ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 Manuals

Manuals and User Guides for ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0. We have 1 ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 manual available for free PDF download: User Manual

ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 User Manual (803 pages)

Internet Security Appliance

Brand: ZyXEL Communications | Category: Gateway | Size: 30.79 MB

Copyright
2
Federal Communications Commission (FCC) Interference Statement
3
Safety Warnings
5
Zyxel Limited Warranty
6
Customer Support
7
Table of Contents
10
List of Figures
28
List of Tables
40
Preface
48
Syntax Conventions
49
Chapter 1 Getting to Know Your Zywall

50
- Zywall Internet Security Appliance Overview
  50
- Zywall Features
  50
  - Table 1 Model Specific Features
    50
  - Physical Features
    51
  - Non-Physical Features
    52
    
    Ipsec Vpn Capability
    53
    
    Wireless Lan Mac Address Filtering
    55
    
    Dynamic Dns Support
    56
    
    Central Network Management
    56
    
    Traffic Redirect
    57
    
    Full Network Management
    57
    
    Roadrunner Support
    57
    
    Logging and Tracing
    57
    
    Upgrade Zywall Firmware Via Lan
    57
- Applications for the Zywall
  58
Chapter 2 Introducing the Web Configurator

62
Chapter 3 Wizard Setup

80
- Wizard Setup Overview
  80
  - ISP Parameters
    80
    
    Ethernet
    80
    
    Figure 15 ISP Parameters : Ethernet Encapsulation
    81
    
    Table 11 ISP Parameters : Ethernet Encapsulation
    81
    
    Pppoe Encapsulation
    82
    
    Figure 16 ISP Parameters : Pppoe Encapsulation
    82
    
    Table 12 ISP Parameters: Pppoe Encapsulation
    82
    
    PPTP Encapsulation
    83
    
    Figure 17 ISP Parameters: PPTP Encapsulation
    84
    
    Table 13 ISP Parameters : PPTP Encapsulation
    84
    
    Figure 18 Internet Access Wizard: Second Screen
    85
    
    Figure 19 Internet Access Setup Complete
    86
    
    Figure 20 Internet Access Wizard: Registration
    86
    
    Figure 21 Internet Access Wizard: Registration in Progress
    87
    
    Table 14 Internet Access Wizard: Registration
    87
    
    Figure 22 Internet Access Wizard: Status
    88
    
    Figure 23 Internet Access Wizard: Registration Failed
    88
    
    Figure 24 Internet Access Wizard: Registered Device
    88
    
    Figure 25 Internet Access Wizard: Activated Services
    89
    
    Figure 26 VPN Wizard: Gateway Setting
    89
    
    Table 15 VPN Wizard: Gateway Setting
    90
    
    Figure 27 VPN Wizard: Network Setting
    91
    
    Table 16 VPN Wizard : Network Setting
    91
    
    Figure 28 VPN Wizard: IKE Tunnel Setting
    92
    
    Table 17 VPN Wizard: IKE Tunnel Setting
    93
    
    Figure 29 VPN Wizard: Ipsec Setting
    94
    
    Table 18 VPN Wizard: Ipsec Setting
    94
    
    Vpn Wizard Status Summary
    95
    
    Figure 30 VPN Wizard: VPN Status
    96
    
    Table 19 VPN Wizard: VPN Status
    96
    
    Figure 31 VPN Wizard Setup Complete
    98
Chapter 4 Registration

100
- Myzyxel.com Overview
  100
  - Subscription Services Available on the Zywall
    100
  - Figure 32 Registration
    101
  - Table 20 Registration
    102
  - Figure 33 Registration: Registered Device
    103
  - Figure 34 Registration: Service
    103
  - Table 21 Service
    104
Chapter 5 LAN Screens

106
- LAN Overview
  106
- DHCP Setup
  106
  - IP Pool Setup
    106
- Lan Tcp/Ip
  106
  - Factory LAN Defaults
    106
  - IP Address and Subnet Mask
    107
  - RIP Setup
    107
  - Multicast
    108
- DNS Servers
  108
- Figure 35 LAN
  109
- Table 22 LAN
  109
- Figure 36 LAN Static DHCP
  111
- Table 23 LAN Static DHCP
  111
- Figure 37 Physical Network & Partitioned Logical Networks
  112
- Figure 38 LAN IP Alias
  113
- Table 24 LAN IP Alias
  113
- Figure 39 WLAN Port Role Example
  114
- Figure 40 LAN Port Roles
  115
- Table 25 LAN Port Roles
  115
- Figure 41 Port Roles Change Complete
  116
Chapter 6 Bridge Screens

118
- Bridge Loop
  118
- Spanning Tree Protocol (STP)
  118
  - Figure 42 Bridge Loop: Bridge Connected to Wired LAN
    118
  - How STP Works
    119
  - Rapid STP
    119
  - STP Terminology
    119
  - Table 26 STP Path Costs
    119
  - STP Port States
    120
  - Table 27 STP Port States
    120
  - Figure 43 Bridge
    121
  - Table 28 Bridge
    121
  - Bridge Port Roles
    122
  - Figure 44 WLAN Port Role Example
    123
  - Figure 45 Bridge Port Roles
    123
  - Table 29 Bridge Port Roles
    123
  - Figure 46 Port Roles Change Complete
    124
Chapter 7 WAN Screens

126
- WAN Overview
  126
- Multiple WAN
  126
- Load Balancing Introduction
  127
- Load Balancing Algorithms
  127
  - Least Load First
    127
    
