ZyXEL Communications USG-50 - V2.21 ED 1 Manuals

Manuals and User Guides for ZyXEL Communications USG-50 - V2.21 ED 1. We have 1 ZyXEL Communications USG-50 - V2.21 ED 1 manual available for free PDF download: User Manual

ZyXEL Communications USG-50 - V2.21 ED 1 User Manual (970 pages)

Unified Security Gateway

Brand: ZyXEL Communications | Category: Gateway | Size: 19.82 MB

About this User's Guide

3
Document Conventions

6
Safety Warnings

8
Contents Overview

9
- Table of Contents
  9
Table of Contents

11
User's Guide

29
PART I User's Guide

29
Chapter 1 Introducing the Zywall

31
- Overview and Key Default Settings
  31
- Rack-Mounted Installation
  32
  - Rack-Mounted Installation Procedure
    32
- Front Panel
  33
  - Front Panel Leds
    33
- Management Overview
  34
- Starting and Stopping the Zywall
  35
Chapter 2 Features and Applications

37
- Features
  37
- Applications
  39
  - VPN Connectivity
    40
  - SSL VPN Network Access
    40
  - User-Aware Access Control
    42
  - Multiple WAN Interfaces
    43
- Web Configurator
  45
Chapter 3 Web Configurator

45
- Web Configurator Requirements
  45
- Web Configurator Access
  45
- Web Configurator Screens Overview
  47
  - Title Bar
    48
  - Navigation Panel
    49
    
    Monitor Menu
    50
    
    Configuration Menu
    50
  - Main Window
    55
  - Tables and Lists
    57
  - Working with Table Entries
    59
Chapter 4 Installation Setup Wizard

61
- Installation Setup Wizard Screens
  61
  - Internet Access Setup - WAN Interface
    61
  - Internet Access: Ethernet
    62
  - Internet Access: Pppoe
    64
  - Internet Access: PPTP
    65
  - ISP Parameters
    66
  - Internet Access Setup - Second WAN Interface
    67
  - Internet Access - Finish
    68
- Device Registration
  68
- Quick Setup
  71
Chapter 5 Quick Setup

71
- Quick Setup Overview
  71
- WAN Interface Quick Setup
  72
- VPN Quick Setup
  77
- VPN Setup Wizard: Wizard Type
  78
- VPN Express Wizard - Scenario
  79
Chapter 6 Configuration Basics

89
- Object-Based Configuration
  89
- Zones, Interfaces, and Physical Ports
  90
  - Interface Types
    91
  - Default Interface and Zone Configuration
    91
- Terminology in the Zywall
  93
- Packet Flow
  93
  - Routing Table Checking Flow
    95
  - NAT Table Checking Flow
    96
- Feature Configuration Overview
  97
  - Feature
    97
  - Licensing Registration
    98
  - Licensing Update
    98
  - Interface
    98
  - Trunks
    99
  - Policy Routes
    99
  - Static Routes
    100
  - Zones
    100
  - Ddns
    101
  - Nat
    101
  - HTTP Redirect
    101
  - Alg
    102
  - Auth. Policy
    102
  - Firewall
    103
  - Ipsec VPN
    104
  - Ssl Vpn
    104
  - Application Patrol
    104
  - Anti-Virus
    105
  - Idp
    105
  - Adp
    105
  - Content Filter
    105
  - Anti-Spam
    106
- Objects
  107
  - User/Group
    107
- System
  108
  - DNS, WWW, SSH, TELNET, FTP, SNMP, Vantage CNM
    108
  - Logs and Reports
    109
  - File Manager
    109
  - Diagnostics
    109
  - Shutdown
    109
- Tutorials
  111
Chapter 7 Tutorials

111
Technical Reference

157
Part II: Technical Reference

157
- Dashboard
  159
Chapter 8 Dashboard

159
- Overview
  159
  - What You Can Do in this Chapter
    159
- The Dashboard Screen
  159
  - The CPU Usage Screen
    165
  - The Memory Usage Screen
    166
  - The Active Sessions Screen
    167
  - The VPN Status Screen
    168
  - The DHCP Table Screen
    168
  - The Number of Login Users Screen
    169
- Monitor
  171
Chapter 9 Monitor

