User Guide
Page 5
About This User's Guide See http://www.zyxel.com/web/contact_us.php for your device. • Brief description of the problem and the steps you received your device. ZyWALL USG 300 User's Guide 5 Please have the following information ready when you contact an office. •...; Product model and serial number. • Warranty Information. • Date that the information in operating systems, operating system versions, or if you installed updated firmware/...
About This User's Guide See http://www.zyxel.com/web/contact_us.php for your device. • Brief description of the problem and the steps you received your device. ZyWALL USG 300 User's Guide 5 Please have the following information ready when you contact an office. •...; Product model and serial number. • Warranty Information. • Date that the information in operating systems, operating system versions, or if you installed updated firmware/...
User Guide
Page 231
Chapter 9 Dashboard Table 22 Dashboard (continued) LABEL DESCRIPTION Boot Status This field displays details about the ZyWALL's startup state. OK - Firmware update OK - The ZyWALL was unable to apply the lastgood.conf configuration file and fell back to the lastgood.conf configuration file. ...ZyWALL IP has detected. Virus ID This is the entry's rank in the list of the most commonly detected viruses. Source IP This is the entry's rank in the list of validity. Top 5 Intrusions # This is the source IP address of the anti-virus signature. ZyWALL USG 300...
Chapter 9 Dashboard Table 22 Dashboard (continued) LABEL DESCRIPTION Boot Status This field displays details about the ZyWALL's startup state. OK - Firmware update OK - The ZyWALL was unable to apply the lastgood.conf configuration file and fell back to the lastgood.conf configuration file. ...ZyWALL IP has detected. Virus ID This is the entry's rank in the list of the most commonly detected viruses. Source IP This is the entry's rank in the list of validity. Top 5 Intrusions # This is the source IP address of the anti-virus signature. ZyWALL USG 300...
User Guide
Page 290
... Version Upgrading the ZyWALL to firmware version 2.11 and updating the antivirus signatures automatically upgrades the ZyXEL anti-virus engine to signature update e-mail notifications. This number is . v2.0 has more virus signatures and offers improved nonexecutable file scan throughput. This field displays the number of signatures in this set was released. 290 ZyWALL USG 300 User's Guide...
... Version Upgrading the ZyWALL to firmware version 2.11 and updating the antivirus signatures automatically upgrades the ZyXEL anti-virus engine to signature update e-mail notifications. This number is . v2.0 has more virus signatures and offers improved nonexecutable file scan throughput. This field displays the number of signatures in this set was released. 290 ZyWALL USG 300 User's Guide...
User Guide
Page 590
...the service or only have the trial registration. Current Version Signature Number Released Date Update Signatures Apply Reset Upgrading the ZyWALL to firmware version 2.11 and updating the antivirus signatures automatically upgrades the ZyXEL anti-virus engine to save your changes. Apply new Registration This link appears if... you can use ZyXEL's anti-virus Engine Type engine or the one powered by Kaspersky. Click Reset to return the screen to traffic using TCP port 25. FTP applies to traffic using . HTTP applies to its last-saved settings. 590 ZyWALL USG 300 User's Guide v2.0...
...the service or only have the trial registration. Current Version Signature Number Released Date Update Signatures Apply Reset Upgrading the ZyWALL to firmware version 2.11 and updating the antivirus signatures automatically upgrades the ZyXEL anti-virus engine to save your changes. Apply new Registration This link appears if... you can use ZyXEL's anti-virus Engine Type engine or the one powered by Kaspersky. Click Reset to return the screen to traffic using TCP port 25. FTP applies to traffic using . HTTP applies to its last-saved settings. 590 ZyWALL USG 300 User's Guide v2.0...