    Example 1
    128
    
    Example 2
    128
    
    Figure 47 Least Load First Example
    128
    
    Table 30 Least Load First: Example 1
    128
    
    Table 31 Least Load First: Example 2
    128
  - Weighted Round Robin
    129
  - Spillover
    129
  - Figure 48 Weighted Round Robin Algorithm Example
    129
- TCP/IP Priority (Metric)
  130
- Figure 49 Spillover Algorithm Example
  130
- Figure 50 WAN General
  131
- Table 32 WAN General
  132
- Configuring Load Balancing
  133
  - Least Load First
    134
  - Figure 51 Load Balancing: Least Load First
    134
  - Table 33 Load Balancing: Least Load First
    134
  - Weighted Round Robin
    135
  - Spillover
    135
  - Figure 52 Load Balancing: Weighted Round Robin
    135
  - Table 34 Load Balancing: Weighted Round Robin
    135
  - Figure 53 Load Balancing: Spillover
    136
  - Table 35 Load Balancing: Spillover
    136
  - Figure 54 WAN Route
    137
  - Table 36 WAN Route
    137
- WAN IP Address Assignment
  138
- DNS Server Address Assignment
  138
- Table 37 Private IP Address Ranges
  138
- WAN MAC Address
  139
- Configuring Traffic Redirect
  150
- Figure 59 Traffic Redirect LAN Setup
  150
- Figure 60 Traffic Redirect
  150
- Table 42 Traffic Redirect
  150
- Configuring Dial Backup
  151
  - Figure 61 Dial Backup
    152
  - Table 43 Dial Backup
    153
  - AT Command Strings
    155
  - DTR Signal
    155
  - Response Strings
    155
- Configuring Advanced Modem Setup
  155
- Figure 62 Advanced Setup
  156
- Table 44 Advanced Setup
  156
Chapter 8 DMZ Screens

158
- Configuring DMZ
  158
- Figure 63 DMZ
  159
- Table 45 DMZ
  159
- Dmz Static Dhcp
  161
- Figure 64 DMZ Static DHCP
  162
- Table 46 DMZ Static DHCP
  162
- Figure 65 DMZ: IP Alias
  163
- Table 47 DMZ: IP Alias
  163
- DMZ Public IP Address Example
  164
- DMZ Private and Public IP Address Example
  165
- Figure 66 DMZ Public Address Example
  165
- Figure 67 DMZ Private and Public Address Example
  166
- Figure 68 WLAN Port Role Example
  167
- Figure 69 DMZ: Port Roles
  168
- Table 48 DMZ: Port Roles
  168
Chapter 9 Wireless LAN

170
- Wireless LAN Introduction
  170
  - Additional Installation Requirements for Using 802.1X
    170
  - Figure 70 WLAN
    171
  - Table 49 WLAN
    171
  - Wlan Static Dhcp
    173
  - Figure 71 WLAN Static DHCP
    174
  - Table 50 WLAN Static DHCP
    174
  - Figure 72 WLAN IP Alias
    175
  - Table 51 WLAN IP Alias
    175
  - Figure 73 WLAN Port Role Example
    176
  - Figure 74 WLAN Port Roles
    177
  - Table 52 WLAN Port Roles
    177
- Wireless Security
  178
  - Figure 75 WLAN Port Roles Change Complete
    178
  - Authentication
    179
  - Encryption
    179
  - Figure 76 Zywall Wireless Security Levels
    179
  - Hide Zywall Identity
    180
  - Restricted Access
    180
- Security Parameters Summary
  180
- WEP Encryption
  180
- Table 53 Wireless Security Relational Matrix
  180
- Overview
  181
  - Introduction to RADIUS
    181
    
    Types of RADIUS Messages
    181
  - EAP Authentication Overview
    182
- Dynamic WEP Key Exchange
  182
- Figure 77 EAP Authentication
  182
- Introduction to WPA
  183
  - User Authentication
    183
  - Encryption
    183
- WPA-PSK Application Example
  184
- Introduction to RADIUS
  185
- WPA with RADIUS Application Example
  185
- Figure 78 WPA-PSK Authentication
  185
- Wireless Client WPA Supplicants
  186
  - Figure 79 WPA with RADIUS Application Example
    186
  - Figure 80 Wireless Card: no Security
    187
  - Table 54 Wireless Card: no Security
    187
  - Static WEP
    188
  - Figure 81 Wireless Card: Static WEP
    189
  - Table 55 Wireless Card: Static WEP
    189
  - Wpa-Psk
    189
  - Figure 82 Wireless Card: WPA-PSK
    190
  - Table 56 Wireless Card: WPA-PSK
    190
  - Figure 83 Wireless Card: WPA
    191
  - Table 57 Wireless Card: WPA
    191
  - Wpa
    191
  - Figure 84 Wireless Card: 802.1X + Dynamic WEP
    192
  - IEEE 802.1X + Dynamic WEP
    192
  - Table 58 Wireless Card: 802.1X + Dynamic WEP
    192
  - Figure 85 Wireless Card: 802.1X + Static WEP
    193
  - IEEE 802.1X + Static WEP
    193
  - Table 59 Wireless Card: 802.1X + Static WEP
    193
  - Figure 86 Wireless Card: 802.1X + no WEP
    194
  - IEEE 802.1X + no WEP
    194
  - Figure 87 Wireless Card: no Access 802.1X + Static WEP
    195
  - No Access 802.1X + Static WEP
    195
  - Table 60 Wireless Card: 802.1X + no WEP
    195
  - No Access 802.1X + no WEP
    196
  - Table 61 Wireless Card: no Access 802.1X + Static WEP
    196
  - Figure 88 Wireless Card: MAC Address Filter
    197
  - Table 62 Wireless Card: MAC Address Filter
    197
Chapter 10 Firewalls