171
- Overview
  171
  - What You Can Do in this Chapter
    171
- The Port Statistics Screen
  172
  - The Port Statistics Graph Screen
    174
- Interface Status Screen
  175
- The Traffic Statistics Screen
  177
- The Session Monitor Screen
  180
- The DDNS Status Screen
  183
- IP/MAC Binding Monitor
  183
- The Login Users Screen
  184
- Cellular Status Screen
  185
  - More Information
    187
- USB Storage Screen
  188
- Application Patrol Statistics
  189
- The Ipsec Monitor Screen
  194
  - Regular Expressions in Searching Ipsec Sas
    195
- The SSL Connection Monitor Screen
  196
- The Anti-Virus Statistics Screen
  197
- The IDP Statistics Screen
  199
- The Content Filter Statistics Screen
  201
- Content Filter Cache Screen
  203
- The Anti-Spam Statistics Screen
  206
- The Anti-Spam Status Screen
  208
- Log Screen
  209
- Registration
  213
Chapter 10 Registration

213
- Overview
  213
  - What You Can Do in this Chapter
    213
  - What You Need to Know
    213
- The Registration Screen
  215
- The Service Screen
  218
- Interfaces
  221
Chapter 11 Interfaces

221
- Interface Overview
  221
  - What You Can Do in this Chapter
    221
  - What You Need to Know
    222
  - Relationships between Interfaces
    223
- Port Role
  224
- Ethernet Summary Screen
  225
  - Ethernet Edit
    227
  - Object References
    236
- PPP Interfaces
  237
  - PPP Interface Summary
    238
  - PPP Interface Add or Edit
    239
- Cellular Configuration Screen (3G)
  243
  - Cellular Add/Edit Screen
    245
- VLAN Interfaces
  252
  - VLAN Summary Screen
    254
  - VLAN Add/Edit
    255
- Bridge Interfaces
  262
  - Bridge Summary
    264
  - Bridge Add/Edit
    265
  - Virtual Interfaces Add/Edit
    270
- Interface Technical Reference
  272
- Trunks
  277
Chapter 12 Trunks

277
- Overview
  277
  - What You Can Do in this Chapter
    277
  - What You Need to Know
    278
- The Trunk Summary Screen
  282
- Configuring a Trunk
  283
- Trunk Technical Reference
  285
Chapter 13 Policy and Static Routes

287
- Policy and Static Routes Overview
  287
  - What You Can Do in this Chapter
    287
  - What You Need to Know
    288
- Policy Route Screen
  290
  - Policy Route Edit Screen
    293
- IP Static Route Screen
  297
  - Static Route Add/Edit Screen
    298
- Policy Routing Technical Reference
  299
  - Port Triggering
    300
  - Maximize Bandwidth Usage
    301
Chapter 14 Routing Protocols

303
- Routing Protocols Overview
  303
  - What You Can Do in this Chapter
    303
  - What You Need to Know
    303
- The RIP Screen
  304
- The OSPF Screen
  305
  - Configuring the OSPF Screen
    309
  - OSPF Area Add/Edit Screen
    312
  - Virtual Link Add/Edit Screen
    313
- Routing Protocol Technical Reference
  314
Chapter 15 Zones

317
- Zones Overview
  317
  - What You Can Do in this Chapter
    317
  - What You Need to Know
    318
- The Zone Screen
  319
- Zone Edit
  320
- Ddns
  321
Chapter 16 DDNS

321
- DDNS Overview
  321
  - What You Can Do in this Chapter
    321
  - What You Need to Know
    321
- The DDNS Screen
  322
  - The Dynamic DNS Add/Edit Screen
    324
- Nat
  327
Chapter 17 NAT

