User Manual
Page 3
.... • Subsequent chapters are needed to configure a feature and how to use that menu item. • To find the information you require. ZyWALL USG 50 User's Guide 3 How To Use This Guide • Read Chapter 1 on page 31 chapter for an overview of Contents, the Index, or search... The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the ZyWALL. Note: It is recommended you use the Web Configurator to configure the ZyWALL. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use the Contents Overview, the ...
.... • Subsequent chapters are needed to configure a feature and how to use that menu item. • To find the information you require. ZyWALL USG 50 User's Guide 3 How To Use This Guide • Read Chapter 1 on page 31 chapter for an overview of Contents, the Index, or search... The CLI Reference Guide explains how to use the Command-Line Interface (CLI) to configure the ZyWALL. Note: It is recommended you use the Web Configurator to configure the ZyWALL. E-mail techwriters@zyxel.com.tw if you cannot find specific information in this guide, use the Contents Overview, the ...
User Manual
Page 4
... Guide, Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to www.zyxel.com for additional support documentation and product certifications. User Guide Feedback Help us help you have a specific question about ZyXEL products. 4 ZyWALL USG 50 User's Guide More help in configuring that screen and supplementary information. •...
... Guide, Quick Start Guide and Command Line Interface Reference Guide in order to better understand how to www.zyxel.com for additional support documentation and product certifications. User Guide Feedback Help us help you have a specific question about ZyXEL products. 4 ZyWALL USG 50 User's Guide More help in configuring that screen and supplementary information. •...
User Manual
Page 5
... in which you installed updated firmware/software for your vendor, then contact a ZyXEL office for contact information. About This User's Guide • Forum This contains discussions on ZyXEL products. See http://www.zyxel.com/web/contact_us.php for the region in this manual is accurate. Learn ... slightly from others who use ZyXEL products and share your vendor. If you should contact your experiences as well. Every effort has been made to ensure that cannot be solved by the methods listed above, you cannot contact your device. ZyWALL USG 50 User's Guide 5 Customer Support...
... in which you installed updated firmware/software for your vendor, then contact a ZyXEL office for contact information. About This User's Guide • Forum This contains discussions on ZyXEL products. See http://www.zyxel.com/web/contact_us.php for the region in this manual is accurate. Learn ... slightly from others who use ZyXEL products and share your vendor. If you should contact your experiences as well. Every effort has been made to ensure that cannot be solved by the methods listed above, you cannot contact your device. ZyWALL USG 50 User's Guide 5 Customer Support...
User Manual
Page 209
ZyWALL USG 50 User's Guide 209 Alternatively, go to http:// www.myZyXEL.com with myZyXEL.com and activate a service, such as content filtering. • Use the Service screen (see Section 10.2 on page 211) to register your ZyWALL with the ZyWALL's serial number and LAN MAC address to register it. myZyXEL.com myZyXEL.com is ZyXEL's online...
ZyWALL USG 50 User's Guide 209 Alternatively, go to http:// www.myZyXEL.com with myZyXEL.com and activate a service, such as content filtering. • Use the Service screen (see Section 10.2 on page 211) to register your ZyWALL with the ZyWALL's serial number and LAN MAC address to register it. myZyXEL.com myZyXEL.com is ZyXEL's online...
User Manual
Page 212
... up-to categories of web sites categorized based on Service the ZyWALL to 80 alphanumeric characters (periods and the underscore are also allowed) without spaces. Click Apply to the ZyWALL. 212 ZyWALL USG 50 User's Guide E-Mail Address Enter your changes back to save your...application patrol features use up -todate signature files for the selected anti-virus engine from the update server (http:// myupdate.zywall.zyxel.com). Chapter 10 Registration Table 49 Configuration > Licensing > Registration (continued) LABEL DESCRIPTION Confirm Password Enter the password again ...
... up-to categories of web sites categorized based on Service the ZyWALL to 80 alphanumeric characters (periods and the underscore are also allowed) without spaces. Click Apply to the ZyWALL. 212 ZyWALL USG 50 User's Guide E-Mail Address Enter your changes back to save your...application patrol features use up -todate signature files for the selected anti-virus engine from the update server (http:// myupdate.zywall.zyxel.com). Chapter 10 Registration Table 49 Configuration > Licensing > Registration (continued) LABEL DESCRIPTION Confirm Password Enter the password again ...
User Manual
Page 417
...domain name for users to 60 characters ("a-z", A-Z", "0-9") with another interface. For example, www.zyxel.com is a fully qualified domain name where "www" is established successfully. so you could use one of the ZyWALL (or a gateway device) for full tunnel mode SSL VPN access. Table 122 VPN >...when a user logs in this field to one of the ZyWALL's IP addresses or be registered to the default settings unless it conflicts with spaces allowed. ZyWALL USG 50 User's Guide 417 Message Login Message The ZyWALL displays the normal login screen without the button for each ...