198
- Firewall Overview
  198
- Types of Firewalls
  198
  - Packet Filtering Firewalls
    198
  - Application-Level Firewalls
    198
  - Stateful Inspection Firewalls
    199
- Introduction to Zyxel's Firewall
  199
- Denial of Service
  200
  - Basics
    200
  - Figure 89 Zywall Firewall Application
    200
  - Table 63 Common IP Ports
    200
  - Types of Dos Attacks
    201
    
    Figure 90 Three-Way Handshake
    201
    
    Figure 91 SYN Flood
    202
    
    Figure 92 Smurf Attack
    203
    
    ICMP Vulnerability
    203
    
    Illegal Commands (Netbios and SMTP)
    203
    
    Table 64 ICMP Commands that Trigger Alerts
    203
    
    Table 65 Legal Netbios Commands
    203
    
    Traceroute
    204
- Stateful Inspection
  204
  - Table 66 Legal SMTP Commands
    204
  - Figure 93 Stateful Inspection
    205
  - Stateful Inspection Process
    205
  - Stateful Inspection and the Zywall
    206
  - TCP Security
    206
  - UDP/ICMP Security
    207
  - Upper Layer Protocols
    207
- Guidelines for Enhancing Security with Your Firewall
  208
- Packet Filtering Vs Firewall
  208
  - Packet Filtering
    208
    
    When to Use Filtering
    208
  - Firewall
    209
    
    When to Use the Firewall
    209
Chapter 11 Firewall Screens

210
- Access Methods
  210
- Firewall Policies Overview
  210
- Rule Logic Overview
  212
  - Rule Checklist
    212
  - Security Ramifications
    212
  - Key Fields for Configuring Rules
    212
    
    Action
    212
    
    Service
    213
    
    Source Address
    213
    
    Destination Address
    213
- Connection Direction Examples
  213
  - LAN to WAN Rules
    213
  - WAN to LAN Rules
    214
- Alerts
  214
- Figure 94 LAN to WAN Traffic
  214
- Figure 95 WAN to LAN Traffic
  214
- Figure 96 Default Rule (Router Mode)
  215
- Table 67 Default Rule (Router Mode)
  215
- Figure 97 Default Rule (Bridge Mode)
  217
- Table 68 Default Rule (Bridge Mode)
  217
- Figure 98 Rule Summary
  218
- Table 69 Rule Summary
  218
- Firewall Edit Rule
  219
  - Figure 99 Firewall Edit Rule
    220
  - Table 70 Firewall Edit Rule
    221
  - Figure 100 Anti-Probing
    222
  - Table 71 Anti-Probing
    222
  - Half-Open Sessions
    223
    
    TCP Maximum Incomplete and Blocking Time
    224
    
    Figure 101 Firewall Threshold
    225
    
    Table 72 Firewall Threshold
    225
    
    Figure 102 Firewall Service
    227
    
    Table 73 Firewall Service
    227
    
    Figure 103 Firewall Edit Custom Service
    228
    
    Table 74 Firewall Edit Custom Service
    228
  - Threshold Values
    223
  - Predefined Services
    229
  - Table 75 Predefined Services
    229
- Example Firewall Rule
  231
- Figure 104 Service
  232
- Figure 105 Edit Custom Service Example
  232
- Figure 106 Rule Summary
  233
- Figure 107 Rule Edit Example
  233
- Figure 108 My Service Rule Configuration
  234
- Figure 109 My Service Example Rule Summary
  235
Chapter 12 Intrusion Detection and Prevention (IDP)

236
- Introduction to IDP
  236
  - Firewalls and Intrusions
    236
  - Figure 110 Network Intrusions
    236
  - IDS and IDP
    237
  - Host IDP
    237
  - Network IDP
    237
  - Example Intrusions
    238
    
    SQL Slammer Worm
    238
    
    Blaster W32.Worm
    238
    
    Nimda
    238
    
    Mydoom
    239
  - Zywall IDP
    239
Chapter 13 Configuring IDP

240
- Overview
  240
  - Interfaces
    240
- General Setup
  241
  - Figure 111 Applying IDP to Interfaces
    241
  - Attack Types
    242
  - Figure 112 IDP: General
    242
  - Table 76 IDP: General Setup
    242
  - Figure 113 Attack Types
    243
  - Table 77 Attack Types
    243
  - Intrusion Severity
    244
  - Signature Actions
    244
  - Table 78 Intrusion Severity
    244
  - Configuring IDP Signatures
    245
    
    Figure 114 Signature Actions
    245
    
    Table 79 Signature Actions
    245
    
    Figure 115 IDP: Signatures
    246
    
    Table 80 IDP Signatures: Group View
    246
    
    Query Example 1
    247
    
    Figure 116 Signature Query by Partial Name
    248
    
    Figure 117 Signature Query by Complete ID
    249
    
    Query Example 2
    249
  - Figure 118 Signature Query by Attribute
    250
  - Mysecurity Zone
    250
  - Configuring IDP Update
    251
  - Figure 119 Signatures Update
    251
  - Table 81 Signatures Update
    252
  - Figure 120 IDP: Backup & Restore
    253
Chapter 14 Anti-Virus

254
- Types of Computer Viruses
  254
- Computer Virus Infection and Prevention
  254
- Table 82 Common Computer Virus Types
  254
- Types of Anti-Virus Scanner
  255
- Introduction to the Zywall Anti-Virus Scanner
  255
- General Anti-Virus Setup
  257
  - Figure 122 Anti-Virus: General
    257
  - Table 83 Anti-Virus: General
    258
  - Configuring Anti-Virus Update
    259
  - Mysecurity Zone
    259
  - Figure 123 Anti-Virus: Update
    260
  - Table 84 Anti-Virus: Update
    260
Chapter 15 Anti-Spam

