User Guide
Page 3
...E-mail techwriters@zyxel.com.tw if you require. ZyWALL USG 20/20W User's Guide 3 Note: It is recommended you use the Web Configurator to use that feature. • It is highly recommended you read Chapter 6 on page 87 for detailed information on essential terms used in the ZyWALL, what prerequisites...and an introduction to the main components, icons and menus in this guide, use the Command-Line Interface (CLI) to configure the ZyWALL. Read each screen.) It also contains a connection diagram and package contents list. • CLI Reference Guide The CLI Reference Guide explains...
...E-mail techwriters@zyxel.com.tw if you require. ZyWALL USG 20/20W User's Guide 3 Note: It is recommended you use the Web Configurator to use that feature. • It is highly recommended you read Chapter 6 on page 87 for detailed information on essential terms used in the ZyWALL, what prerequisites...and an introduction to the main components, icons and menus in this guide, use the Command-Line Interface (CLI) to configure the ZyWALL. Read each screen.) It also contains a connection diagram and package contents list. • CLI Reference Guide The CLI Reference Guide explains...
User Guide
Page 4
...Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. User Guide Feedback Help us help you have a specific question about ZyXEL products. 4 ZyWALL USG 20/20W User's Guide More help is a collection of answers to the following address, or use your product, the answer may be here....in any screen for help in order to better understand how to use e-mail instead. Thank you! This is available at www.zyxel.com. • Download Library Search for additional support documentation and product certifications. Send all User Guide-related comments, questions or suggestions...
...Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. User Guide Feedback Help us help you have a specific question about ZyXEL products. 4 ZyWALL USG 20/20W User's Guide More help is a collection of answers to the following address, or use your product, the answer may be here....in any screen for help in order to better understand how to use e-mail instead. Thank you! This is available at www.zyxel.com. • Download Library Search for additional support documentation and product certifications. Send all User Guide-related comments, questions or suggestions...
User Guide
Page 5
ZyWALL USG 20/20W User's Guide 5 Customer Support Should problems arise that cannot be solved by the methods listed above, you took to solve it. If you cannot contact ... in which you installed updated firmware/software for your vendor. See http://www.zyxel.com/web/contact_us.php for the region in this book may differ slightly from others who use ZyXEL products and share your vendor, then contact a ZyXEL office for contact information. Every effort has been made to differences in this...
ZyWALL USG 20/20W User's Guide 5 Customer Support Should problems arise that cannot be solved by the methods listed above, you took to solve it. If you cannot contact ... in which you installed updated firmware/software for your vendor. See http://www.zyxel.com/web/contact_us.php for the region in this book may differ slightly from others who use ZyXEL products and share your vendor, then contact a ZyXEL office for contact information. Every effort has been made to differences in this...
User Guide
Page 6
Note: Notes tell you may be referred to as the "ZyWALL", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this ... characters and then press the [ENTER] key. For example, Maintenance > Log > Log Setting means you or your keyboard. • "Enter" means for example, other words". 6 ZyWALL USG 20/20W User's Guide For example, "k" for kilo may denote "1000" or "1024", "M" for you to that could harm you first click Maintenance in the navigation panel...
Note: Notes tell you may be referred to as the "ZyWALL", the "device", the "system" or the "product" in this User's Guide. • Product labels, screen names, field labels and field choices are shown in this ... characters and then press the [ENTER] key. For example, Maintenance > Log > Log Setting means you or your keyboard. • "Enter" means for example, other words". 6 ZyWALL USG 20/20W User's Guide For example, "k" for kilo may denote "1000" or "1024", "M" for you to that could harm you first click Maintenance in the navigation panel...
User Guide
Page 7
The ZyWALL icon is not an exact representation of your device. ZyWALL Computer Notebook computer Server Firewall Telephone Switch Router ZyWALL USG 20/20W User's Guide 7 Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons.
The ZyWALL icon is not an exact representation of your device. ZyWALL Computer Notebook computer Server Firewall Telephone Switch Router ZyWALL USG 20/20W User's Guide 7 Document Conventions Icons Used in Figures Figures in this User's Guide may use the following generic icons.