327
- NAT Overview
  327
  - What You Can Do in this Chapter
    327
  - What You Need to Know
    328
- The NAT Screen
  328
  - The NAT Add/Edit Screen
    330
- NAT Technical Reference
  333
- HTTP Redirect
  337
Chapter 18 HTTP Redirect

337
- Overview
  337
  - What You Can Do in this Chapter
    337
  - What You Need to Know
    338
- The HTTP Redirect Screen
  339
  - The HTTP Redirect Edit Screen
    340
- Alg
  341
Chapter 19 ALG

341
- ALG Overview
  341
  - What You Can Do in this Chapter
    341
  - What You Need to Know
    342
  - Before You Begin
    345
- The ALG Screen
  345
- ALG Technical Reference
  347
- IP/MAC Binding
  349
Chapter 20 IP/MAC Binding

349
- IP/MAC Binding Overview
  349
  - What You Can Do in this Chapter
    349
  - What You Need to Know
    350
- IP/MAC Binding Summary
  350
  - IP/MAC Binding Edit
    351
  - Static DHCP Edit
    352
- IP/MAC Binding Exempt List
  353
Chapter 21 Authentication Policy

355
- Overview
  355
  - What You Can Do in this Chapter
    355
  - What You Need to Know
    356
- Authentication Policy Screen
  356
  - Creating/Editing an Authentication Policy
    359
- Firewall
  363
Chapter 22 Firewall

363
- Overview
  363
  - What You Can Do in this Chapter
    363
  - What You Need to Know
    364
  - Firewall Rule Example Applications
    366
  - Firewall Rule Configuration Example
    369
- The Firewall Screen
  371
  - Configuring the Firewall Screen
    372
  - The Firewall Add/Edit Screen
    375
- The Session Limit Screen
  376
  - The Session Limit Add/Edit Screen
    378
Chapter 23 Ipsec VPN

381
- Ipsec VPN Overview
  381
  - What You Can Do in this Chapter
    381
  - What You Need to Know
    382
  - Before You Begin
    384
- The VPN Connection Screen
  384
  - The VPN Connection Add/Edit (IKE) Screen
    386
  - The VPN Connection Add/Edit Manual Key Screen
    393
- The VPN Gateway Screen
  396
  - The VPN Gateway Add/Edit Screen
    397
- Ipsec VPN Background Information
  405
- Ipsec Sa Overview
  411
- Ssl Vpn
  417
Chapter 24 SSL VPN

417
- Overview
  417
  - What You Can Do in this Chapter
    417
  - What You Need to Know
    417
- The SSL Access Privilege Screen
  419
  - The SSL Access Policy Add/Edit Screen
    420
- The SSL Global Setting Screen
  423
  - How to Upload a Custom Logo
    424
- Establishing an SSL VPN Connection
  425
Chapter 25 SSL User Screens

427
- Overview
  427
  - What You Need to Know
    427
- Remote User Login
  428
- The SSL VPN User Screens
  433
- Bookmarking the Zywall
  434
- Logging out of the SSL VPN User Screens
  434
Chapter 26 SSL User Application Screens

437
- SSL User Application Screens Overview
  437
- The Application Screen
  437
Chapter 27 Zywall Secuextender

439
- The Zywall Secuextender Icon
  439
- Statistics
  440
- View Log
  441
- Suspend and Resume the Connection
  441
- Stop the Connection
  442
- Uninstalling the Zywall Secuextender
  442
- Application Patrol
  443
Chapter 28 Application Patrol

443
Chapter 29 Anti-Virus

469
- Overview
  469
  - What You Can Do in this Chapter
    469
  - What You Need to Know
    470
  - Before You Begin
    471
- Anti-Virus Summary Screen
  472
  - Anti-Virus Policy Add or Edit Screen
    475
- Anti-Virus Black List
  477
- Anti-Virus Black List or White List Add/Edit
  478
- Anti-Virus White List
  479
- Signature Searching
  480
- Anti-Virus Technical Reference
  483
- Idp
  485
Chapter 30 IDP