262
- Anti-Spam External Database
  262
  - Spambulk Engine
    263
  - Spamrepute Engine
    263
  - Spamcontent Engine
    263
  - Spamtricks Engine
    264
  - Spam Threshold
    264
  - Phishing
    264
  - Figure 124 Anti-Spam External Database Example
    264
  - Whitelist
    265
  - Blacklist
    265
  - SMTP and POP3
    265
  - MIME Headers
    266
- Anti-Spam General Screen
  266
- Figure 125 Anti-Spam: General
  266
- Table 85 Anti-Spam: General
  267
- Figure 126 Anti-Spam: External DB
  268
- Table 86 Anti-Spam: External DB
  268
- Figure 127 Anti-Spam: Lists
  270
- Table 87 Anti-Spam: Lists
  270
- Figure 128 Anti-Spam Rule Edit
  271
- Table 88 Anti-Spam Rule Edit
  272
Chapter 16 Content Filtering Screens

274
- Content Filtering Overview
  274
  - Restrict Web Features
    274
  - Create a Filter List
    274
  - Customize Web Site Access
    274
  - Figure 129 Content Filter : General
    275
  - Table 89 Content Filter : General
    275
- Content Filtering with an External Database
  276
- Figure 130 Content Filtering Lookup Procedure
  277
- Figure 131 Content Filter : Categories
  278
- Table 90 Content Filter: Categories
  278
- Figure 132 Content Filter: Customization
  284
- Table 91 Content Filter: Customization
  285
- Customizing Keyword Blocking URL Checking
  286
  - Domain Name or IP Address URL Checking
    286
  - Full Path URL Checking
    286
  - File Name URL Checking
    286
  - Figure 133 Content Filter: Cache
    287
  - Table 92 Content Filter: Cache
    288
Chapter 17 Content Filtering Reports

290
Chapter 18 Introduction to Ipsec

298
- VPN Overview
  298
  - Ipsec
    298
  - Security Association
    298
  - Other Terminology
    298
    
    Encryption
    298
    
    Data Confidentiality
    299
    
    Data Integrity
    299
    
    Data Origin Authentication
    299
  - VPN Applications
    299
    
    Linking Two or more Private Networks Together
    299
    
    Accessing Network Resources When NAT Is Enabled
    299
    
    Unsupported IP Applications
    299
    
    Figure 143 Encryption and Decryption
    299
- Ipsec Architecture
  300
  - Ipsec Algorithms
    300
  - Key Management
    300
- Encapsulation
  300
  - Figure 144 Ipsec Architecture
    300
  - Transport Mode
    301
  - Tunnel Mode
    301
- Ipsec and NAT
  301
- Figure 145 Transport and Tunnel Mode Ipsec Encapsulation
  301
- Table 93 VPN and NAT
  302
Chapter 19 VPN Screens

304
- Vpn/Ipsec Overview
  304
- Ipsec Algorithms
  304
  - AH (Authentication Header) Protocol
    304
  - ESP (Encapsulating Security Payload) Protocol
    304
- My Zywall
  305
- Remote Gateway Address
  305
  - Table 94 ESP and AH
    305
  - Dynamic Remote Gateway Address
    306
- Nailed up
  306
- NAT Traversal
  306
  - NAT Traversal Configuration
    307
- ID Type and Content
  307
- IKE Phases
  309
- X-Auth (Extended Authentication)
  311
- Telecommuter Vpn/Ipsec Examples
  333
- VPN and Remote Management
  336
Chapter 20 Certificates

338
- Certificates Overview
  338
  - Advantages of Certificates
    339
- Self-Signed Certificates
  339
- Configuration Summary
  339
  - Figure 160 Certificate Configuration Overview
    339
  - Figure 161 My Certificates
    340
  - Table 110 My Certificates
    340
  - Certificate File Formats
    342
  - Figure 162 My Certificate Import
    343
  - Table 111 My Certificate Import
    343
  - Figure 163 My Certificate Create
    344
  - Table 112 My Certificate Create
    344
  - My Certificate Details
    346
  - Figure 164 My Certificate Details
    347
  - Table 113 My Certificate Details
    348
  - Trusted Cas
    349
  - Figure 165 Trusted Cas
    350
  - Table 114 Trusted Cas
    350
  - Figure 166 Trusted CA Import
    351
  - Table 115 Trusted CA Import
    352
  - Figure 167 Trusted CA Details
    353
  - Table 116 Trusted CA Details
    353
  - Trusted Remote Hosts
    355
  - Figure 168 Trusted Remote Hosts
    356
  - Table 117 Trusted Remote Hosts
    356
- Verifying a Trusted Remote Host's Certificate
  357
- Authentication Server
  366
  - Authentication Server Overview
    366
    
    Local User Database
    366
    
    Radius
    366
Chapter 21 Authentication Server

366
- Figure 175 Local User Database
  367
- Figure 176 RADIUS
  368
- Table 122 Local User Database
  368
- Table 123 RADIUS
  369
Chapter 22 Network Address Translation (NAT)

