User Manual
Page 3
... if you're using the installation wizard for first time setup and you use the Command-Line Interface (CLI) to configure the ZyWALL. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use that menu item. • To find the information you require. ZyWALL USG 50 User's Guide 3 How To Use...
... if you're using the installation wizard for first time setup and you use the Command-Line Interface (CLI) to configure the ZyWALL. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use that menu item. • To find the information you require. ZyWALL USG 50 User's Guide 3 How To Use...
User Manual
Page 5
... Every effort has been made to solve it. Disclaimer Graphics in which you should contact your vendor, then contact a ZyXEL office for the region in this manual is accurate. If you cannot contact your vendor. About This User's Guide ...ZyXEL products and share your device. • Brief description of the problem and the steps you took to ensure that cannot be solved by the methods listed above, you bought the device. ZyWALL USG 50 User's Guide 5 Customer Support Should problems arise that the information in operating systems, operating system versions, or if you installed...
... Every effort has been made to solve it. Disclaimer Graphics in which you should contact your vendor, then contact a ZyXEL office for the region in this manual is accurate. If you cannot contact your vendor. About This User's Guide ...ZyXEL products and share your device. • Brief description of the problem and the steps you took to ensure that cannot be solved by the methods listed above, you bought the device. ZyWALL USG 50 User's Guide 5 Customer Support Should problems arise that the information in operating systems, operating system versions, or if you installed...
User Manual
Page 8
...points or other risks. Contact your device. There is marked with general waste. ONLY qualified service personnel should not be treated separately. 8 ZyWALL USG 50 User's Guide Dispose them . • Always disconnect all the connections are indoors. WEEE stands for example, in Europe). • ...Electronics and Electrical Equipment. Connect it from lightning. • CAUTION: RISK OF EXPLOSION IF BATTERY (on the device. • Do NOT install, use, or service this device during a thunderstorm. There is known as it might cause electrocution. • If the power adaptor or ...
...points or other risks. Contact your device. There is marked with general waste. ONLY qualified service personnel should not be treated separately. 8 ZyWALL USG 50 User's Guide Dispose them . • Always disconnect all the connections are indoors. WEEE stands for example, in Europe). • ...Electronics and Electrical Equipment. Connect it from lightning. • CAUTION: RISK OF EXPLOSION IF BATTERY (on the device. • Do NOT install, use, or service this device during a thunderstorm. There is known as it might cause electrocution. • If the power adaptor or ...
User Manual
Page 9
Contents Overview Contents Overview User's Guide ...29 Introducing the ZyWALL ...31 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...109 Technical Reference ...155 Dashboard ...157 Monitor ...169...357 IPSec VPN ...375 SSL VPN ...411 SSL User Screens ...421 SSL User Application Screens 431 ZyWALL SecuExtender ...433 Application Patrol ...437 Anti-Virus ...463 IDP ...479 ADP ...513 Content Filtering ...533 Content Filter Reports ...557 Anti-Spam ...565 User/Group ...583 ZyWALL USG 50 User's Guide 9
Contents Overview Contents Overview User's Guide ...29 Introducing the ZyWALL ...31 Features and Applications ...37 Web Configurator ...43 Installation Setup Wizard ...59 Quick Setup ...69 Configuration Basics ...87 Tutorials ...109 Technical Reference ...155 Dashboard ...157 Monitor ...169...357 IPSec VPN ...375 SSL VPN ...411 SSL User Screens ...421 SSL User Application Screens 431 ZyWALL SecuExtender ...433 Application Patrol ...437 Anti-Virus ...463 IDP ...479 ADP ...513 Content Filtering ...533 Content Filter Reports ...557 Anti-Spam ...565 User/Group ...583 ZyWALL USG 50 User's Guide 9
User Manual
Page 11
......3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: User's Guide 29 Chapter 1 Introducing the ZyWALL ...31 1.1 Overview and Key Default Settings 31 1.2 Rack-mounted Installation 32 1.2.1 Rack-Mounted Installation Procedure 32 1.3 Front Panel ...33 1.3.1 Front Panel LEDs ...33 1.4 Management Overview ...34 1.5 Starting and Stopping the......43 3.1 Web Configurator Requirements 43 3.2 Web Configurator Access ...43 3.3 Web Configurator Screens Overview 45 3.3.1 Title Bar ...45 3.3.2 Navigation Panel ...47 ZyWALL USG 50 User's Guide 11
......3 Document Conventions...6 Safety Warnings...8 Contents Overview ...9 Table of Contents...11 Part I: User's Guide 29 Chapter 1 Introducing the ZyWALL ...31 1.1 Overview and Key Default Settings 31 1.2 Rack-mounted Installation 32 1.2.1 Rack-Mounted Installation Procedure 32 1.3 Front Panel ...33 1.3.1 Front Panel LEDs ...33 1.4 Management Overview ...34 1.5 Starting and Stopping the......43 3.1 Web Configurator Requirements 43 3.2 Web Configurator Access ...43 3.3 Web Configurator Screens Overview 45 3.3.1 Title Bar ...45 3.3.2 Navigation Panel ...47 ZyWALL USG 50 User's Guide 11
User Manual
Page 12
... Types ...89 6.2.2 Default Interface and Zone Configuration 89 6.3 Terminology in the ZyWALL 91 12 ZyWALL USG 50 User's Guide Scenario 77 5.5.1 VPN Express Wizard - Phase 2 84 5.5.7 VPN Advanced Wizard - Table of Contents 3.3.3 Main Window ...52 3.3.4 Tables and Lists ...54 Chapter 4 Installation Setup Wizard ...59 4.1 Installation Setup Wizard Screens 59 4.1.1 Internet Access Setup - Finish 66 4.2 Device Registration...