485
- Overview
  485
  - What You Can Do in this Chapter
    485
  - What You Need to Know
    485
  - Before You Begin
    486
- The IDP General Screen
  487
- Introducing IDP Profiles
  489
  - Base Profiles
    490
- The Profile Summary Screen
  491
- Creating New Profiles
  492
  - Procedure to Create a New Profile
    492
- Profiles: Packet Inspection
  493
  - Profile > Group View Screen
    493
  - Policy Types
    496
  - IDP Service Groups
    497
  - Profile > Query View Screen
    499
  - Query Example
    501
- Introducing IDP Custom Signatures
  503
  - IP Packet Header
    503
- Configuring Custom Signatures
  504
  - Creating or Editing a Custom Signature
    506
  - Custom Signature Example
    512
  - Applying Custom Signatures
    514
  - Verifying Custom Signatures
    515
- IDP Technical Reference
  516
Chapter 31 ADP

519
- Overview
  519
  - ADP and IDP Comparison
    519
  - What You Can Do in this Chapter
    519
  - What You Need to Know
    519
  - Before You Begin
    520
- The ADP General Screen
  521
- The Profile Summary Screen
  522
  - Base Profiles
    523
  - Configuring the ADP Profile Summary Screen
    523
  - Creating New ADP Profiles
    524
  - Traffic Anomaly Profiles
    524
  - Protocol Anomaly Profiles
    527
  - Protocol Anomaly Configuration
    527
- ADP Technical Reference
  531
- Content Filtering
  539
Chapter 32 Content Filtering

539
- Overview
  539
  - What You Can Do in this Chapter
    539
  - What You Need to Know
    539
  - Before You Begin
    541
- Content Filter General Screen
  541
- Content Filter Policy Add or Edit Screen
  544
- Content Filter Profile Screen
  546
- Content Filter Categories Screen
  546
  - Content Filter Blocked and Warning Messages
    560
- Content Filter Customization Screen
  560
- Content Filter Technical Reference
  563
Chapter 33 Content Filter Reports

565
- Overview
  565
- Viewing Content Filter Reports
  565
Chapter 34 Anti-Spam

573
- Overview
  573
  - What You Can Do in this Chapter
    573
  - What You Need to Know
    573
- Before You Begin
  575
- The Anti-Spam General Screen
  575
  - The Anti-Spam Policy Add or Edit Screen
    577
- The Anti-Spam Black List Screen
  579
  - The Anti-Spam Black or White List Add/Edit Screen
    581
  - Regular Expressions in Black or White List Entries
    582
- The Anti-Spam White List Screen
  583
- The DNSBL Screen
  584
- Anti-Spam Technical Reference
  586
Chapter 35 User/Group

591
- Overview
  591
  - What You Can Do in this Chapter
    591
  - What You Need to Know
    591
- User Summary Screen
  594
  - User Add/Edit Screen
    594
- User Group Summary Screen
  597
  - Group Add/Edit Screen
    598
- Setting Screen
  599
  - Default User Authentication Timeout Settings Edit Screens
    602
  - User Aware Login Example
    604
- User /Group Technical Reference
  605
Addresses

607
- Overview
  607
  - What You Can Do in this Chapter
    607
  - What You Need to Know
    607
- Address Summary Screen
  607
  - Address Add/Edit Screen
    609
- Address Group Summary Screen
  610
  - Address Group Add/Edit Screen
    611
Chapter 36

607
Chapter 37 Services

613
- Overview
  613
  - What You Can Do in this Chapter
    613
  - What You Need to Know
    613
- The Service Summary Screen
  614
  - The Service Add/Edit Screen
    616
- The Service Group Summary Screen
  616
  - The Service Group Add/Edit Screen
    618
Chapter 38 Schedules

619
- Overview
  619
  - What You Can Do in this Chapter
    619
  - What You Need to Know
    619
- The Schedule Summary Screen
  620
  - The One-Time Schedule Add/Edit Screen
    621
  - The Recurring Schedule Add/Edit Screen
    622
Chapter 39 AAA Server

