User Guide
Page 5
... you should contact your device. • Brief description of the problem and the steps you bought the device. ZyWALL USG 20/20W User's Guide 5 See http://www.zyxel.com/web/contact_us.php for the region in this manual is accurate. Please have the following information ready when you... number. • Warranty Information. • Date that cannot be solved by the methods listed above, you installed updated firmware/software for your vendor, then contact a ZyXEL office for contact information. Learn from the product due to solve it. About This User's Guide • Forum This ...
... you should contact your device. • Brief description of the problem and the steps you bought the device. ZyWALL USG 20/20W User's Guide 5 See http://www.zyxel.com/web/contact_us.php for the region in this manual is accurate. Please have the following information ready when you... number. • Warranty Information. • Date that cannot be solved by the methods listed above, you installed updated firmware/software for your vendor, then contact a ZyXEL office for contact information. Learn from the product due to solve it. About This User's Guide • Forum This ...
User Guide
Page 25
... ...693 45.1.1 What You Can Do in this Chapter 693 45.1.2 What you Need to Know 693 45.2 The Configuration File Screen 696 45.3 The Firmware Package Screen 700 45.4 The Shell Script Screen 702 Chapter 46 Diagnostics...705 46.1 Overview ...705 46.1.1 What You Can Do in this Chapter 705... Screen 719 Chapter 48 Reboot...723 48.1 Overview ...723 48.1.1 What You Need To Know 723 48.2 The Reboot Screen ...723 Chapter 49 Shutdown...725 ZyWALL USG 20/20W User's Guide 25
... ...693 45.1.1 What You Can Do in this Chapter 693 45.1.2 What you Need to Know 693 45.2 The Configuration File Screen 696 45.3 The Firmware Package Screen 700 45.4 The Shell Script Screen 702 Chapter 46 Diagnostics...705 46.1 Overview ...705 46.1.1 What You Can Do in this Chapter 705... Screen 719 Chapter 48 Reboot...723 48.1 Overview ...723 48.1.1 What You Need To Know 723 48.2 The Reboot Screen ...723 Chapter 49 Shutdown...725 ZyWALL USG 20/20W User's Guide 25
User Guide
Page 34
... port. Console Port You can cause the firmware to the ZyWALL. If you turn on the power to become corrupt. See the Command Reference Guide for more information about the CLI. Rebooting the ZyWALL Using the RESET button A warm start occurs when you use Maintenance > Shutdown > Shutdown or the ... up again) occurs when you use the console port to its default values and then reboots. 34 ZyWALL USG 20/20W User's Guide The ZyWALL writes all cached data to start . The default settings for more information about the CLI. See the Command Reference Guide for the ...
... port. Console Port You can cause the firmware to the ZyWALL. If you turn on the power to become corrupt. See the Command Reference Guide for more information about the CLI. Rebooting the ZyWALL Using the RESET button A warm start occurs when you use Maintenance > Shutdown > Shutdown or the ... up again) occurs when you use the console port to its default values and then reboots. 34 ZyWALL USG 20/20W User's Guide The ZyWALL writes all cached data to start . The default settings for more information about the CLI. See the Command Reference Guide for the ...
User Guide
Page 47
... middle of the right edge of the ZyWALL. Chapter 3 Web Configurator The following sections introduce the ZyWALL's navigation panel menus and their screens. Current Version This shows the firmware version of the navigation panel to hide the navigation panel menus or drag it to configure ZyWALL features. ZyWALL USG 20/20W User's Guide 47 Table 5 Title Bar...
... middle of the right edge of the ZyWALL. Chapter 3 Web Configurator The following sections introduce the ZyWALL's navigation panel menus and their screens. Current Version This shows the firmware version of the navigation panel to hide the navigation panel menus or drag it to configure ZyWALL features. ZyWALL USG 20/20W User's Guide 47 Table 5 Title Bar...