... Types ...89 6.2.2 Default Interface and Zone Configuration 89 6.3 Terminology in the ZyWALL 91 12 ZyWALL USG 50 User's Guide Scenario 77 5.5.1 VPN Express Wizard - Phase 2 84 5.5.7 VPN Advanced Wizard - Table of Contents 3.3.3 Main Window ...52 3.3.4 Tables and Lists ...54 Chapter 4 Installation Setup Wizard ...59 4.1 Installation Setup Wizard Screens 59 4.1.1 Internet Access Setup - Finish 66 4.2 Device Registration...
User Manual
Page 32
... 1 Align one bracket with the holes on one side of the ZyWALL and secure it contains and that the position of the ZyWALL does not make the rack unstable or top-heavy. Chapter 1 Introducing the ZyWALL 1.2 Rack-mounted Installation The ZyWALL can be mounted on an EIA standard size, 19-inch rack or in the... sides and 20 cm in a wiring closet with the included bracket screws (smaller than the rack-mounting screws). 2 Attach the other equipment. Note: Failure to install the screws. Figure 1 Attaching Mounting Brackets and Screws 32 ZyWALL USG 50 User's Guide
... 1 Align one bracket with the holes on one side of the ZyWALL and secure it contains and that the position of the ZyWALL does not make the rack unstable or top-heavy. Chapter 1 Introducing the ZyWALL 1.2 Rack-mounted Installation The ZyWALL can be mounted on an EIA standard size, 19-inch rack or in the... sides and 20 cm in a wiring closet with the included bracket screws (smaller than the rack-mounting screws). 2 Attach the other equipment. Note: Failure to install the screws. Figure 1 Attaching Mounting Brackets and Screws 32 ZyWALL USG 50 User's Guide
User Manual
Page 45
... in the upper right corner. If you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next. otherwise the dashboard appears as illustrated in Figure 11 on page 45): • A - Figure 12 Title Bar ZyWALL USG 50 User's Guide 45 If you change the default password, the...
... in the upper right corner. If you click Ignore, the Installation Setup Wizard opens if the ZyWALL is divided into these parts (as shown next. otherwise the dashboard appears as illustrated in Figure 11 on page 45): • A - Figure 12 Title Bar ZyWALL USG 50 User's Guide 45 If you change the default password, the...
User Manual
Page 49
...installed 3G card. Static Route Create and manage IP static routing information. DDNS Profile Define and manage the ZyWALL's DDNS domain names. Policy Define rules to each supported interface. Session Limit Limit the number of IP addresses to set the ZyWALL's flexible ports as LAN1 or DMZ. ZyWALL USG 50... to all connections. OSPF Configure device-level OSPF settings, including areas and virtual links. Global Setting Configure the ZyWALL's SSL VPN settings that apply to define various policies. Chapter 3 Web Configurator Table 7 Configuration Menu Screens Summary...
...installed 3G card. Static Route Create and manage IP static routing information. DDNS Profile Define and manage the ZyWALL's DDNS domain names. Policy Define rules to each supported interface. Session Limit Limit the number of IP addresses to set the ZyWALL's flexible ports as LAN1 or DMZ. ZyWALL USG 50... to all connections. OSPF Configure device-level OSPF settings, including areas and virtual links. Global Setting Configure the ZyWALL's SSL VPN settings that apply to define various policies. Chapter 3 Web Configurator Table 7 Configuration Menu Screens Summary...
User Manual
Page 59
... and activate subscription services. This wizard helps you log into the Web Configurator when the ZyWALL is using its default configuration, the first Installation Setup Wizard screen displays. ZyWALL USG 50 User's Guide 59 See the feature-specific chapters in the upper right corner to display ...or hide the help. • Click Go to Dashboard to skip the installation setup wizard or click Next to...