370
- NAT Overview
  370
  - NAT Definitions
    370
  - Table 124 NAT Definitions
    370
  - What NAT Does
    371
  - How NAT Works
    371
  - NAT Application
    372
  - Figure 177 How NAT Works
    372
  - Figure 178 NAT Application with IP Alias
    372
  - Port Restricted Cone NAT
    373
  - NAT Mapping Types
    373
  - Figure 179 Port Restricted Cone NAT Example
    373
- Using NAT
  374
  - SUA (Single User Account) Versus NAT
    374
  - Table 125 NAT Mapping Types
    374
  - Figure 180 NAT Overview
    375
  - Table 126 NAT Overview
    375
  - Nat Address Mapping
    376
  - Figure 181 NAT Address Mapping
    377
  - Table 127 NAT Address Mapping
    377
  - Figure 182 NAT Address Mapping Edit
    378
- Port Forwarding
  379
  - Table 128 NAT Address Mapping Edit
    379
  - Configuring Servers Behind Port Forwarding (Example)
    380
  - Default Server IP Address
    380
  - Figure 227 SNMP
    380
  - Port Forwarding: Services and Port Numbers
    380
  - Table 129 Services and Port Numbers
    380
  - Table 158 SNMP
    380
  - Figure 183 Multiple Servers Behind NAT Example
    381
  - NAT and Multiple WAN
    381
  - Port Translation
    381
  - Figure 184 Port Translation Example
    382
  - Figure 185 Port Forwarding
    383
  - Table 130 Port Forwarding
    383
  - Figure 186 Trigger Port Forwarding Process: Example
    384
  - Figure 187 Port Triggering
    385
  - Table 131 Port Triggering
    385
Chapter 23 Static Route

388
- IP Static Route
  388
- Figure 188 Example of Static Routing Topology
  388
- Figure 189 IP Static Route
  389
- Table 132 IP Static Route
  389
- Figure 190 IP Static Route Edit
  390
- Table 133 IP Static Route Edit
  390
Chapter 24 Policy Route

392
- Benefits
  392
- Routing Policy
  392
- IP Routing Policy Setup
  393
- Figure 191 Policy Route Summary
  393
- Table 134 Policy Route Summary
  394
- Figure 192 Edit IP Policy Route
  395
- Table 135 Edit IP Policy Route
  395
Chapter 25 Bandwidth Management

398
Chapter 26 DNS

414
- DNS Server Address Assignment
  414
- DNS Servers
  414
- Address Record
  415
  - DNS Wildcard
    415
- Name Server Record
  415
  - Private DNS Server
    415
- System Screen
  416
- Figure 199 Private DNS Server Example
  416
- Figure 200 System DNS
  417
- Table 147 System DNS
  417
- Figure 201 System DNS: Add Address Record
  418
- Figure 202 System DNS: Insert Name Server Record
  419
- Table 148 System DNS: Add Address Record
  419
- Table 149 System DNS: Insert Name Server Record
  420
- Configure DNS Cache
  421
- Figure 203 DNS Cache
  421
- Table 150 DNS Cache
  421
- Configuring Dns Dhcp
  422
  - Figure 204 DNS DHCP
    423
  - Table 151 DNS DHCP
    423
  - DYNDNS Wildcard
    424
  - High Availability
    424
- Configuring Dynamic DNS
  424
- Figure 205 DDNS
  425
- Table 152 DDNS
  425
Chapter 27 Remote Management

428
- Remote Management Overview
  428
  - Remote Management Limitations
    428
  - System Timeout
    429
- Introduction to HTTPS
  429
- Figure 206 HTTPS Implementation
  430
- Figure 207 WWW
  431
- Table 153 WWW
  431
- HTTPS Example
  432
- How SSH Works
  437
- Figure 215 Common Zywall Certificate
  437
- Figure 216 SSH Communication Example
  437
- SSH Implementation on the Zywall
  438
  - Figure 217 How SSH Works
    438
  - Requirements for Using SSH
    439
- Configuring SSH
  439
- Figure 218 SSH
  439
- Table 154 SSH
  439
- Secure Telnet Using SSH Examples
  440
  - Example 1: Microsoft Windows
    440
  - Example 2: Linux
    440
  - Figure 219 SSH Example 1: Store Host Key
    440
- Secure FTP Using SSH Example
  441
- Figure 220 SSH Example 2: Test
  441
- Figure 221 SSH Example 2: Log in
  441
- Configuring TELNET
  442
  - Figure 222 Secure FTP: Firmware Upload Example
    442
  - Figure 223 Telnet Configuration on a TCP/IP Network
    442
  - Figure 224 Telnet
    443
  - Table 155 Telnet
    443
  - Figure 225 FTP
    444
  - Table 156 FTP
    444
  - Figure 226 SNMP Management Model
    445
  - Remote Management: Snmp
    446
  - SNMP Traps
    446
  - Supported Mibs
    446
  - Table 157 SNMP Traps
    446
  - Figure 228 DNS
    448
  - Table 159 DNS
    448
- Configuring CNM
  449
- Figure 229 CNM
  449
- Table 160 CNM
  449
Chapter 28 Upnp

452
- How Do I Know if I'M Using Upnp
  452
- NAT Traversal
  452
- Cautions with Upnp
  452
- Upnp and Zyxel
  453
- Configuring Upnp
  453
- Figure 230 Upnp
  453
- Table 161 Upnp
  453
- Figure 231 Upnp Ports
  454
- Installing Upnp in Windows Example
  455
  - Table 162 Upnp Ports
    455
  - Installing Upnp in Windows Me
    456
  - Installing Upnp in Windows XP
    457
- Using Upnp in Windows XP Example
  457
  - Auto-Discover Your Upnp-Enabled Network Device
    458
  - Web Configurator Easy Access
    459
Chapter 29 ALG Screen