User Guide
Page 637
... on or off and apply anomaly profiles to traffic directions. • Use Anti-X > ADP > Profile (Section 35.3 on page 640) to a traffic direction. ZyWALL USG 300 User's Guide 637 CHAPTER 35 ADP 35.1 Overview This chapter introduces ADP (Anomaly Detection and Prevention), anomaly profiles and applying an ADP profile to add...see Chapter 34 on page 601 for abnormal behavior or events such as port scanning, sweeping or network flooding. Traffic anomaly rules may be updated when you upload new firmware. ADP protects against abnormal behavior while IDP packet inspection signatures are...
... on or off and apply anomaly profiles to traffic directions. • Use Anti-X > ADP > Profile (Section 35.3 on page 640) to a traffic direction. ZyWALL USG 300 User's Guide 637 CHAPTER 35 ADP 35.1 Overview This chapter introduces ADP (Anomaly Detection and Prevention), anomaly profiles and applying an ADP profile to add...see Chapter 34 on page 601 for abnormal behavior or events such as port scanning, sweeping or network flooding. Traffic anomaly rules may be updated when you upload new firmware. ADP protects against abnormal behavior while IDP packet inspection signatures are...
User Guide
Page 638
....1.2 on page 601 for IDP-related term definitions. • See Section 35.4 on page 649 for more information. 638 ZyWALL USG 300 User's Guide Protocol anomaly rules may be updated when you upload new firmware. Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder and ICMP Decoder. ADP Policy An ADP policy refers to...
....1.2 on page 601 for IDP-related term definitions. • See Section 35.4 on page 649 for more information. 638 ZyWALL USG 300 User's Guide Protocol anomaly rules may be updated when you upload new firmware. Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder and ICMP Decoder. ADP Policy An ADP policy refers to...
User Guide
Page 645
...firmware. 35.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon and choose a base profile, then select the Protocol Anomaly tab. OK Click OK to save the configuration to complete the profile. You may be updated... when you can set the number of the traffic anomaly rule. Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder, and ICMP Decoder where each category reflects the packet type inspected. ZyWALL USG 300 User's Guide 645 Click the ...
...firmware. 35.3.6 Protocol Anomaly Configuration In the Configuration > Anti-X > ADP > Profile screen, click the Edit icon or click the Add icon and choose a base profile, then select the Protocol Anomaly tab. OK Click OK to save the configuration to complete the profile. You may be updated... when you can set the number of the traffic anomaly rule. Protocol anomaly detection includes HTTP Inspection, TCP Decoder, UDP Decoder, and ICMP Decoder where each category reflects the packet type inspected. ZyWALL USG 300 User's Guide 645 Click the ...
User Guide
Page 710
...each interface. The management IP address should be set to use it with the master ZyWALL. • Synchronization includes updates for device HA background/technical information. • See Section 7.15 on the backup (by editing ...ZyWALLs must manually configure the master ZyWALL's settings on page 177 for an example of the configuration files in the same subnet as the master ZyWALL for example). Synchronization Use synchronization to which the master and backup ZyWALLs are both subscribed. For example, a backup subscribed to the same services. 710 ZyWALL USG 300...
...each interface. The management IP address should be set to use it with the master ZyWALL. • Synchronization includes updates for device HA background/technical information. • See Section 7.15 on the backup (by editing ...ZyWALLs must manually configure the master ZyWALL's settings on page 177 for an example of the configuration files in the same subnet as the master ZyWALL for example). Synchronization Use synchronization to which the master and backup ZyWALLs are both subscribed. For example, a backup subscribed to the same services. 710 ZyWALL USG 300...
User Guide
Page 901
The firmware update can take up to five minutes. Find the firmware package at www.zyxel.com in this field or click Browse ... You can upload them. to find the .bin file you need to use the command line interface if you want to upload in this screen. Click Browse... ZyWALL USG 300 User's Guide 901 You only...
The firmware update can take up to five minutes. Find the firmware package at www.zyxel.com in this field or click Browse ... You can upload them. to find the .bin file you need to use the command line interface if you want to upload in this screen. Click Browse... ZyWALL USG 300 User's Guide 901 You only...