...domain name for users to 60 characters ("a-z", A-Z", "0-9") with another interface. For example, www.zyxel.com is a fully qualified domain name where "www" is established successfully. so you could use one of the ZyWALL (or a gateway device) for full tunnel mode SSL VPN access. Table 122 VPN >...when a user logs in this field to one of the ZyWALL's IP addresses or be registered to the default settings unless it conflicts with spaces allowed. ZyWALL USG 50 User's Guide 417 Message Login Message The ZyWALL displays the normal login screen without the button for each ...
User Manual
Page 418
... of a different resolution to verify that the new logo displays properly. 418 ZyWALL USG 50 User's Guide Click Upload to transfer the specified graphic file from your computer. Make sure the file is terminated successfully. The ZyXEL company logo is recommended. Specify the location and file name of 127 x...your computer to Default Apply Reset Note: The logo graphic must be GIF, JPG, or PNG format. Browse Upload Reset Logo to the ZyWALL. Click Browse to locate the logo graphic. You can upload a graphic logo to be displayed on the web browser on the screen ...
... of a different resolution to verify that the new logo displays properly. 418 ZyWALL USG 50 User's Guide Click Upload to transfer the specified graphic file from your computer. Make sure the file is terminated successfully. The ZyXEL company logo is recommended. Specify the location and file name of 127 x...your computer to Default Apply Reset Note: The logo graphic must be GIF, JPG, or PNG format. Browse Upload Reset Logo to the ZyWALL. Click Browse to locate the logo graphic. You can upload a graphic logo to be displayed on the web browser on the screen ...
User Manual
Page 436
Figure 266 ZyWALL SecuExtender Uninstallation 436 ZyWALL USG 50 User's Guide Figure 265 Uninstalling the ZyWALL SecuExtender Confirmation 3 Windows uninstalls the ZyWALL SecuExtender. Chapter 27 ZyWALL SecuExtender connected but not send any traffic through it until you right-click the icon and ...-click the icon and select Stop Connection to disconnect the SSL VPN tunnel. 27.6 Uninstalling the ZyWALL SecuExtender Do the following if you need to remove the ZyWALL SecuExtender. 1 Click start > All Programs > ZyXEL > ZyWALL SecuExtender > Uninstall. 2 In the confirmation screen, click Yes.
Figure 266 ZyWALL SecuExtender Uninstallation 436 ZyWALL USG 50 User's Guide Figure 265 Uninstalling the ZyWALL SecuExtender Confirmation 3 Windows uninstalls the ZyWALL SecuExtender. Chapter 27 ZyWALL SecuExtender connected but not send any traffic through it until you right-click the icon and ...-click the icon and select Stop Connection to disconnect the SSL VPN tunnel. 27.6 Uninstalling the ZyWALL SecuExtender Do the following if you need to remove the ZyWALL SecuExtender. 1 Click start > All Programs > ZyXEL > ZyWALL SecuExtender > Uninstall. 2 In the confirmation screen, click Yes.
User Manual
Page 534
... any policy. External Web Filtering Service When you specify. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. 534 ZyWALL USG 50 User's Guide For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is not set to block. The... ZyWALL allows the request if the default policy is www.zyxel.com.tw. The file path is set to block. ...
... any policy. External Web Filtering Service When you specify. For example, with the URL www.zyxel.com.tw/news/pressroom.php, the file path is news/pressroom.php. 534 ZyWALL USG 50 User's Guide For example, with the URL www.zyxel.com.tw/news/ pressroom.php, the domain name is not set to block. The... ZyWALL allows the request if the default policy is www.zyxel.com.tw. The file path is set to block. ...
User Manual
Page 535
...example, with the URL www.zyxel.com.tw/news/pressroom.php, the ZyWALL would find "tw" in the file path (news/pressroom.php) but it will not find items that go across the two. It would also find "news" in the domain name (www.zyxel.com.tw). Use this ... Registration screens). 32.2 Content Filter General Screen Click Configuration > Anti-X > Content Filter > General to enable content filtering, view and order ZyWALL USG 50 User's Guide 535 Chapter 32 Content Filtering Since the ZyWALL checks the URL's domain name (or IP address) and file path separately, it would not find "tw/news".
...example, with the URL www.zyxel.com.tw/news/pressroom.php, the ZyWALL would find "tw" in the file path (news/pressroom.php) but it will not find items that go across the two. It would also find "news" in the domain name (www.zyxel.com.tw). Use this ... Registration screens). 32.2 Content Filter General Screen Click Configuration > Anti-X > Content Filter > General to enable content filtering, view and order ZyWALL USG 50 User's Guide 535 Chapter 32 Content Filtering Since the ZyWALL checks the URL's domain name (or IP address) and file path separately, it would not find "tw/news".