625
- Overview
  625
  - Directory Service (AD/LDAP)
    625
  - RADIUS Server
    626
  - Asas
    626
  - What You Can Do in this Chapter
    626
  - What You Need to Know
    627
- Active Directory or LDAP Server Summary
  629
  - Adding an Active Directory or LDAP Server
    629
- RADIUS Server Summary
  631
  - Adding a RADIUS Server
    633
Chapter 40 Authentication Method

635
- Overview
  635
- Authentication Method Objects
  636
  - Creating an Authentication Method Object
    637
Chapter 41 Certificates

641
- Overview
  641
  - What You Can Do in this Chapter
    641
  - What You Need to Know
    641
  - Verifying a Certificate
    643
- The My Certificates Screen
  645
- The Trusted Certificates Screen
  655
  - The Trusted Certificates Edit Screen
    656
  - The Trusted Certificates Import Screen
    660
- Certificates Technical Reference
  661
Chapter 42 ISP Accounts

663
- Overview
  663
  - What You Can Do in this Chapter
    663
- ISP Account Summary
  663
  - ISP Account Edit
    664
Chapter 43 SSL Application

667
- Overview
  667
- The SSL Application Screen
  669
  - Creating/Editing a Web-Based SSL Application Object
    670
Chapter 44 Endpoint Security

673
- Overview
  673
  - What You Can Do in this Chapter
    674
  - What You Need to Know
    674
- Endpoint Security Screen
  675
- Endpoint Security Add/Edit
  676
Chapter 45 System

681
- Overview
  681
  - What You Can Do in this Chapter
    681
- Host Name
  682
- USB Storage
  683
- Date and Time
  683
  - Pre-Defined NTP Time Servers List
    686
  - Time Server Synchronization
    687
- Console Port Speed
  688
- DNS Overview
  688
  - DNS Server Address Assignment
    689
  - Configuring the DNS Screen
    689
  - Address Record
    692
  - PTR Record
    692
  - Adding an Address/Ptr Record
    692
  - Domain Zone Forwarder
    693
  - Adding a Domain Zone Forwarder
    693
  - MX Record
    694
  - Adding a MX Record
    695
  - Adding a DNS Service Control Rule
    695
- WWW Overview
  696
  - Service Access Limitations
    696
  - System Timeout
    697
  - Https
    697
  - Configuring WWW Service Control
    698
  - Service Control Rules
    702
  - Customizing the WWW Login Page
    702
  - HTTPS Example
    706
    
    Netscape Navigator Warning Messages
    707
    
    Avoiding Browser Warning Messages
    707
    
    Login Screen
    708
    
    Enrolling and Importing Ssl Client Certificates
    708
    
    Using a Certificate When Accessing the Zywall Example
    712
- Ssh
  713
  - How SSH Works
    714
  - SSH Implementation on the Zywall
    715
  - Requirements for Using SSH
    715
  - Configuring SSH
    715
  - Secure Telnet Using SSH Examples
    717
- Telnet
  718
  - Configuring Telnet
    719
- Ftp
  720
  - Configuring FTP
    720
- Snmp
  722
  - Supported Mibs
    724
  - SNMP Traps
    724
  - Configuring SNMP
    724
- Vantage CNM
  726
  - Configuring Vantage CNM
    727
- Language Screen
  729
Chapter 46 Log and Report

731
- Overview
  731
  - What You Can Do in this Chapter
    731
- Email Daily Report
  731
- Log Setting Screens
  733
  - Log Setting Summary
    734
  - Edit System Log Settings
    735
  - Edit Remote Server Log Settings
    740
  - Active Log Summary Screen
    742
Chapter 47 File Manager

745
- Overview
  745
- The Configuration File Screen
  748
- The Firmware Package Screen
  752
- The Shell Script Screen
  754
Chapter 48 Diagnostics

