ZyXEL Communications ISG50 User Manual

 Chapter 52 System

ISG50 User’s Guide

Each user is also forced to log in the ISG50 for authentication again when the reauthentication time 
expires. 

You can change the timeout settings in the User/Group screens.

You can set the ISG50 to use HTTP or HTTPS (HTTPS adds security) for Web Configurator sessions. 
Specify which zones allow Web Configurator access and from which IP address the access can 
come.

HTTPS (HyperText Transfer Protocol over Secure Socket Layer, or HTTP over SSL) is a web protocol 
that encrypts and decrypts web pages. Secure Socket Layer (SSL) is an application-level protocol 
that enables secure transactions of data by ensuring confidentiality (an unauthorized party cannot 
read the transferred data), authentication (one party can identify the other party) and data 
integrity (you know if data has been changed). 

It relies upon certificates, public keys, and private keys (see 

for more 

information).

HTTPS on the ISG50 is used so that you can securely access the ISG50 using the Web Configurator. 
The SSL protocol specifies that the HTTPS server (the ISG50) must always authenticate itself to the 
HTTPS client (the computer which requests the HTTPS connection with the ISG50), whereas the 
HTTPS client only should authenticate itself when the HTTPS server requires it to do so (select 
Authenticate Client Certificates in the WWW screen). Authenticate Client Certificates is 
optional and if selected means the HTTPS client must send the ISG50 a certificate. You must apply 
for a certificate for the browser from a CA that is a trusted CA on the ISG50.

Please refer to the following figure.

HTTPS connection requests from an SSL-aware web browser go to port 443 (by default) on the 
ISG50’s web server.

HTTP connection requests from a web browser go to port 80 (by default) on the ISG50’s web server.

HTTP/HTTPS Implementation

Note: If you disable HTTP in the WWW screen, then the ISG50 blocks all HTTP 

connection attempts.