462
- ALG and NAT
  462
- ALG and the Firewall
  462
- ALG and Multiple WAN
  462
- Ftp
  463
- 463
  463
- Rtp
  463
  - ALG Details
    463
  - Figure 232 H.323 ALG Example
    464
  - Figure 233 H.323 with Multiple WAN IP Addresses
    464
- Sip
  465
  - Stun
    465
  - SIP ALG Details
    465
  - Figure 234 H.323 Calls from the WAN with Multiple Outgoing Calls
    465
  - SIP Signaling Session Timeout
    466
  - SIP Audio Session Timeout
    466
- ALG Screen
  466
- Figure 235 SIP ALG Example
  466
- Figure 236 ALG
  467
- Table 163 ALG
  467
Chapter 30 Logs Screens

468
- Figure 237 View Log
  468
  - Log Description Example
    469
    
    Table 164 View Log
    469
    
    Table 165 Example Log Description
    469
    
    Certificate Not Trusted Log Note
    470
    
    Figure 238 Myzyxel.com: Download Center
    470
    
    Figure 239 Myzyxel.com: Certificate Download
    471
    
    Figure 240 Log Settings
    472
    
    Table 166 Log Settings
    473
    
    Configuring Reports
    474
    
    Figure 241 Reports
    475
    
    Table 167 Reports
    475
    
    Figure 242 Web Site Hits Report Example
    476
    
    Table 168 Web Site Hits Report
    476
    
    Viewing Protocol/Port
    476
    
    Viewing Web Site Hits
    476
    
    Figure 243 Protocol/Port Report Example
    477
    
    Table 169 Protocol/ Port Report
    477
    
    Figure 244 Host IP Address Report Example
    478
    
    Table 170 Host IP Address Report
    478
    
    Viewing Host IP Address
    478
    
    Reports Specifications
    479
    
    Table 171 Report Specifications
    479
Chapter 31 Maintenance

480
- Maintenance Overview
  480
- General Setup
  480
  - General Setup and System Name
    480
  - Figure 245 General Setup
    481
  - Table 172 General Setup
    481
  - Figure 246 Password Setup
    482
  - Table 173 Password Setup
    482
  - Figure 247 Time and Date
    483
  - Table 174 Time and Date
    483
- Pre-Defined NTP Time Servers List
  485
  - Resetting the Time
    485
  - Time Server Synchronization
    485
  - Table 175 Default Time Servers
    485
  - Figure 248 Synchronization in Process
    486
  - Figure 249 Synchronization Is Successful
    486
  - Figure 250 Synchronization Fail
    486
- Introduction to Transparent Bridging
  487
- Transparent Firewalls
  487
  - Table 176 MAC-Address-To-Port Mapping Table
    487
  - Figure 251 Device Mode (Router Mode)
    488
  - Table 177 Device Mode (Router Mode)
    488
  - Figure 252 Device Mode (Bridge Mode)
    489
  - Table 178 Device Mode (Bridge Mode)
    489
  - Figure 253 Firmware Upload
    491
  - Figure 254 Firmware Upload in Process
    491
  - Table 179 Firmware Upload
    491
  - Figure 255 Network Temporarily Disconnected
    492
  - Figure 256 Firmware Upload Error
    492
  - Backup Configuration
    493
  - Figure 257 Backup and Restore
    493
  - Restore Configuration
    493
  - Table 180 Restore Configuration
    493
  - Figure 258 Configuration Upload Successful
    494
  - Figure 259 Network Temporarily Disconnected
    494
  - Figure 260 Configuration Upload Error
    494
  - Back to Factory Defaults
    495
  - Figure 261 Reset Warning Message
    495
  - Figure 262 Restart Screen
    495
Chapter 32 Introducing the SMT

496
- Introduction to the SMT
  496
- Accessing the SMT Via the Console Port
  496
  - Initial Screen
    496
  - Entering the Password
    497
- Navigating the SMT Interface
  497
  - Figure 263 Initial Screen
    497
  - Figure 264 Password Screen
    497
  - Table 181 Main Menu Commands
    497
  - Main Menu
    498
  - Figure 265 Main Menu (Router Mode)
    499
  - Figure 266 Main Menu (Bridge Mode)
    499
  - Table 182 Main Menu Summary
    499
  - SMT Menus Overview
    500
  - Table 183 SMT Menus Overview
    500
- Changing the System Password
  502
- Resetting the Zywall
  503
- Figure 267 Menu 23: System Password
  503
Chapter 33 SMT Menu 1 - General Setup

504
- Introduction to General Setup
  504
- Configuring General Setup
  504
Chapter 34 WAN and Dial Backup Setup

510
Chapter 35 LAN Setup

522
Chapter 36 Internet Access

528
Chapter 37 DMZ Setup

532
- Configuring DMZ Setup
  532
- DMZ Port Filter Setup
  532
- TCP/IP Setup
  532
  - Figure 289 Menu 5: DMZ Setup
    532
  - Figure 290 Menu 5.1: DMZ Port Filter Setup
    532
  - Figure 291 Menu 5: DMZ Setup
    533
  - Figure 292 Menu 5.2: TCP/IP and DHCP Ethernet Setup
    533
  - IP Address
    533
  - Figure 293 Menu 5.2.1: IP Alias Setup
    534
  - IP Alias Setup
    534
Chapter 38 Route Setup

536
- Configuring Route Setup
  536
- Route Assessment
  536
- Figure 294 Menu 6: Route Setup
  536
- Figure 295 Menu 6.1: Route Assessment
  536
- Traffic Redirect
  537
- Figure 296 Menu 6.2: Traffic Redirect
  537
- Table 203 Menu 6.1: Route Assessment
  537
- Table 204 Menu 6.2: Traffic Redirect
  537
- Route Failover
  538
- Figure 297 Menu 6.3: Route Failover
  538
- Table 205 Menu 6.3: Route Failover
  538
Chapter 39 Wireless Setup

