User Guide
Page 3
... the Web Configurator. Related Documentation • Quick Start Guide The Quick Start Guide is designed to show you require. ZyWALL USG 20/20W User's Guide 3 Read each chapter carefully for information on configuring each screen.) It also contains a connection diagram and package contents list. • ...69 if you're using the quick setup wizards and you cannot find specific information in the Web Configurator. E-mail techwriters@zyxel.com.tw if you want to configure the ZyWALL. How To Use This Guide • Read Chapter 1 on page 29 chapter for an overview of Contents, the Index...
... the Web Configurator. Related Documentation • Quick Start Guide The Quick Start Guide is designed to show you require. ZyWALL USG 20/20W User's Guide 3 Read each chapter carefully for information on configuring each screen.) It also contains a connection diagram and package contents list. • ...69 if you're using the quick setup wizards and you cannot find specific information in the Web Configurator. E-mail techwriters@zyxel.com.tw if you want to configure the ZyWALL. How To Use This Guide • Read Chapter 1 on page 29 chapter for an overview of Contents, the Index...
User Guide
Page 4
...a collection of answers to use your product. • Knowledge Base If you have a specific question about ZyXEL products. 4 ZyWALL USG 20/20W User's Guide Thank you . The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. About This User's... configuring that screen and supplementary information. • ZyXEL Web Site Please refer to the following address, or use e-mail instead. E-mail: techwriters@zyxel.com.tw Need More Help? This is available at www.zyxel.com. • Download Library Search for the ...
...a collection of answers to use your product. • Knowledge Base If you have a specific question about ZyXEL products. 4 ZyWALL USG 20/20W User's Guide Thank you . The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. About This User's... configuring that screen and supplementary information. • ZyXEL Web Site Please refer to the following address, or use e-mail instead. E-mail: techwriters@zyxel.com.tw Need More Help? This is available at www.zyxel.com. • Download Library Search for the ...
User Guide
Page 5
... in which you installed updated firmware/software for contact information. Disclaimer Graphics in this book may differ slightly from others who use ZyXEL products and share your vendor. ZyWALL USG 20/20W User's Guide 5 Every effort has been made to ensure that you received your device. Please have the following information ready when you...
... in which you installed updated firmware/software for contact information. Disclaimer Graphics in this book may differ slightly from others who use ZyXEL products and share your vendor. ZyWALL USG 20/20W User's Guide 5 Every effort has been made to ensure that you received your device. Please have the following information ready when you...
User Guide
Page 150
... Client Utility This example covers how to configure ZyXEL's wireless client utility (not included with the ZyWALL) to use Funk Odyssey's wireless client software if you want the wireless client to validate the ZyWALL's certificate (for how to a rogue AP). 150 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Turn on page 154 instead for added...
... Client Utility This example covers how to configure ZyXEL's wireless client utility (not included with the ZyWALL) to use Funk Odyssey's wireless client software if you want the wireless client to validate the ZyWALL's certificate (for how to a rogue AP). 150 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Turn on page 154 instead for added...
User Guide
Page 151
It is also the SSID (name) of the wireless network. Select Infrastructure and click Next. 1 Open the wireless client utility and click Profile. Figure 109 ZyXEL Wireless Client > Profile ZyWALL USG 20/20W User's Guide 151 Figure 108 ZyXEL Wireless Client Chapter 7 Tutorials 2 Add a new profile. This example uses "ZYXEL_WPA" as the name.
It is also the SSID (name) of the wireless network. Select Infrastructure and click Next. 1 Open the wireless client utility and click Profile. Figure 109 ZyXEL Wireless Client > Profile ZyWALL USG 20/20W User's Guide 151 Figure 108 ZyXEL Wireless Client Chapter 7 Tutorials 2 Add a new profile. This example uses "ZYXEL_WPA" as the name.
User Guide
Page 152
Click Next. Configure wlan_user as the security type and click Next. Figure 111 ZyXEL Wireless Client > Profile: Security Settings 152 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Select WPA2 as the Login Name and enter the account's password (also wlan_user in this example. In TTLS Protocol, select PAP. Figure 110 ZyXEL Wireless Client > Profile: Security Type 4 Set the encryption type to TKIP and the EAP type to TTLS.