User Guide
Page 931
...of policy routes to a specific service but a few packet's still get through the ZyWALL. The ZyWALL automatically updates address objects based on the interface. I changed the LAN IP address and can upload the firmware package to the ZyWALL with the option enabled, so you only need to go through the firewall, regardless of... are not based on an interface's IP address, subnet, or gateway if the interface's IP address settings change. Chapter 56 Troubleshooting option. The ZyWALL allows the first eight packets to identify the application. ZyWALL USG 300 User's Guide 931
...of policy routes to a specific service but a few packet's still get through the ZyWALL. The ZyWALL automatically updates address objects based on the interface. I changed the LAN IP address and can upload the firmware package to the ZyWALL with the option enabled, so you only need to go through the firewall, regardless of... are not based on an interface's IP address, subnet, or gateway if the interface's IP address settings change. Chapter 56 Troubleshooting option. The ZyWALL allows the first eight packets to identify the application. ZyWALL USG 300 User's Guide 931
User Guide
Page 933
... the ZyWALL. Only ZyWALLs of the same model and firmware version can synchronize. It is highly recommended to subscribe the master and backup ZyWALLs to a user group. Make sure the ZyWALL's current date and time are both subscribed. I cannot add the admin users to a user group with the master ZyWALL. ZyWALL USG 300 User's Guide 933 Synchronization includes updates for...
... the ZyWALL. Only ZyWALLs of the same model and firmware version can synchronize. It is highly recommended to subscribe the master and backup ZyWALLs to a user group. Make sure the ZyWALL's current date and time are both subscribed. I cannot add the admin users to a user group with the master ZyWALL. ZyWALL USG 300 User's Guide 933 Synchronization includes updates for...
User Guide
Page 990
... on the Backup cannot be resolved to check if it is %s. Master firmware version can not be recognized. Backup firmware version can not be recognized. Updating a certain object failed when updating (AS/AV/IDP/ Certificate/System Configuration). 1st %s: The object to be...ZyWALL USG 300 User's Guide Synchronization failed when synchronizing a certain object (AV/AS/IDP/Certificate/System Configuration) due to an unknown reason, 1st %s: The object to be synchronized, 2ed %s: The feature name for the object to be synchronized. Stop syncing from the Master if the firmware...
... on the Backup cannot be resolved to check if it is %s. Master firmware version can not be recognized. Backup firmware version can not be recognized. Updating a certain object failed when updating (AS/AV/IDP/ Certificate/System Configuration). 1st %s: The object to be...ZyWALL USG 300 User's Guide Synchronization failed when synchronizing a certain object (AV/AS/IDP/Certificate/System Configuration) due to an unknown reason, 1st %s: The object to be synchronized, 2ed %s: The feature name for the object to be synchronized. Stop syncing from the Master if the firmware...
User Guide
Page 1124
... negatives 642 false positives 642 inline profile 642 monitor profile 642 port scanning 649 prerequisites 110 protocol anomaly 638 signatures 293 traffic anomaly 638, 642 updating signatures 293 Advanced Encryption Standard, see AES AES 505, 1055 AF 391 AH 483, 510 and transport mode 511 alerts 880, 883, 884, 887, 889... black list 592, 594 boot sector virus 599 configuration overview 110 EICAR 589 e-mail virus 599 engines 586 file decompression 592 file infector virus 599 firmware package blocking 593 log options 592 macro virus 599 packet scan 586, 1013, 1015 ZyWALL USG 300 User's Guide
... negatives 642 false positives 642 inline profile 642 monitor profile 642 port scanning 649 prerequisites 110 protocol anomaly 638 signatures 293 traffic anomaly 638, 642 updating signatures 293 Advanced Encryption Standard, see AES AES 505, 1055 AF 391 AH 483, 510 and transport mode 511 alerts 880, 883, 884, 887, 889... black list 592, 594 boot sector virus 599 configuration overview 110 EICAR 589 e-mail virus 599 engines 586 file decompression 592 file infector virus 599 firmware package blocking 593 log options 592 macro virus 599 packet scan 586, 1013, 1015 ZyWALL USG 300 User's Guide
User Guide
Page 1131
...file manager 893 configuration overview 114 file sharing troubleshooting 930, 934 file sharing SSL application 807 create 812 filter, MAC address 339 ZyWALL USG 300 User's Guide Index filtered port scan 650 Firefox 47 firewall 457, 458 actions 470 and address groups 454, 470 and address..., 467 troubleshooting 921 vs application patrol 457, 460 firmware and restart 901 boot module, see boot module current version 228, 901 getting updated 901 uploading 900, 901 uploading with FTP 864 firmware package troubleshooting 930 firmware upload troubleshooting 936 flags 619 flash usage 228 flood detection...