757
- Overview
  757
  - What You Can Do in this Chapter
    757
- The Diagnostic Screen
  757
  - The Diagnostics Files Screen
    758
- The Packet Capture Screen
  759
  - The Packet Capture Files Screen
    762
  - Example of Viewing a Packet Capture File
    763
- Core Dump Screen
  764
  - Core Dump Files Screen
    765
- The System Log Screen
  766
Chapter 49 Packet Flow Explore

767
- Overview
  767
  - What You Can Do in this Chapter
    767
- The Routing Status Screen
  767
- The SNAT Status Screen
  771
- Reboot
  775
Chapter 50 Reboot

775
- Overview
  775
  - What You Need to Know
    775
- The Reboot Screen
  775
Chapter 51 Shutdown

777
- Overview
  777
  - What You Need to Know
    777
- The Shutdown Screen
  777
Chapter 52 Troubleshooting

779
- Resetting the Zywall
  793
- Getting more Troubleshooting Help
  794
Chapter 53 Product Specifications

795
- Power Adaptor Specifications
  800
Appendix A Log Descriptions

803
Appendix A Log Descriptions

804
Appendix B Common Services

861
Appendix C Displaying Anti-Virus Alert Messages in Windows

865
Appendix D Importing Certificates

871
Appendix D Importing Certificates

872
Appendix E Open Software Announcements

897
Appendix F Legal Information

943
Appendix F Legal Information

944
- Zyxel Limited Warranty
  945
Index

947

ZyXEL Communications Categories

Gateway

Network Router

Switch Wireless Router Adapter

More ZyXEL Communications Manuals

ZyXEL Communications USG-50 - V2.21 ED 1 Manuals

ZyXEL Communications USG-50 - V2.21 ED 1 User Manual (970 pages)

Table of Contents

About this User's Guide

Document Conventions

Safety Warnings

Contents Overview

Table of Contents

User's Guide

PART I User's Guide

Chapter 1 Introducing the Zywall

Chapter 2 Features and Applications

Chapter 3 Web Configurator

Chapter 4 Installation Setup Wizard

Chapter 5 Quick Setup

Chapter 6 Configuration Basics

Chapter 7 Tutorials

Technical Reference

Part II: Technical Reference

Chapter 8 Dashboard

Chapter 9 Monitor

Chapter 10 Registration

Chapter 11 Interfaces

Chapter 12 Trunks

Chapter 13 Policy and Static Routes

Chapter 14 Routing Protocols

Chapter 15 Zones

Chapter 16 DDNS

Chapter 17 NAT

Chapter 18 HTTP Redirect

Chapter 19 ALG

Chapter 20 IP/MAC Binding

Chapter 21 Authentication Policy

Chapter 22 Firewall

Chapter 23 Ipsec VPN

Chapter 24 SSL VPN

Chapter 25 SSL User Screens

Chapter 26 SSL User Application Screens

Chapter 27 Zywall Secuextender

Chapter 28 Application Patrol

Chapter 29 Anti-Virus

Chapter 30 IDP

Chapter 31 ADP

Chapter 32 Content Filtering

Chapter 33 Content Filter Reports

Chapter 34 Anti-Spam

Chapter 35 User/Group

Addresses

Chapter 36

Chapter 37 Services

Chapter 38 Schedules

Chapter 39 AAA Server

Chapter 40 Authentication Method

Chapter 41 Certificates

Chapter 42 ISP Accounts

Chapter 43 SSL Application

Chapter 44 Endpoint Security

Chapter 45 System

Chapter 46 Log and Report

Chapter 47 File Manager

Chapter 48 Diagnostics

Chapter 49 Packet Flow Explore

Chapter 50 Reboot

Chapter 51 Shutdown

Chapter 52 Troubleshooting

Chapter 53 Product Specifications

Appendix A Log Descriptions

Appendix A Log Descriptions

Appendix B Common Services

Appendix C Displaying Anti-Virus Alert Messages in Windows

Appendix D Importing Certificates

Appendix D Importing Certificates

Appendix E Open Software Announcements

Appendix F Legal Information

Appendix F Legal Information

Index

Related Products

ZyXEL Communications Categories