Click Next. Configure wlan_user as the security type and click Next. Figure 111 ZyXEL Wireless Client > Profile: Security Settings 152 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 3 Select WPA2 as the Login Name and enter the account's password (also wlan_user in this example. In TTLS Protocol, select PAP. Figure 110 ZyXEL Wireless Client > Profile: Security Type 4 Set the encryption type to TKIP and the EAP type to TTLS.
User Guide
Page 153
Figure 113 ZyXEL Wireless Client > Profile: Activate ZyWALL USG 20/20W User's Guide 153 5 Confirm your settings and click Save. Figure 112 ZyXEL Wireless Client > Profile: Save Chapter 7 Tutorials 6 Click Activate Now.
Figure 113 ZyXEL Wireless Client > Profile: Activate ZyWALL USG 20/20W User's Guide 153 5 Confirm your settings and click Save. Figure 112 ZyXEL Wireless Client > Profile: Save Chapter 7 Tutorials 6 Click Activate Now.
User Guide
Page 154
...ZyXEL utility does not have the wireless client validate the ZyWALL's certificate, you can go to Section 7.13.3.4 on page 162. 7.13.3.2 Configure the Funk Odyssey Wireless Client This example shows how to configure Funk's Odyssey Access Client Manager wireless client software (not included with the ZyWALL...) to use the WLAN interface. 1 Open the Odyssey wireless client software and click Profiles > Add. Figure 115 Odyssey Access Client Manager > Profiles 154 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 7 The ZYXEL_WPA ...
...ZyXEL utility does not have the wireless client validate the ZyWALL's certificate, you can go to Section 7.13.3.4 on page 162. 7.13.3.2 Configure the Funk Odyssey Wireless Client This example shows how to configure Funk's Odyssey Access Client Manager wireless client software (not included with the ZyWALL...) to use the WLAN interface. 1 Open the Odyssey wireless client software and click Profiles > Add. Figure 115 Odyssey Access Client Manager > Profiles 154 ZyWALL USG 20/20W User's Guide Chapter 7 Tutorials 7 The ZYXEL_WPA ...
User Guide
Page 211
myZyXEL.com myZyXEL.com is ZyXEL's online services center where you can register your ZyWALL and manage subscription services available for details. To update signature files or use a subscription service, you can directly create a myZyXEL.com account, register your ZyWALL and activate a service using the Registration... Chapter • Use the Registration screen (see Section 10.2 on page 212) to register your ZyWALL with the ZyWALL's serial number and LAN MAC address to register it. ZyWALL USG 20/20W User's Guide 211 Note: To activate a service on page 214) to display the status of...
myZyXEL.com myZyXEL.com is ZyXEL's online services center where you can register your ZyWALL and manage subscription services available for details. To update signature files or use a subscription service, you can directly create a myZyXEL.com account, register your ZyWALL and activate a service using the Registration... Chapter • Use the Registration screen (see Section 10.2 on page 212) to register your ZyWALL with the ZyWALL's serial number and LAN MAC address to register it. ZyWALL USG 20/20W User's Guide 211 Note: To activate a service on page 214) to display the status of...
User Guide
Page 433
...You can specify up to two domain names so you would just use "zyxel.com". ZyWALL USG 20/20W User's Guide 433 Chapter 24 SSL VPN 24.3 The SSL Global Setting...Network Extension Local IP SSL VPN Login Domain Name SSL VPN Login Domain Name 1/2 Specify the IP address of the ZyWALL (or a gateway device) on the remote user screen. Specify a domain name for full tunnel mode access, ...login. Use this field to set the IP address of the ZyWALL (or a gateway device) for logging into the Web Configurator. For example, www.zyxel.com is a fully qualified domain name where "www" is the host;...
...You can specify up to two domain names so you would just use "zyxel.com". ZyWALL USG 20/20W User's Guide 433 Chapter 24 SSL VPN 24.3 The SSL Global Setting...Network Extension Local IP SSL VPN Login Domain Name SSL VPN Login Domain Name 1/2 Specify the IP address of the ZyWALL (or a gateway device) on the remote user screen. Specify a domain name for full tunnel mode access, ...login. Use this field to set the IP address of the ZyWALL (or a gateway device) for logging into the Web Configurator. For example, www.zyxel.com is a fully qualified domain name where "www" is the host;...