User Manual
Page 554
...Cookies from sites that are chosen carefully, this box is selected, the ZyWALL blocks Web access to this proxy server. For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", and so on a computer's hard drive. Forbidden Web Site List... part of the site - All subdomains are downloaded to restrict a feature. Select an entry and click this to delete it . 554 ZyWALL USG 50 User's Guide Chapter 32 Content Filtering Table 163 Configuration > Anti-X > Content Filter > Filter Profile > Customization LABEL DESCRIPTION Allow Web traffic...
...Cookies from sites that are chosen carefully, this box is selected, the ZyWALL blocks Web access to this proxy server. For example, entering "zyxel.com" also allows "www.zyxel.com", "partner.zyxel.com", "press.zyxel.com", and so on a computer's hard drive. Forbidden Web Site List... part of the site - All subdomains are downloaded to restrict a feature. Select an entry and click this to delete it . 554 ZyWALL USG 50 User's Guide Chapter 32 Content Filtering Table 163 Configuration > Anti-X > Content Filter > Filter Profile > Customization LABEL DESCRIPTION Allow Web traffic...
User Manual
Page 559
Chapter 33 Content Filter Reports 3 A welcome screen displays. Click your ZyWALL using the Rename button in the Service Management screen (see Figure 320 on page 560). You can change the descriptive name for your ZyWALL's model name and/or MAC address under Registered ZyXEL Products (the ZyWALL 70 is shown as an example here). Figure 319 myZyXEL.com: Welcome ZyWALL USG 50 User's Guide 559
Chapter 33 Content Filter Reports 3 A welcome screen displays. Click your ZyWALL using the Rename button in the Service Management screen (see Figure 320 on page 560). You can change the descriptive name for your ZyWALL's model name and/or MAC address under Registered ZyXEL Products (the ZyWALL 70 is shown as an example here). Figure 319 myZyXEL.com: Welcome ZyWALL USG 50 User's Guide 559
User Manual
Page 587
...limitations on page 586), and click either the Add icon or an Edit icon. Figure 335 Configuration > User/Group > User > Add ZyWALL USG 50 User's Guide 587 Chapter 35 User/Group • - [dashes] The first character must be different than user group names. •...8226; sync • admin • any • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd To access this screen, go to be alphabetical ...
...limitations on page 586), and click either the Add icon or an Edit icon. Figure 335 Configuration > User/Group > User > Add ZyWALL USG 50 User's Guide 587 Chapter 35 User/Group • - [dashes] The first character must be different than user group names. •...8226; sync • admin • any • devicehaecived • ftp • lp • mail • radius-users • root • uucp • zyxel • bin • games • news • shutdown • daemon • halt • nobody • sshd To access this screen, go to be alphabetical ...
User Manual
Page 621
... open a screen where you want to display the Active Directory (or LDAP) screen. For example, o=ZyXEL, c=US. 39.2.1 Adding an Active Directory or LDAP Server Click Object > AAA Server > Active Directory (or LDAP) to display the ZyWALL USG 50 User's Guide 621 Click Configuration > Object > AAA Server > Active Directory (or LDAP) to remove it...
... open a screen where you want to display the Active Directory (or LDAP) screen. For example, o=ZyXEL, c=US. 39.2.1 Adding an Active Directory or LDAP Server Click Object > AAA Server > Active Directory (or LDAP) to display the ZyWALL USG 50 User's Guide 621 Click Configuration > Object > AAA Server > Active Directory (or LDAP) to remove it...
User Manual
Page 623
...(up to 127 alphanumerical characters). In this attribute is called a group identifier; Specify the directory (up to 127 alphanumerical characters). For example, o=ZyXEL, c=US. Enter the type of the attribute that the users can use in . You can add ext-group-user user objects to test if...correct. For example "name" or "e-mail address". If there is down. Click OK to which group a user belongs. ZyWALL USG 50 User's Guide 623 Password Base DN Login Name Attribute Alternative Login Name Attribute Group Membership Attribute For example, cn=zywallAdmin specifies ...
...(up to 127 alphanumerical characters). In this attribute is called a group identifier; Specify the directory (up to 127 alphanumerical characters). For example, o=ZyXEL, c=US. Enter the type of the attribute that the users can use in . You can add ext-group-user user objects to test if...correct. For example "name" or "e-mail address". If there is down. Click OK to which group a user belongs. ZyWALL USG 50 User's Guide 623 Password Base DN Login Name Attribute Alternative Login Name Attribute Group Membership Attribute For example, cn=zywallAdmin specifies ...