540
- Wireless LAN Setup
  540
- TCP/IP Setup
  543
  - IP Address
    543
  - Figure 300 Menu 7: WLAN Setup
    543
  - IP Alias Setup
    544
  - Figure 301 Menu 7.2: TCP/IP and DHCP Ethernet Setup
    544
  - Figure 302 Menu 7.2.1: IP Alias Setup
    545
Chapter 40 Remote Node Setup

546
Chapter 41 IP Static Route Setup

556
Chapter 42 Network Address Translation (NAT)

558
Chapter 43 Introducing the Zywall Firewall

578
- Using Zywall SMT Menus
  578
Chapter 44 Filter Configuration

580
Chapter 45 SNMP Configuration

594
- SNMP Configuration
  594
- Figure 354 Menu 22: SNMP Configuration
  594
- Table 224 SNMP Configuration Menu Fields
  594
- SNMP Traps
  595
- Table 225 SNMP Traps
  595
Chapter 46 System Information & Diagnosis

596
Chapter 47 Firmware and Configuration File Maintenance

608
Chapter 48 System Maintenance Menus 8 to 10

624
- Command Interpreter Mode
  624
  - Command Syntax
    624
  - Figure 385 Command Mode in Menu 24
    624
  - Command Usage
    625
  - Figure 386 Valid Commands
    625
  - Table 233 Valid Commands
    625
- Call Control Support
  626
  - Budget Management
    626
  - Figure 387 Call Control
    626
  - Call History
    627
  - Figure 388 Budget Management
    627
  - Table 234 Budget Management
    627
- Time and Date Setting
  628
- Figure 389 Call History
  628
- Table 235 Call History
  628
- Figure 390 Menu 24: System Maintenance
  629
- Figure 391 Menu 24.10 System Maintenance: Time and Date Setting
  629
- Table 236 Menu 24.10 System Maintenance: Time and Date Setting
  630
Chapter 49 Remote Management

632
- Remote Management
  632
Chapter 50 IP Policy Routing

636
Chapter 51 Call Scheduling

644
Chapter 52 Troubleshooting

648
- Problems Starting up the Zywall
  648
- Problems with the LAN Interface
  648
- Table 243 Troubleshooting the Start-Up of Your Zywall
  648
- Table 244 Troubleshooting the LAN Interface
  648
- Problems with the DMZ Interface
  649
- Problems with the WAN Interface
  649
- Table 245 Troubleshooting the DMZ Interface
  649
- Table 246 Troubleshooting the WAN Interface
  649
- Problems Accessing the Zywall
  650
  - Pop-Up Windows, Javascripts and Java Permissions
    650
    
    Table 247 Troubleshooting Accessing the Zywall
    650
    
    Figure 403 Pop-Up Blocker
    651
    
    Internet Explorer Pop-Up Blockers
    651
    
    Figure 404 Internet Options: Privacy
    652
    
    Figure 405 Internet Options: Privacy
    653
    
    Figure 406 Pop-Up Blocker Settings
    654
    
    Javascripts
    654
    
    Figure 407 Internet Options: Security
    655
    
    Figure 408 Security Settings - Java Scripting
    656
    
    Java Permissions
    656
    
    Figure 409 Security Settings - Java
    657
- Packet Flow
  658
- Figure 410 Java (Sun)
  658
- Product Specifications
  660
Appendix A Product Specifications

660
Appendix B Hardware Installation

668
Appendix C

672
- Removing and Installing a Fuse
  672
Appendix D

674
Appendix Eip Subnetting

690
- Table 254 Classes of IP Addresses
  690
- Table 255 Allowed IP Address Range by Class
  691
- Table 256 "Natural" Masks
  691
- Table 257 Alternative Subnet Mask Notation
  692
- Table 258 Two Subnets Example
  692
- Table 259 Subnet 1
  693
- Table 260 Subnet 2
  693
- Table 261 Subnet 1
  694
- Table 262 Subnet 2
  694
- Table 263 Subnet 3
  694
- Table 264 Subnet 4
  695
- Table 265 Eight Subnets
  695
- Table 266 Class C Subnet Planning
  695
- Table 267 Class B Subnet Planning
  696
Appendix Fpppoe

698
- Figure 440 Single-Computer Per Router Hardware Configuration
  699
- Figure 441 Zywall as a Pppoe Client
  699
Appendix Gpptp

700
Appendix H Wireless Lans

704
- Figure 445 Peer-To-Peer Communication in an Ad-Hoc Network
  704
  - Figure 446 Basic Service Set
    705
  - Figure 447 Infrastructure WLAN
    706
  - Figure 448 RTS/CTS
    707
  - Table 268 Ieee802.11G
    708
  - Figure 449 EAP Authentication
    710
  - Types of Authentication
    711
  - Wep Authentication Steps
    712
- Figure 450 WEP Authentication Steps
  713
- Table 269 Comparison of EAP Authentication Types
  714
- Table 270 Wireless Security Relational Matrix
  715
- Figure 451 Roaming Example
  716
- Requirements for Roaming
  717
Appendix I Triangle Route

718
- Figure 452 Ideal Setup
  718
- Figure 453 "Triangle Route" Problem
  719
- Figure 454 IP Alias
  720
- Figure 455 Gateways on the WAN Side
  720
Appendix J