User Guide
Page 51
... CNM server. Log & Report Email Daily Report Configure where and how to send daily reports and what reports to manage configuration and firmware files, run shell script files for the ZyWALL. Log Setting Configure the system log, e-mail logs, and remote syslog servers. 3.3.2.4 Maintenance Menu Use the maintenance menu screens to send... Screens Summary (continued) FOLDER OR LINK TAB FUNCTION Endpoint Security Create Endpoint Security (EPS) objects. DNS Configure the DNS server and address records for the ZyWALL. ZyWALL USG 20/20W User's Guide 51
... CNM server. Log & Report Email Daily Report Configure where and how to send daily reports and what reports to manage configuration and firmware files, run shell script files for the ZyWALL. Log Setting Configure the system log, e-mail logs, and remote syslog servers. 3.3.2.4 Maintenance Menu Use the maintenance menu screens to send... Screens Summary (continued) FOLDER OR LINK TAB FUNCTION Endpoint Security Create Endpoint Security (EPS) objects. DNS Configure the DNS server and address records for the ZyWALL. ZyWALL USG 20/20W User's Guide 51
User Guide
Page 106
...> Shutdown > Shutdown or the shutdown command before you can cause the firmware to upload, download, delete, or run a series of CLI commands. You can generate a file containing the ZyWALL's configuration and diagnostic information. These are useful for large, repetitive configuration changes... of the ZyWALL. Use configuration files to back up and restore the complete configuration of VPN tunnels) and for disconnecting the power. MENU ITEM(S) Maintenance > Shutdown 106 ZyWALL USG 20/20W User's Guide MENU ITEM(S) Maintenance > File Manager 6.7.4 Diagnostics The ZyWALL can store...
...> Shutdown > Shutdown or the shutdown command before you can cause the firmware to upload, download, delete, or run a series of CLI commands. You can generate a file containing the ZyWALL's configuration and diagnostic information. These are useful for large, repetitive configuration changes... of the ZyWALL. Use configuration files to back up and restore the complete configuration of VPN tunnels) and for disconnecting the power. MENU ITEM(S) Maintenance > Shutdown 106 ZyWALL USG 20/20W User's Guide MENU ITEM(S) Maintenance > File Manager 6.7.4 Diagnostics The ZyWALL can store...
User Guide
Page 168
...MAC addresses used to identify the ZyWALL on page 700. Each physical port has one of the firmware the ZyWALL is disabled. The format Date/Time is none. Down - This field displays the port speed and duplex setting (Full or Half). (For USG 20W only) The status for the ...This field displays the model name of interface it . Firmware Version This field displays the version number and date of the ZyWALL's extension slots or USB ports. The possible values depend on . See Section 43.2 on page 171. 168 ZyWALL USG 20/20W User's Guide Speed / Duplex - Zone This field...
...MAC addresses used to identify the ZyWALL on page 700. Each physical port has one of the firmware the ZyWALL is disabled. The format Date/Time is none. Down - This field displays the port speed and duplex setting (Full or Half). (For USG 20W only) The status for the ...This field displays the model name of interface it . Firmware Version This field displays the version number and date of the ZyWALL's extension slots or USB ports. The possible values depend on . See Section 43.2 on page 171. 168 ZyWALL USG 20/20W User's Guide Speed / Duplex - Zone This field...
User Guide
Page 169
...ZyWALL started up successfully. A firmware update was unable to apply the lastgood.conf configuration file and fell back to display a chart of the ZyWALL's onboard flash memory is still applying the system configuration. The ZyWALL was successful. Flash Usage This field displays what percentage of the users who are traversing the ZyWALL. ZyWALL USG 20/20W... are currently logged in to system default configuration - Problematic configuration after a firmware upgrade. The ZyWALL is currently being used . Active Sessions This field displays how many traffic sessions are currently open a...
...ZyWALL started up successfully. A firmware update was unable to apply the lastgood.conf configuration file and fell back to display a chart of the ZyWALL's onboard flash memory is still applying the system configuration. The ZyWALL was successful. Flash Usage This field displays what percentage of the users who are traversing the ZyWALL. ZyWALL USG 20/20W... are currently logged in to system default configuration - Problematic configuration after a firmware upgrade. The ZyWALL is currently being used . Active Sessions This field displays how many traffic sessions are currently open a...
User Guide
Page 195
... 3G device. Device Firmware This shows the software version of the cellular card. IMSI (International Mobile Subscriber Identity) is the Signal Quality measured in this screen. Device Manufacturer This shows the name of your ZyWALL and the service provider's base station. Figure 146 Monitor > System Status > USB Storage ZyWALL USG 20/20W User's Guide 195...
... 3G device. Device Firmware This shows the software version of the cellular card. IMSI (International Mobile Subscriber Identity) is the Signal Quality measured in this screen. Device Manufacturer This shows the name of your ZyWALL and the service provider's base station. Figure 146 Monitor > System Status > USB Storage ZyWALL USG 20/20W User's Guide 195...