...file manager 893 configuration overview 114 file sharing troubleshooting 930, 934 file sharing SSL application 807 create 812 filter, MAC address 339 ZyWALL USG 300 User's Guide Index filtered port scan 650 Firefox 47 firewall 457, 458 actions 470 and address groups 454, 470 and address..., 467 troubleshooting 921 vs application patrol 457, 460 firmware and restart 901 boot module, see boot module current version 228, 901 getting updated 901 uploading 900, 901 uploading with FTP 864 firmware package troubleshooting 930 firmware upload troubleshooting 936 flags 619 flash usage 228 flood detection...
User Guide
Page 1145
... NAT traversal (VPN) 928 and remote management 459 and service control 840 and VPN 928 and VRRP groups 719 global rules 459 token 766 ZyWALL USG 300 User's Guide Index trademarks 1119 traffic anomaly 638, 642 traffic statistics 247 Transmission Control Protocol, see TCP transport encapsulation 483 Transport Layer Security (... access 919 device HA 932, 933 ext-user 932 file sharing 930, 934 firewall 921 firmware package 930 firmware upload 936 FTP 927 H.323 927 HTTP redirect 926 IDP 921, 925 IDP signatures update 920 interface 921 Internet access 920, 931 IPSec VPN 927 L2TP VPN 929 LEDs 919 logo...
... NAT traversal (VPN) 928 and remote management 459 and service control 840 and VPN 928 and VRRP groups 719 global rules 459 token 766 ZyWALL USG 300 User's Guide Index trademarks 1119 traffic anomaly 638, 642 traffic statistics 247 Transmission Control Protocol, see TCP transport encapsulation 483 Transport Layer Security (... access 919 device HA 932, 933 ext-user 932 file sharing 930, 934 firewall 921 firmware package 930 firmware upload 936 FTP 927 H.323 927 HTTP redirect 926 IDP 921, 925 IDP signatures update 920 interface 921 Internet access 920, 931 IPSec VPN 927 L2TP VPN 929 LEDs 919 logo...
User Guide
Page 1146
... 691 update configuration overview 102 prerequisites 103 updating anti-virus signatures 290 IDP and application patrol signatures 291 signatures 289 system protect signatures 293 upgrading firmware 900 licenses 288 uploading configuration files 900 firmware 900 shell... scripts 902 URI (Uniform Resource Identifier) 627 usage CPU 228, 232 flash 228 memory 228, 233 onboard flash 228 sessions 228, 234 user accounts for WLAN 125 user authentication 731 external 732 local user database 767 user awareness 733 ZyWALL USG 300...
... 691 update configuration overview 102 prerequisites 103 updating anti-virus signatures 290 IDP and application patrol signatures 291 signatures 289 system protect signatures 293 upgrading firmware 900 licenses 288 uploading configuration files 900 firmware 900 shell... scripts 902 URI (Uniform Resource Identifier) 627 usage CPU 228, 232 flash 228 memory 228, 233 onboard flash 228 sessions 228, 234 user accounts for WLAN 125 user authentication 731 external 732 local user database 767 user awareness 733 ZyWALL USG 300...