User Guide
Page 8
... on the power adaptor or cord and do NOT place the product where anyone can expose you to order a new one will be treated separately. 8 ZyWALL USG 20/20W User's Guide Connect it to the right supply voltage (for the recycling of electric shock from the device and the power source. • Do NOT...
... on the power adaptor or cord and do NOT place the product where anyone can expose you to order a new one will be treated separately. 8 ZyWALL USG 20/20W User's Guide Connect it to the right supply voltage (for the recycling of electric shock from the device and the power source. • Do NOT...
User Guide
Page 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical... Policy ...365 Firewall ...373 IPSec VPN ...391 SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
Contents Overview Contents Overview User's Guide ...27 Introducing the ZyWALL ...29 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...107 Technical... Policy ...365 Firewall ...373 IPSec VPN ...391 SSL VPN ...427 SSL User Screens ...437 SSL User Application Screens 447 ZyWALL SecuExtender ...449 Bandwidth Management ...453 ADP ...467 Content Filtering ...487 Content Filter Reports ...513 Anti-Spam ...521 User/Group ...539 Addresses ...555 Services ...561 ZyWALL USG 20/20W User's Guide 9
User Guide
Page 10
Contents Overview Schedules ...567 AAA Server ...573 Authentication Method ...583 Certificates ...589 ISP Accounts ...611 SSL Application ...615 Endpoint Security ...621 System ...629 Log and Report ...679 File Manager ...693 Diagnostics ...705 Packet Flow Explore ...715 Reboot ...723 Shutdown ...725 Troubleshooting ...727 Product Specifications ...741 10 ZyWALL USG 20/20W User's Guide
Contents Overview Schedules ...567 AAA Server ...573 Authentication Method ...583 Certificates ...589 ISP Accounts ...611 SSL Application ...615 Endpoint Security ...621 System ...629 Log and Report ...679 File Manager ...693 Diagnostics ...705 Packet Flow Explore ...715 Reboot ...723 Shutdown ...725 Troubleshooting ...727 Product Specifications ...741 10 ZyWALL USG 20/20W User's Guide
User Guide
Page 11
...Table of Contents About This User's Guide ...3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: User's Guide 27 Chapter 1 Introducing the ZyWALL ...29 1.1 Overview and Key Default Settings 29 1.2 Wall-mounting ...29 1.3 Front Panel ...32 1.3.1 Front Panel LEDs ...32 1.4 Management Overview ...33 1.5 Starting and Stopping ... 43 3.2 Web Configurator Access ...43 3.3 Web Configurator Screens Overview 45 3.3.1 Title Bar ...46 3.3.2 Navigation Panel ...47 3.3.3 Main Window ...52 3.3.4 Tables and Lists ...54 ZyWALL USG 20/20W User's Guide 11
...Table of Contents About This User's Guide ...3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: User's Guide 27 Chapter 1 Introducing the ZyWALL ...29 1.1 Overview and Key Default Settings 29 1.2 Wall-mounting ...29 1.3 Front Panel ...32 1.3.1 Front Panel LEDs ...32 1.4 Management Overview ...33 1.5 Starting and Stopping ... 43 3.2 Web Configurator Access ...43 3.3 Web Configurator Screens Overview 45 3.3.1 Title Bar ...46 3.3.2 Navigation Panel ...47 3.3.3 Main Window ...52 3.3.4 Tables and Lists ...54 ZyWALL USG 20/20W User's Guide 11
User Guide
Page 12
..., and Physical Ports 88 6.2.1 Interface Types ...89 6.2.2 Default Interface and Zone Configuration 90 6.3 Terminology in the ZyWALL 91 6.4 Packet Flow ...91 6.4.1 Routing Table Checking Flow 92 6.4.2 NAT Table Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Phase 1 Settings 82 5.5.6 VPN Advanced Wizard - Summary 85 5.5.8 VPN Advanced Wizard - Configuration 78...
..., and Physical Ports 88 6.2.1 Interface Types ...89 6.2.2 Default Interface and Zone Configuration 90 6.3 Terminology in the ZyWALL 91 6.4 Packet Flow ...91 6.4.1 Routing Table Checking Flow 92 6.4.2 NAT Table Checking Flow 94 6.5 Feature Configuration Overview 95 12 ZyWALL USG 20/20W User's Guide Phase 1 Settings 82 5.5.6 VPN Advanced Wizard - Summary 85 5.5.8 VPN Advanced Wizard - Configuration 78...