User Manual
Page 624
... on page 230 for authentication is 1812. Remove To remove an entry, select it and click Edit to its last-saved settings. 624 ZyWALL USG 50 User's Guide Name This is the address of the RADIUS server entry. Base DN This specifies a directory. Key Enter a password (up...create a new entry. Object References Select an entry and click Object References to save the changes. For example, o=ZyXEL, c=US. You need not change this to remove it before the ZyWALL disconnects from the RADIUS server. Specify the timeout period (between the external authentication server and the...
... on page 230 for authentication is 1812. Remove To remove an entry, select it and click Edit to its last-saved settings. 624 ZyWALL USG 50 User's Guide Name This is the address of the RADIUS server entry. Base DN This specifies a directory. Key Enter a password (up...create a new entry. Object References Select an entry and click Object References to save the changes. For example, o=ZyXEL, c=US. You need not change this to remove it before the ZyWALL disconnects from the RADIUS server. Specify the timeout period (between the external authentication server and the...
User Manual
Page 676
...Name The following table describes the labels in this screen. This name is also 676 ZyWALL USG 50 User's Guide Apply Click Apply to save your ZyWALL device. Click Configuration > System > Host Name to manage ZyXEL devices. Table 209 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a...45 System • Vantage CNM (Centralized Network Management) is known on page 719) to allow your ZyWALL to be up to the ZyWALL. Note: See each section for the ZyWALL's Web Configurator screens. Use the System > Vantage CNM screen (see Section 45.12 on page ...
...Name The following table describes the labels in this screen. This name is also 676 ZyWALL USG 50 User's Guide Apply Click Apply to save your ZyWALL device. Click Configuration > System > Host Name to manage ZyXEL devices. Table 209 Configuration > System > Host Name LABEL DESCRIPTION System Name Choose a...45 System • Vantage CNM (Centralized Network Management) is known on page 719) to allow your ZyWALL to be up to the ZyWALL. Note: See each section for the ZyWALL's Web Configurator screens. Use the System > Vantage CNM screen (see Section 45.12 on page ...
User Manual
Page 683
...when you take this list. Double-click an entry or select it and click Edit to be able to create a new entry. The ZyWALL confirms you want to modify the entry's settings. This is the index number of the domain zone forwarder record. The ordering of the other... entry after the selected entry. An FQDN consists of a host and domain name. Domain Zone A hyphen (-) displays for the www.zyxel.com.tw fully qualified domain name. ZyWALL USG 50 User's Guide 683 To change an entry's position in this to remove it against the domain zone forwarder entries in the order...
...when you take this list. Double-click an entry or select it and click Edit to be able to create a new entry. The ZyWALL confirms you want to modify the entry's settings. This is the index number of the domain zone forwarder record. The ordering of the other... entry after the selected entry. An FQDN consists of a host and domain name. Domain Zone A hyphen (-) displays for the www.zyxel.com.tw fully qualified domain name. ZyWALL USG 50 User's Guide 683 To change an entry's position in this to remove it against the domain zone forwarder entries in the order...
User Manual
Page 685
... consists of a host and domain name. For example, www.zyxel.com is a fully qualified domain name, where "www" is the host, "zyxel" is the second-level domain, and "com" is the top level domain. Figure 387 Configuration > System > DNS > Address/PTR Record Edit ZyWALL USG 50 User's Guide 685 This way you to query a DNS...
... consists of a host and domain name. For example, www.zyxel.com is a fully qualified domain name, where "www" is the host, "zyxel" is the second-level domain, and "com" is the top level domain. Figure 387 Configuration > System > DNS > Address/PTR Record Edit ZyWALL USG 50 User's Guide 685 This way you to query a DNS...
User Manual
Page 686
...customized settings and exit this screen. Enter the IP address of a server. Figure 388 Configuration > System > DNS > Domain Zone Forwarder Add 686 ZyWALL USG 50 User's Guide Table 214 Configuration > System > DNS > Address/PTR Record Edit LABEL DESCRIPTION FQDN Type a Fully-Qualified Domain Name (FQDN) of ... 45.5.6 Domain Zone Forwarder A domain zone forwarder contains a DNS server's IP address. For example, www.zyxel.com.tw is a fully qualified domain name, where "www" is the host, "zyxel" is the third-level domain, "com" is the second-level domain, and "tw" is the domain...
...customized settings and exit this screen. Enter the IP address of a server. Figure 388 Configuration > System > DNS > Domain Zone Forwarder Add 686 ZyWALL USG 50 User's Guide Table 214 Configuration > System > DNS > Address/PTR Record Edit LABEL DESCRIPTION FQDN Type a Fully-Qualified Domain Name (FQDN) of ... 45.5.6 Domain Zone Forwarder A domain zone forwarder contains a DNS server's IP address. For example, www.zyxel.com.tw is a fully qualified domain name, where "www" is the host, "zyxel" is the third-level domain, "com" is the second-level domain, and "tw" is the domain...