... and activate subscription services. This wizard helps you log into the Web Configurator when the ZyWALL is using its default configuration, the first Installation Setup Wizard screen displays. ZyWALL USG 50 User's Guide 59 See the feature-specific chapters in the upper right corner to display ...or hide the help. • Click Go to Dashboard to skip the installation setup wizard or click Next to...
User Manual
Page 60
...the Internet access information exactly as a regular Ethernet. Refer to you. Leave it to information provided by your IP address settings. 60 ZyWALL USG 50 User's Guide This option appears when you are configuring for Internet access. • Zone: This is the security zone to which this... Otherwise, choose PPPoE or PPTP for a dial-up connection according to Auto. Use this option to enter in each field. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type. Select Static if the ISP assigned a fixed IP address. 4.1.2 Internet Access: ...
...the Internet access information exactly as a regular Ethernet. Refer to you. Leave it to information provided by your IP address settings. 60 ZyWALL USG 50 User's Guide This option appears when you are configuring for Internet access. • Zone: This is the security zone to which this... Otherwise, choose PPPoE or PPTP for a dial-up connection according to Auto. Use this option to enter in each field. Chapter 4 Installation Setup Wizard The screens vary depending on the encapsulation type. Select Static if the ISP assigned a fixed IP address. 4.1.2 Internet Access: ...
User Manual
Page 61
... the field as 0.0.0.0 if you do not want to an IP address and vice versa. Enter a DNS server's IP address(es). Chapter 4 Installation Setup Wizard Note: Enter the Internet access information exactly as given to resolve domain names for this WAN connection's IP address. • Gateway IP ..., you selected Auto as the IP Address Assignment in the order you specify here) to you by your ISP. The ZyWALL uses these (in the previous screen. ZyWALL USG 50 User's Guide 61 The following fields display if you selected static IP address assignment. The DNS server is the security zone...
... the field as 0.0.0.0 if you do not want to an IP address and vice versa. Enter a DNS server's IP address(es). Chapter 4 Installation Setup Wizard Note: Enter the Internet access information exactly as given to resolve domain names for this WAN connection's IP address. • Gateway IP ..., you selected Auto as the IP Address Assignment in the order you specify here) to you by your ISP. The ZyWALL uses these (in the previous screen. ZyWALL USG 50 User's Guide 61 The following fields display if you selected static IP address assignment. The DNS server is the security zone...
User Manual
Page 62
Figure 29 Internet Access: PPPoE Encapsulation 4.1.3.1 ISP Parameters • Type the PPPoE Service Name from the PPPoE server. 62 ZyWALL USG 50 User's Guide You can use alphanumeric and _@$./ characters, and it can be up to 64 characters long. • Authentication Type - ... uses a service name to 64 ASCII characters except the [] and ?. Chapter 4 Installation Setup Wizard 4.1.3 Internet Access: PPPoE Note: Enter the Internet access information exactly as given to you by your ISP. Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to time out. This...
Figure 29 Internet Access: PPPoE Encapsulation 4.1.3.1 ISP Parameters • Type the PPPoE Service Name from the PPPoE server. 62 ZyWALL USG 50 User's Guide You can use alphanumeric and _@$./ characters, and it can be up to 64 characters long. • Authentication Type - ... uses a service name to 64 ASCII characters except the [] and ?. Chapter 4 Installation Setup Wizard 4.1.3 Internet Access: PPPoE Note: Enter the Internet access information exactly as given to you by your ISP. Your ZyWALL accepts MSCHAP-V2 only. • Type the User Name given to time out. This...
User Manual
Page 63
... specify here) to resolve domain names for VPN, DDNS and the time server. Enter a DNS server's IP address(es). The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you selected static IP address ...Installation Setup Wizard 4.1.3.2 WAN IP Address Assignments • WAN Interface: This is the name of the interface that will connect with your ISP. • Zone: This is extremely important because without it, you must know the IP address of a machine in order to access it . Figure 30 Internet Access: PPTP Encapsulation ZyWALL USG 50...
... specify here) to resolve domain names for VPN, DDNS and the time server. Enter a DNS server's IP address(es). The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you selected static IP address ...Installation Setup Wizard 4.1.3.2 WAN IP Address Assignments • WAN Interface: This is the name of the interface that will connect with your ISP. • Zone: This is extremely important because without it, you must know the IP address of a machine in order to access it . Figure 30 Internet Access: PPTP Encapsulation ZyWALL USG 50...
User Manual
Page 64
... (if given). • Server IP: Type the IP address of your (static) public IP address. Chapter 4 Installation Setup Wizard 4.1.5 ISP Parameters • Authentication Type - Options are configuring to configure DNS servers. 64 ZyWALL USG 50 User's Guide The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you...