User Guide
Page 13
... an IPSec VPN Tunnel 116 7.4.1 Set Up the VPN Gateway 117 7.4.2 Set Up the VPN Connection 118 7.4.3 Configure Security Policies for the VPN Tunnel 119 ZyWALL USG 20/20W User's Guide 13
... an IPSec VPN Tunnel 116 7.4.1 Set Up the VPN Gateway 117 7.4.2 Set Up the VPN Connection 118 7.4.3 Configure Security Policies for the VPN Tunnel 119 ZyWALL USG 20/20W User's Guide 13
User Guide
Page 14
... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
... 8.1 Overview ...165 8.1.1 What You Can Do in this Chapter 165 8.2 The Dashboard Screen ...165 8.2.1 The CPU Usage Screen 171 8.2.2 The Memory Usage Screen 172 14 ZyWALL USG 20/20W User's Guide
User Guide
Page 15
... ...214 Chapter 11 Interfaces ...217 11.1 Interface Overview ...217 11.1.1 What You Can Do in this Chapter 217 11.1.2 What You Need to Know 218 ZyWALL USG 20/20W User's Guide 15
... ...214 Chapter 11 Interfaces ...217 11.1 Interface Overview ...217 11.1.1 What You Can Do in this Chapter 217 11.1.2 What You Need to Know 218 ZyWALL USG 20/20W User's Guide 15
User Guide
Page 16
....2.1 Policy Route Edit Screen 303 13.3 IP Static Route Screen ...307 13.3.1 Static Route Add/Edit Screen 308 13.4 Policy Routing Technical Reference 309 16 ZyWALL USG 20/20W User's Guide
....2.1 Policy Route Edit Screen 303 13.3 IP Static Route Screen ...307 13.3.1 Static Route Add/Edit Screen 308 13.4 Policy Routing Technical Reference 309 16 ZyWALL USG 20/20W User's Guide
User Guide
Page 17
... 18.1 Overview ...347 18.1.1 What You Can Do in this Chapter 347 18.1.2 What You Need to Know 348 18.2 The HTTP Redirect Screen 349 ZyWALL USG 20/20W User's Guide 17
... 18.1 Overview ...347 18.1.1 What You Can Do in this Chapter 347 18.1.2 What You Need to Know 348 18.2 The HTTP Redirect Screen 349 ZyWALL USG 20/20W User's Guide 17
User Guide
Page 18
... 19.3 ALG Technical Reference 357 Chapter 20 IP/MAC Binding ...359 20.1 IP/MAC Binding Overview 359 20.1.1 What You Can Do in this Chapter 359 20.1.2 What You Need to Know 360 20.2 IP/MAC Binding Summary 360 20.2.1 IP/MAC Binding Edit 361 20.2.2 Static DHCP Edit ...362 20.3 IP/MAC Binding Exempt List 363 Chapter... Firewall Add/Edit Screen 385 22.3 The Session Limit Screen 386 22.3.1 The Session Limit Add/Edit Screen 388 Chapter 23 IPSec VPN...391 18 ZyWALL USG 20/20W User's Guide
... 19.3 ALG Technical Reference 357 Chapter 20 IP/MAC Binding ...359 20.1 IP/MAC Binding Overview 359 20.1.1 What You Can Do in this Chapter 359 20.1.2 What You Need to Know 360 20.2 IP/MAC Binding Summary 360 20.2.1 IP/MAC Binding Edit 361 20.2.2 Static DHCP Edit ...362 20.3 IP/MAC Binding Exempt List 363 Chapter... Firewall Add/Edit Screen 385 22.3 The Session Limit Screen 386 22.3.1 The Session Limit Add/Edit Screen 388 Chapter 23 IPSec VPN...391 18 ZyWALL USG 20/20W User's Guide
User Guide
Page 19
... 25.1.1 What You Need to Know 437 25.2 Remote User Login ...438 25.3 The SSL VPN User Screens 443 25.4 Bookmarking the ZyWALL 444 25.5 Logging Out of the SSL VPN User Screens 444 Chapter 26 SSL User Application Screens 447 26.1 SSL User Application Screens Overview... 447 26.2 The Application Screen 447 Chapter 27 ZyWALL SecuExtender...449 27.1 The ZyWALL SecuExtender Icon 449 27.2 Statistics ...450 27.3 View Log ...451 27.4 Suspend and Resume the Connection 451 27.5 Stop the Connection ...452 ZyWALL USG 20/20W User's Guide 19
