ZyXEL Communications ZyWALL 300 User Manual

Page of 778
 Chapter 5 Configuration Basics
ZyWALL USG 300 User’s Guide
123
If you want to force users to log in to the ZyWALL before the ZyWALL routes traffic for 
them, you might have to configure prerequisites first.
5.6  System Management and Maintenance
This section introduces some of the management and maintenance features in the ZyWALL. 
Use Host Name to configure the system and domain name for the ZyWALL. Use Date/Time 
to configure the current date, time, and time zone in the ZyWALL. Use Console Speed to set 
the console speed. Use Language to select a language for the web configurator screens.
5.6.1  DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage 
CNM
These are the service control screens. Use these screens to set which services or protocols can 
be used to access the ZyWALL through which zone and from which addresses (address 
objects) the access can come. Use Dial-in Mgmt for a management connection through an 
external serial modem connected to the AUX port.
Example: Suppose you want to allow an administrator to use HTTPS to manage the ZyWALL 
from the WAN. 
Create an administrator account (User/Group). 
Create an address object for the administrator’s computer (Object > Address).
Click System > WWW to configure the HTTP management access. Enable HTTPS and 
add an administrator service control entry.
• Select the address object for the administrator’s computer.
• Select the WAN zone.
• Set the action to Accept.
Guest
Access network services
Ext-User
The same as a User or a Guest. The ZyWALL looks for the specific type in an 
external authentication server. If the type is not available, the ZyWALL applies 
default settings.
MENU ITEM(S)
Object > User/Group
PREREQUISITES
Addresses, address groups, schedules. The prerequisites are only used in 
policies to force user authentication
WHERE USED
Policy routes, firewall, application patrol, content filter, user groups, VPN
Table 28   
TYPE
ABILITIES
MENU ITEM(S)
System > DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage 
CNM, Language
PREREQUISITES
To-ZyWALL firewall, zones, addresses, address groups, certificates (WWW, 
SSH, FTP, Vantage CNM), authentication methods (WWW)