ZyXEL Communications 1000 User Manual

Chapter 49 Endpoint Security

ZyWALL USG 1000 User’s Guide

Use the Configuration > Object > Endpoint Security screens (

) to create and manage endpoint security objects.

The settings endpoint security can check vary depending on the OS of the user’s 
computer. Depending on the OS, EPS can check user computers for the following:

• Operating System (Windows, Linux, Mac OSX, or others)
• Windows version and service pack version
• Windows Auto Update setting and installed security patches
• Personal firewall installation and activation 
• Anti-virus installation and activation 
• Windows registry settings
• Processes that the endpoint must execute
• Processes that the endpoint cannot execute
• The size and version of specific files

You can configure an authentication policy or SSL VPN policy to use multiple 
endpoint security objects. This allows checking of computers with different OSs or 
security settings. When a client attempts to log in, the ZyWALL checks the client’s 
computer against the endpoint security objects one-by-one. The client’s computer 
must match one of the force authentication or SSL VPN policy’s endpoint security 
objects in order to gain access.

User computers must have Sun’s Java (Java Runtime Environment or ‘JRE’) 
installed and enabled with a minimum version of 1.4.

 for an example of how to use endpoint security and 

authentication policies.