User Guide
Page 467
... Anomalies Traffic anomaly rules look for Comments) and abnormal flows such as port scanning, sweeping or network flooding. ZyWALL USG 20/20W User's Guide 467 Traffic anomaly rules may be updated when you upload new firmware. 29.1.2 What You Can Do in general effective against anomalies based on page 470) to a traffic direction. Protocol...
... Anomalies Traffic anomaly rules look for Comments) and abnormal flows such as port scanning, sweeping or network flooding. ZyWALL USG 20/20W User's Guide 467 Traffic anomaly rules may be updated when you upload new firmware. 29.1.2 What You Can Do in general effective against anomalies based on page 470) to a traffic direction. Protocol...
User Guide
Page 475
... Comments). Click Cancel to return to take when a packet matches a rule. Action This is the action the ZyWALL should take the configured action. ZyWALL USG 20/20W User's Guide 475 Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder, and ICMP Decoder where each category...profile screen (tab) in the same page. If you made changes to other screens belonging to this profile, make sure you upload new firmware. 29.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon ...
... Comments). Click Cancel to return to take when a packet matches a rule. Action This is the action the ZyWALL should take the configured action. ZyWALL USG 20/20W User's Guide 475 Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder, and ICMP Decoder where each category...profile screen (tab) in the same page. If you made changes to other screens belonging to this profile, make sure you upload new firmware. 29.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon ...
User Guide
Page 593
... that shows which settings use . Uploading a new firmware or default configuration file does not delete your certificates unless you want to remove it before adding more certificates. Subsequent certificates move up by one when you can have the ZyWALL generate a certificate or a certification request. ZyWALL USG 20/20W User's Guide 593 Figure 351 Configuration > Object...
... that shows which settings use . Uploading a new firmware or default configuration file does not delete your certificates unless you want to remove it before adding more certificates. Subsequent certificates move up by one when you can have the ZyWALL generate a certificate or a certification request. ZyWALL USG 20/20W User's Guide 593 Figure 351 Configuration > Object...
User Guide
Page 603
...save the certificate on this list as trusted. Uploading a new firmware or default configuration file does not delete your certificates unless you want...Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in -depth list of the ZyWALL's PKI storage space that you take this screen. Double-click an entry or select it and click Remove...Storage Space in use. When the storage space is signed by a certificate on the ZyWALL. ZyWALL USG 20/20W User's Guide 603 thus you do not need to import any valid certificate signed by one when you...
...save the certificate on this list as trusted. Uploading a new firmware or default configuration file does not delete your certificates unless you want...Configuration > Object > Certificate > Trusted Certificates The following table describes the labels in -depth list of the ZyWALL's PKI storage space that you take this screen. Double-click an entry or select it and click Remove...Storage Space in use. When the storage space is signed by a certificate on the ZyWALL. ZyWALL USG 20/20W User's Guide 603 thus you do not need to import any valid certificate signed by one when you...
User Guide
Page 629
... address and vice versa. • Use the System > WWW screens (see Section 43.7 on page 644) to configure settings for more information about firmware and configuration files. ZyWALL USG 20/20W User's Guide 629 You can also specify from which IP address the access can come . • Use the System > TELNET screen (see Section...
... address and vice versa. • Use the System > WWW screens (see Section 43.7 on page 644) to configure settings for more information about firmware and configuration files. ZyWALL USG 20/20W User's Guide 629 You can also specify from which IP address the access can come . • Use the System > TELNET screen (see Section...
User Guide
Page 668
... configure a rule that does not match any other configured rule. It is the ZyWALL's (nonconfigurable) default policy. This displays whether the computer with the IP address specified above can 668 ZyWALL USG 20/20W User's Guide Click Apply to save your changes back to traffic that traffic will ...saved settings. 43.10 FTP You can upload and download the ZyWALL's firmware and configuration files using FTP. The screen appears as shown. Zone Address Action Apply Reset The entry with which zones FTP can access the ZyWALL zone(s) configured in the Zone field (Accept) or not (Deny...
... configure a rule that does not match any other configured rule. It is the ZyWALL's (nonconfigurable) default policy. This displays whether the computer with the IP address specified above can 668 ZyWALL USG 20/20W User's Guide Click Apply to save your changes back to traffic that traffic will ...saved settings. 43.10 FTP You can upload and download the ZyWALL's firmware and configuration files using FTP. The screen appears as shown. Zone Address Action Apply Reset The entry with which zones FTP can access the ZyWALL zone(s) configured in the Zone field (Accept) or not (Deny...