... (if given). • Server IP: Type the IP address of your (static) public IP address. Chapter 4 Installation Setup Wizard 4.1.5 ISP Parameters • Authentication Type - Options are configuring to configure DNS servers. 64 ZyWALL USG 50 User's Guide The ZyWALL uses these (in the previous screen. • First / Second DNS Server: These fields display if you...
User Manual
Page 65
Second WAN Interface If you selected I have two ISPs, after you configure the First WAN Interface, you can configure the Second WAN Interface. The screens for configuring the second WAN interface are similar to the first (see Section 4.1.1 on page 59). Figure 31 Internet Access: Step 3: Second WAN Interface ZyWALL USG 50 User's Guide 65 Chapter 4 Installation Setup Wizard 4.1.6 Internet Access Setup -
Second WAN Interface If you selected I have two ISPs, after you configure the First WAN Interface, you can configure the Second WAN Interface. The screens for configuring the second WAN interface are similar to the first (see Section 4.1.1 on page 59). Figure 31 Internet Access: Step 3: Second WAN Interface ZyWALL USG 50 User's Guide 65 Chapter 4 Installation Setup Wizard 4.1.6 Internet Access Setup -
User Manual
Page 66
Finish You have not already done so. If you want to register. 66 ZyWALL USG 50 User's Guide Note: You must be connected to the Internet to do a more detailed registration or ... this screen to register your user name and which trial services are not correct, click Back. You can register your ZyWALL with your ZyWALL to perform a basic registration (see Section 4.2 on page 66). Click Next and use the following screen to access ... set up your settings. If they are activated (if any un-activated trial services. Chapter 4 Installation Setup Wizard 4.1.7 Internet Access -
Finish You have not already done so. If you want to register. 66 ZyWALL USG 50 User's Guide Note: You must be connected to the Internet to do a more detailed registration or ... this screen to register your user name and which trial services are not correct, click Back. You can register your ZyWALL with your ZyWALL to perform a basic registration (see Section 4.2 on page 66). Click Next and use the following screen to access ... set up your settings. If they are activated (if any un-activated trial services. Chapter 4 Installation Setup Wizard 4.1.7 Internet Access -
User Manual
Page 67
...haven't created an account at myZyXEL.com, select this option and configure the following fields to create an account and register your ZyWALL. • Select existing myZyXEL.com account if you already have an account at myZyXEL.com and enter your user name and ...: Select your e-mail address. Spaces are not allowed. ZyWALL USG 50 User's Guide 67 Click Check to verify that it again in the fields below to register your ZyWALL. • Enter a User Name for your service subscription status. Chapter 4 Installation Setup Wizard Use the Registration > Service screen to update your...
...haven't created an account at myZyXEL.com, select this option and configure the following fields to create an account and register your ZyWALL. • Select existing myZyXEL.com account if you already have an account at myZyXEL.com and enter your user name and ...: Select your e-mail address. Spaces are not allowed. ZyWALL USG 50 User's Guide 67 Click Check to verify that it again in the fields below to register your ZyWALL. • Enter a User Name for your service subscription status. Chapter 4 Installation Setup Wizard Use the Registration > Service screen to update your...
User Manual
Page 68
Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service. After the trial expires, you activate the trial. The trial period starts the day you can try a trial service subscription. Figure 33 Registraton: Registered Device 68 ZyWALL USG 50 User's Guide
Chapter 4 Installation Setup Wizard • Trial Service Activation: You can buy an iCard and enter the license key in the Registration > Service screen to extend the service. After the trial expires, you activate the trial. The trial period starts the day you can try a trial service subscription. Figure 33 Registraton: Registered Device 68 ZyWALL USG 50 User's Guide
User Manual
Page 113
Figure 60 Configuration > Network > Interface > Cellular ZyWALL USG 50 User's Guide 113 Select the 3G device's entry and click Edit. Chapter 7 Tutorials 2 Enter VPN as the name, select WIZ_VPN_Connection and move it to one of the ZyWALL's USB ports. 3 Click Configuration > Network > Interface > Cellular. In this... example you connect the 3G USB card before you configure the cellular interfaces but is also possible to reverse the sequence. 1 Make sure the 3G device's SIM card is installed. 2 Connect...
Figure 60 Configuration > Network > Interface > Cellular ZyWALL USG 50 User's Guide 113 Select the 3G device's entry and click Edit. Chapter 7 Tutorials 2 Enter VPN as the name, select WIZ_VPN_Connection and move it to one of the ZyWALL's USB ports. 3 Click Configuration > Network > Interface > Cellular. In this... example you connect the 3G USB card before you configure the cellular interfaces but is also possible to reverse the sequence. 1 Make sure the 3G device's SIM card is installed. 2 Connect...