User Guide
Page 434
... 24 SSL VPN Table 124 VPN > SSL VPN > Global Setting (continued) LABEL DESCRIPTION Message Login Message Specify a message to display the ZyXEL company logo on the remote user's web browser. Transparent background is the default logo. Click Browse to locate the graphic file on your computer... graphic file from your computer. Update Client Virtual Desktop Logo You can enter up to verify that the new logo displays properly. 434 ZyWALL USG 20/20W User's Guide Specify the location and file name of 127 x 57 pixels to 127 x 57 pixels. Logout Message Specify a message ...
... 24 SSL VPN Table 124 VPN > SSL VPN > Global Setting (continued) LABEL DESCRIPTION Message Login Message Specify a message to display the ZyXEL company logo on the remote user's web browser. Transparent background is the default logo. Click Browse to locate the graphic file on your computer... graphic file from your computer. Update Client Virtual Desktop Logo You can enter up to verify that the new logo displays properly. 434 ZyWALL USG 20/20W User's Guide Specify the location and file name of 127 x 57 pixels to 127 x 57 pixels. Logout Message Specify a message ...
User Guide
Page 452
... to disconnect the SSL VPN tunnel. 27.6 Uninstalling the ZyWALL SecuExtender Do the following if you need to remove the ZyWALL SecuExtender. 1 Click start > All Programs > ZyXEL > ZyWALL SecuExtender > Uninstall. 2 In the confirmation screen, click Yes. Figure 276 Uninstalling the ZyWALL SecuExtender Confirmation 3 Windows uninstalls the ZyWALL SecuExtender. Figure 277 ZyWALL SecuExtender Uninstallation 452 ZyWALL USG 20/20W User's Guide
... to disconnect the SSL VPN tunnel. 27.6 Uninstalling the ZyWALL SecuExtender Do the following if you need to remove the ZyWALL SecuExtender. 1 Click start > All Programs > ZyXEL > ZyWALL SecuExtender > Uninstall. 2 In the confirmation screen, click Yes. Figure 276 Uninstalling the ZyWALL SecuExtender Confirmation 3 Windows uninstalls the ZyWALL SecuExtender. Figure 277 ZyWALL SecuExtender Uninstallation 452 ZyWALL USG 20/20W User's Guide
User Guide
Page 488
... to block. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is www.zyxel.com.tw. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is news/pressroom.php. 488 ZyWALL USG 20/20W User's Guide Some requests may not match any policy.... The ZyWALL blocks the request if the default policy is the...
... to block. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is www.zyxel.com.tw. For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is news/pressroom.php. 488 ZyWALL USG 20/20W User's Guide Some requests may not match any policy.... The ZyWALL blocks the request if the default policy is the...
User Guide
Page 489
...Content Filter General Screen Click Configuration > Anti-X > Content Filter > General to enable content filtering, view and order ZyWALL USG 20/20W User's Guide 489 For example, with the URL www.zyxel.com.tw/news/pressroom.php, the ZyWALL would find items that go across the two. Chapter 30 Content Filtering Since the... ZyWALL checks the URL's domain name (or IP address) and file path separately, it would not find...
...Content Filter General Screen Click Configuration > Anti-X > Content Filter > General to enable content filtering, view and order ZyWALL USG 20/20W User's Guide 489 For example, with the URL www.zyxel.com.tw/news/pressroom.php, the ZyWALL would find items that go across the two. Chapter 30 Content Filtering Since the... ZyWALL checks the URL's domain name (or IP address) and file path separately, it would not find...
User Guide
Page 510
... Select an entry and click this text field. Do not enter the complete URL of the site - For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", and so on a computer's hard drive. Sites that you want to block access to, regardless of their content rating...this list. These are allowed. You can be allowed by adding them to track usage and provide service based on the WAN it . 510 ZyWALL USG 20/20W User's Guide When a proxy server is located on ID. The casing does not matter. Java is a tool for building dynamic and active web...
... Select an entry and click this text field. Do not enter the complete URL of the site - For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", and so on a computer's hard drive. Sites that you want to block access to, regardless of their content rating...this list. These are allowed. You can be allowed by adding them to track usage and provide service based on the WAN it . 510 ZyWALL USG 20/20W User's Guide When a proxy server is located on ID. The casing does not matter. Java is a tool for building dynamic and active web...