User Guide
Page 693
...a .conf extension and shell scripts use a .zysh extension. 45.1.1 What You Can Do in a text editor and upload them . ZyWALL USG 20/20W User's Guide 693 You can edit configuration files or shell scripts in this Chapter • Use the Configuration File screen (see Section 45.4...can also download configuration files from the ZyWALL to your computer and upload configuration files from your computer to the ZyWALL. • Use the Firmware Package screen (see Section 45.3 on page 700) to check your current firmware version and upload firmware to the ZyWALL. • Use the Shell Script ...
...a .conf extension and shell scripts use a .zysh extension. 45.1.1 What You Can Do in a text editor and upload them . ZyWALL USG 20/20W User's Guide 693 You can edit configuration files or shell scripts in this Chapter • Use the Configuration File screen (see Section 45.4...can also download configuration files from the ZyWALL to your computer and upload configuration files from your computer to the ZyWALL. • Use the Firmware Package screen (see Section 45.3 on page 700) to check your current firmware version and upload firmware to the ZyWALL. • Use the Shell Script ...
User Guide
Page 700
... and upload firmware to the configuration file when you upload startup-config.conf, it . The system-default.conf file contains the ZyWALL's default settings. The ZyWALL applies configuration changes made via commands when you want to a valid configuration. This column displays the size (in the Web Configurator to the ZyWALL. 700 ZyWALL USG 20/20W User's Guide...
... and upload firmware to the configuration file when you upload startup-config.conf, it . The system-default.conf file contains the ZyWALL's default settings. The ZyWALL applies configuration changes made via commands when you want to a valid configuration. This column displays the size (in the Web Configurator to the ZyWALL. 700 ZyWALL USG 20/20W User's Guide...
User Guide
Page 701
... can upload them. Released Date File Path Browse... Figure 421 Firmware Upload In Process ZyWALL USG 20/20W User's Guide 701 See the CLI Reference Guide for how to determine if you want to upload. to begin the upload process. Click Browse... Click ... location of the file you can take up to recover it . Find the firmware package at www.zyxel.com in this field or click Browse ... You only need to use the command line interface if you see the Firmware Upload in Process screen, wait two minutes before you want to upload in this...
... can upload them. Released Date File Path Browse... Figure 421 Firmware Upload In Process ZyWALL USG 20/20W User's Guide 701 See the CLI Reference Guide for how to determine if you want to upload. to begin the upload process. Click Browse... Click ... location of the file you can take up to recover it . Find the firmware package at www.zyxel.com in this field or click Browse ... You only need to use the command line interface if you see the Firmware Upload in Process screen, wait two minutes before you want to upload in this...
User Guide
Page 702
...following message appears in the HOME screen. Figure 423 Firmware Upload Error 45.4 The Shell Script Screen Use shell script files to create the shell script files. Use a text editor to have the ZyWALL use multiple write commands in again and check your ...that you do not use a ".zysh" filename extension. Figure 424 Maintenance > File Manager > Shell Script 702 ZyWALL USG 20/20W User's Guide Chapter 45 File Manager Note: The ZyWALL automatically reboots after a successful upload. Figure 422 Network Temporarily Disconnected After five minutes, log in a long script. ...
...following message appears in the HOME screen. Figure 423 Firmware Upload Error 45.4 The Shell Script Screen Use shell script files to create the shell script files. Use a text editor to have the ZyWALL use multiple write commands in again and check your ...that you do not use a ".zysh" filename extension. Figure 424 Maintenance > File Manager > Shell Script 702 ZyWALL USG 20/20W User's Guide Chapter 45 File Manager Note: The ZyWALL automatically reboots after a successful upload. Figure 422 Network Temporarily Disconnected After five minutes, log in a long script. ...
User Guide
Page 725
Figure 448 Maintenance > Shutdown Click the Shutdown button to shut down the ZyWALL. Always use the CLI command shutdown to start and stop the ZyWALL. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the ...command before you turn off the ZyWALL or remove the power. You can cause the firmware to become corrupt. 49.1.1 What You Need To Know Shutdown writes all cached data to shutdown the device in preparation for information on different ways to shutdown the ZyWALL. ZyWALL USG 20/20W User's Guide 725 See also ...
Figure 448 Maintenance > Shutdown Click the Shutdown button to shut down the ZyWALL. Always use the CLI command shutdown to start and stop the ZyWALL. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the ...command before you turn off the ZyWALL or remove the power. You can cause the firmware to become corrupt. 49.1.1 What You Need To Know Shutdown writes all cached data to shutdown the device in preparation for information on different ways to shutdown the ZyWALL. ZyWALL USG 20/20W User's Guide 725 See also ...