... 25.1.1 What You Need to Know 437 25.2 Remote User Login ...438 25.3 The SSL VPN User Screens 443 25.4 Bookmarking the ZyWALL 444 25.5 Logging Out of the SSL VPN User Screens 444 Chapter 26 SSL User Application Screens 447 26.1 SSL User Application Screens Overview... 447 26.2 The Application Screen 447 Chapter 27 ZyWALL SecuExtender...449 27.1 The ZyWALL SecuExtender Icon 449 27.2 Statistics ...450 27.3 View Log ...451 27.4 Suspend and Resume the Connection 451 27.5 Stop the Connection ...452 ZyWALL USG 20/20W User's Guide 19
User Guide
Page 32
... contact your vendor. Red On The ZyWALL had an error or has failed. 32 ZyWALL USG 20/20W User's Guide Figure 1 ZyWALL Front Panel ZyWALL USG 20 ZyWALL USG 20W 1.3.1 Front Panel LEDs The following table describes the LEDs. Green On The ZyWALL is turned on page 34). Chapter 1 Introducing the ZyWALL 1.3 Front Panel This section introduces the ZyWALL's front panel. SYS Green Off The...
... contact your vendor. Red On The ZyWALL had an error or has failed. 32 ZyWALL USG 20/20W User's Guide Figure 1 ZyWALL Front Panel ZyWALL USG 20 ZyWALL USG 20W 1.3.1 Front Panel LEDs The following table describes the LEDs. Green On The ZyWALL is turned on page 34). Chapter 1 Introducing the ZyWALL 1.3 Front Panel This section introduces the ZyWALL's front panel. SYS Green Off The...
User Guide
Page 374
... Traffic that are grouped based on page 375. All other Traffic from the DMZ to any of the networks behind the than the ZyWALL) ZyWALL is dropped. (USG 20W) From ANY to ZyWALL (USG 20W) Traffic from one zone is not allowed unless it is dropped. From WAN to any (other WLAN to...LAN to DMZ, and LAN to which they apply. Here is allowed. All other Traffic from the WAN to a zone (extra-zone traffic). 374 ZyWALL USG 20/20W User's Guide From WLAN to WAN (USG 20W) Traffic from interfaces or VPN tunnels that does not match any of packets to WLAN traffic is dropped.
... Traffic that are grouped based on page 375. All other Traffic from the DMZ to any of the networks behind the than the ZyWALL) ZyWALL is dropped. (USG 20W) From ANY to ZyWALL (USG 20W) Traffic from one zone is not allowed unless it is dropped. From WAN to any (other WLAN to...LAN to DMZ, and LAN to which they apply. Here is allowed. All other Traffic from the WAN to a zone (extra-zone traffic). 374 ZyWALL USG 20/20W User's Guide From WLAN to WAN (USG 20W) Traffic from interfaces or VPN tunnels that does not match any of packets to WLAN traffic is dropped.
User Guide
Page 890
... contain material that is a violation of the Software and Documentation solely for "ZyWALL USG 20W" WARNING: ZyXEL Communications Corp. You shall not exceed the scope of the Software or Documentation. 890 ZyWALL USG 20/20W User's Guide Grant of License for Personal Use ZyXEL Communications Corp. ("ZyXEL") grants you have no ownership rights in sales order and invoice. You may...
... contain material that is a violation of the Software and Documentation solely for "ZyWALL USG 20W" WARNING: ZyXEL Communications Corp. You shall not exceed the scope of the Software or Documentation. 890 ZyWALL USG 20/20W User's Guide Grant of License for Personal Use ZyXEL Communications Corp. ("ZyXEL") grants you have no ownership rights in sales order and invoice. You may...