722
Appendix Kvpn Setup

726
- Figure 463 VPN Rules
  727
- Figure 464 Headquarters Gateway Policy Edit
  728
- Figure 465 Branch Office Gateway Policy Edit
  729
- Figure 466 Headquarters VPN Rule
  730
- Figure 467 Branch Office VPN Rule
  730
- Figure 468 Headquarters Network Policy Edit
  731
- Figure 469 Branch Office Network Policy Edit
  732
- Dialing the Vpn Tunnel Via Web Configurator
  732
- Figure 470 VPN Rule Configured
  733
- Figure 471 VPN Dial
  733
- Figure 472 VPN Tunnel Established
  733
- Vpn Troubleshooting
  734
- Figure 473 VPN Log Example
  735
- Figure 474 Ike/Ipsec Debug Example
  736
- Use a Vpn Tunnel
  737
- Importing Certificates
  738
Appendix L Importing Certificates

738
Appendix M Command Interpreter

750
Appendix N Firewall Commands

752
- Table 271 Firewall Commands
  752
Appendix O

758
- Netbios Filter Commands
  758
- Table 272 Netbios Filter Default Settings
  759
- Certificates Commands
  762
- Table 273 Certificates Commands
  762
Appendix Q

766
- Brute-Force Password Guessing Protection
  766
- Table 274 Brute-Force Password Guessing Protection Commands
  766
Appendix R Boot Commands

768
- Figure 494 Option to Enter Debug Mode
  768
- Figure 495 Boot Module Commands
  769
Appendix S Log Descriptions

770
- Table 275 System Maintenance Logs
  770
  - Table 276 System Error Logs
    771
  - Table 277 Access Control Logs
    772
  - Table 278 TCP Reset Logs
    773
  - Table 279 Packet Filter Logs
    773
  - Table 280 ICMP Logs
    774
  - Table 281 CDR Logs
    774
  - Table 282 PPP Logs
    774
  - Table 283 Upnp Logs
    775
  - Table 284 Content Filtering Logs
    775
  - Table 285 Attack Logs
    776
  - Table 286 Remote Management Logs
    777
  - Table 287 Wireless Logs
    778
  - Table 288 Ipsec Logs
    778
  - Table 289 IKE Logs
    779
  - Table 290 PKI Logs
    782
  - Table 291 Certificate Path Verification Failure Reason Codes
    783
  - Table 292 802.1X Logs
    783
  - Table 293 ACL Setting Notes
    784
  - Table 294 ICMP Notes
    785
  - Table 295 IDP Logs
    786
  - Table 296 AV Logs
    787
  - Table 297 as Logs
    788
  - Table 298 Syslog Logs
    790
  - Table 299 RFC-2408 ISAKMP Payload Types
    791
- Figure 496 Displaying Log Categories Example
  792
- Figure 497 Displaying Log Parameters Example
  792
- Log Command Example
  793
- Index
  794

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 Manuals

ZyXEL Communications Internet Security Appliance ZyWALL5UTM 4.0 User Manual (803 pages)

Table of Contents

Chapter 1 Getting to Know Your Zywall

Chapter 2 Introducing the Web Configurator

Chapter 3 Wizard Setup

Chapter 4 Registration

Chapter 5 LAN Screens

Chapter 6 Bridge Screens

Chapter 7 WAN Screens

Chapter 8 DMZ Screens

Chapter 9 Wireless LAN

Chapter 10 Firewalls

Chapter 11 Firewall Screens

Chapter 12 Intrusion Detection and Prevention (IDP)

Chapter 13 Configuring IDP

Chapter 14 Anti-Virus

Chapter 15 Anti-Spam

Chapter 16 Content Filtering Screens

Chapter 17 Content Filtering Reports

Chapter 18 Introduction to Ipsec

Chapter 19 VPN Screens

Chapter 20 Certificates

Chapter 21 Authentication Server

Chapter 22 Network Address Translation (NAT)

Chapter 23 Static Route

Chapter 24 Policy Route

Chapter 25 Bandwidth Management

Chapter 26 DNS

Chapter 27 Remote Management

Chapter 28 Upnp

Chapter 29 ALG Screen

Chapter 30 Logs Screens

Chapter 31 Maintenance

Chapter 32 Introducing the SMT

Chapter 33 SMT Menu 1 - General Setup

Chapter 34 WAN and Dial Backup Setup

Chapter 35 LAN Setup

Chapter 36 Internet Access

Chapter 37 DMZ Setup

Chapter 38 Route Setup

Chapter 39 Wireless Setup

Chapter 40 Remote Node Setup

Chapter 41 IP Static Route Setup

Chapter 42 Network Address Translation (NAT)

Chapter 43 Introducing the Zywall Firewall

Chapter 44 Filter Configuration

Chapter 45 SNMP Configuration

Chapter 46 System Information & Diagnosis

Chapter 47 Firmware and Configuration File Maintenance

Chapter 48 System Maintenance Menus 8 to 10

Chapter 49 Remote Management

Chapter 50 IP Policy Routing

Chapter 51 Call Scheduling

Chapter 52 Troubleshooting

Appendix A Product Specifications

Appendix B Hardware Installation

Appendix C

Appendix D

Appendix Eip Subnetting

Appendix Fpppoe

Appendix Gpptp

Appendix H Wireless Lans

Appendix I Triangle Route

Appendix J

Appendix Kvpn Setup

Appendix L Importing Certificates

Appendix M Command Interpreter

Appendix N Firewall Commands

Appendix O

Appendix Q

Appendix R Boot Commands

Appendix S Log Descriptions

Related Products

ZyXEL Communications Categories