa Monitor; Table 13-10 Sa Monitor - ZyXEL Communications ZyWALL 5 User Manual

LABEL
Cancel Click Cancel to exit this screen without saving.

13.15 Viewing SA Monitor

In the web configurator, click VPN and the SA Monitor tab. Use this screen to display and manage
active VPN connections.
A Security Association (SA) is the group of security settings related to a specific VPN tunnel. This
screen displays active VPN connections. Use Refresh to display active VPN connections. This screen
is read-only. The following table describes the fields in this tab.
When there is outbound traffic but no inbound traffic, the SA
times out automatically after two minutes. A tunnel with no
outbound or inbound traffic is "idle" and does not timeout until the
SA lifetime period expires. See section 13.6 on keep alive to have
the ZyWALL renegotiate an IPSec SA when the SA lifetime expires,
even if there is no traffic.
The following table describes the labels in this screen.
LABEL
# This is the security association index number.
Name This field displays the identification name for this VPN policy.
Encapsulation This field displays Tunnel or Transport mode.
IPSec Algorithm This field displays the security protocols used for an SA.
Both AH and ESP increase ZyWALL processing requirements and communications
latency (delay).
Refresh Click Refresh to display the current active VPN connection(s).
Disconnect Select a security association index number that you want to disconnect and then click
Disconnect.
VPN Screens
Table 13-9 VPN Manual Setup
DESCRIPTION
Figure 13-9 SA Monitor

Table 13-10 SA Monitor

DESCRIPTION
ZyWALL 5 Internet Security Appliance
13-23