User Guide
Page 515
You can change the descriptive name for your ZyWALL's model name and/or MAC address under Registered ZyXEL Products (the ZyWALL 70 is shown as an example here). Figure 304 myZyXEL.com: Welcome ZyWALL USG 20/20W User's Guide 515 Click your ZyWALL using the Rename button in the Service Management screen (see Figure 305 on page 516). Chapter 31 Content Filter Reports 3 A welcome screen displays.
You can change the descriptive name for your ZyWALL's model name and/or MAC address under Registered ZyXEL Products (the ZyWALL 70 is shown as an example here). Figure 304 myZyXEL.com: Welcome ZyWALL USG 20/20W User's Guide 515 Click your ZyWALL using the Rename button in the Service Management screen (see Figure 305 on page 516). Chapter 31 Content Filter Reports 3 A welcome screen displays.
User Guide
Page 543
...-users • operator • sync • admin • any • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd To access this screen, go to be alphabetical (A-Z a-z), an.../Group • - [dashes] The first character must be different than user group names. • Here are case-sensitive. Figure 320 Configuration > User/Group > User > Add ZyWALL USG 20/20W User's Guide 543
...-users • operator • sync • admin • any • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd To access this screen, go to be alphabetical (A-Z a-z), an.../Group • - [dashes] The first character must be different than user group names. • Here are case-sensitive. Figure 320 Configuration > User/Group > User > Add ZyWALL USG 20/20W User's Guide 543
User Guide
Page 577
... Address This is the address of AD or LDAP servers the ZyWALL can modify the entry's settings. For example, o=ZyXEL, c=US. 37.2.1 Adding an Active Directory or LDAP Server Click Object > AAA Server > Active Directory (or LDAP) to display the ZyWALL USG 20/20W User's Guide 577 Click the Add icon or an Edit icon...
... Address This is the address of AD or LDAP servers the ZyWALL can modify the entry's settings. For example, o=ZyXEL, c=US. 37.2.1 Adding an Active Directory or LDAP Server Click Object > AAA Server > Active Directory (or LDAP) to display the ZyWALL USG 20/20W User's Guide 577 Click the Add icon or an Edit icon...
User Guide
Page 579
... from the server specified above to identify groups based on these group identifier values. For example, o=ZyXEL, c=US. For example "name" or "e-mail address". The value for the ZyWALL to bind (or log in the AD or LDAP server(s) or the AD or LDAP server(s) is correct. One ...the attribute that the users can use to which group a user belongs. it here. Enter the account's user name in authenticating users. ZyWALL USG 20/20W User's Guide 579 Click Cancel to discard the changes. 37.3 RADIUS Server Summary Use the RADIUS screen to manage the list of identifier that...
... from the server specified above to identify groups based on these group identifier values. For example, o=ZyXEL, c=US. For example "name" or "e-mail address". The value for the ZyWALL to bind (or log in the AD or LDAP server(s) or the AD or LDAP server(s) is correct. One ...the attribute that the users can use to which group a user belongs. it here. Enter the account's user name in authenticating users. ZyWALL USG 20/20W User's Guide 579 Click Cancel to discard the changes. 37.3 RADIUS Server Summary Use the RADIUS screen to manage the list of identifier that...
User Guide
Page 890
... and trade secret law, and by ZyXEL. Copyright The Software and Documentation contain material that is a violation of users specified in full force and effect. Appendix E Open Software Announcements End-User License Agreement for "ZyWALL USG 20W" WARNING: ZyXEL Communications Corp. IF YOU DO NOT AGREE... TO THESE TERMS, THEN ZyXEL IS UNWILLING TO LICENSE THE SOFTWARE TO YOU, IN WHICH EVENT YOU SHOULD RETURN THE UNINSTALLED...
... and trade secret law, and by ZyXEL. Copyright The Software and Documentation contain material that is a violation of users specified in full force and effect. Appendix E Open Software Announcements End-User License Agreement for "ZyWALL USG 20W" WARNING: ZyXEL Communications Corp. IF YOU DO NOT AGREE... TO THESE TERMS, THEN ZyXEL IS UNWILLING TO LICENSE THE SOFTWARE TO YOU, IN WHICH EVENT YOU SHOULD RETURN THE UNINSTALLED...