ユーザーガイド目次Application Notes12Seamless Incorporation into your network12Using Transparent (Bridge Mode) Firewall12Internet Connection17DHCP server/client/relay + flexible port role configuration19Using NAT/Multi-NAT23Optimize network performance & availability33Using Dual WAN / Load Balancing and policy route33Using Dual WAN34WAN backup (Active/Passive mode)34Load Balancing (Active/Active Mode)43Using Policy Route52Using Bandwidth Management53Secure Connections across the Internet67Site-to-Site VPN (Intranet) Scenario67Configure ZyWALLs with Static WAN IP Address67Configure ZyWALL with Dynamic WAN IP Address68Configure ZyWALL behind NAT Router70Mapping multiple Network policy to same gateway policy72Using DDNS for VPN Redundancy77Using Certificate for Device Authentication78Using Self-signed Certificates78Online Enroll Certificates82Offline Enroll Certificates91Using Pre-Shared Key for Device Authentication124Using VPN routing between branches125NAT over IPSec on ZyNOS135Never lost your VPN connection (IPSec High Availability)144How to configure the VPN HA145enforcement IPSec)147How to configure access control rule over VPN148How to configure Security policy (AV/IDP/AS) over VPN152ZyWALL vs 3rd Party VPN Gateway155SonicWALL with ZyWALL VPN Tunneling155NetScreen with ZyWALL VPN Tunneling164Check Point with ZyWALL VPN Tunneling178FortiNet with ZyWALL VPN Tunneling213Remote Access VPN Scenario227Using xAuth for User Authentication228ZyXEL VPN Client to ZyWALL Tunneling230Flexible Wireless Connection and Security239Deploy the ZyWALL WLAN security policy240Threat Management244from Internet245Productivity251spyware and phishing threats256To eliminate spam mails to block unwanted messages everyday266Threat Reports271Centralized Management276Using Vantage CNM for Management276FAQ281A. Product FAQ281A01. What is the ZyWALL Internet Access Sharing Router?281A02. Will the ZyWALL work with my Internet connection?281A03. What do I need to use the ZyWALL?281A04. What is PPPoE?281A05. Does the ZyWALL support PPPoE?282A06. How do I know I am using PPPoE?282A07. Why does my Internet Service Provider use PPPoE?282A08. How can I configure the ZyWALL?282A09. What can we do with ZyWALL?282A10. Does ZyWALL support dynamic IP addressing?282from my ISP?282A12. How does e-mail work through the ZyWALL?283outside Internet? If possible, how?283A14. What DHCP capability does the ZyWALL support?283A15. What are the capability of wireless feature of ZyWALL283A16. What is the coverage range of Wireless in ZyWALL?283parameter will be reset by reset button?283A19. How does the ZyWALL support TFTP?284A20. Can the ZyWALL support TFTP over WAN?284cable?284to the Internet, what can I do?284A23. What is BOOTP/DHCP?285A24. What is DDNS?285A25. When do I need DDNS service?286A26. What DDNS servers does the ZyWALL support?286A27. What is DDNS wildcard?286A28. Does the ZyWALL support DDNS wildcard?286gateway behind ZyWALL?286NAT?286A31. What is STP (Spanning Tree Protocol) /RSTP (Rapid STP)?287traffic?287A33. What is “UTM”?287previous ZyWALL models?287A35. What are the key new features of ZyWALL UTM?288B. Firmware Upgrade FAQ288ZyNOS v4.01?28870?289B03. What is ZyNOS v3.65 for ZyWALL 70?28970 with only 32MB of RAM to ZyNOS v4.01 directly?289v3.62/3.63/3.64 to v4.01 directly?290v4.01 having AV+IDP and AS features?290joining your ZyWALL 70 trade-in promotion?290and ZyWALL 35?290default setting of AV+IDP, AS and CF?290successful firmware upgrade to ZyNOS v4.01?291ZyNOS v4.01?291v4.01 back to ZyNOS v3.64 (or below)?291C. Turbo Card FAQ291simultaneously into ZyWALL 5, ZyWALL 35 or ZyWALL 70?291what exactly I can get benefit from it?292my ZyWALL device?292D. Firewall FAQ292D01. What is a network firewall?292D02. What makes ZyWALL secure?292D03. What are the basic types of firewalls?293D04. What kind of firewall is the ZyWALL?293filtering and NAT built-in?294D06. What is Denials of Service (DoS)attack?294D07. What is Ping of Death attack?294D08. What is Teardrop attack?294D09. What is SYN Flood attack?295D10. What is LAND attack?295D11. What is Brute-force attack?295D12. What is IP Spoofing attack?295D13. What are the default ACL firewall rules in ZyWALL?295D14. In ZyWALL, is DMZ behind NAT or not?296D15. Can I use both public and private IP addresses on DMZ?296ZyWALL?296D17. How can I protect against IP spoofing attacks?298E. Security Service licenses FAQ299E01. What is iCard?299E02. Where can I buy the iCard and how much does it cost?299E03. How many kinds of iCard does ZyXEL provide?299E04. Is each type of iCard device specific?299additional purchase and license activation in ZyNOS v4.01?299E06. What kind of iCard should I buy?300silver iCard for ZyWALL 35 or ZyWALL 70, what will happen?300free trial period of Content Filtering service?300How long is it?300How long is it?301F. Security Service Activation and UpdateFAQ301F01. Why do I have to register?301via myZyXEL.com?302over the previous registration flow?302when I register my ZyWALL device on myZyXEL.com?302registered user on myZyXEL.com?303F07. What is mySecurityZone?303F08. What is Update Server?303F09. Who maintains mySecurityZone & Update Server?303F10. What’s the URL for these service portals?304G. Anti-Virus FAQ304deployed the Anti-Virus software on each desktop/laptop?304together?304alone?304service?305Turbo Card?305G06. How do I keep signatures of AV+IDP service updated?305service?305ZyNOS v4.0?305H. IDP FAQ306together?306alone?306service?306Turbo Card?306ZyWALL device to another?306H06. How do I keep signatures of AV+IDP service updated?307service?307ZyNOS v4.0?307I. Anti-Spam FAQ307client-based Anti-Spam filter such as Microsoft Outlook’s?307solution?3085MB, is downloaded which has virus in it?308her/his laptop or desktop?308ZyNOS v4.0?308handle identified spam emails?309I08. How do I keep signatures of Anti-Spam service update?309J. Content Filter FAQ310data center?310keep at most?310BlueCoat data center?310the query to BlueCoat data center is timed out?310J05. How to register for BlueCoat service?310J06. Why can't I make registration successfully?310J07. What services can I get with Trial Registration?311J08. What types of content filter does ZyWALL provide?311J09. What are the primary features of ZyXEL Content Filtering?311Filtering for small companies or for large corporations?311day or week?312J12. How many policies can I create?312J13. Can I create my own categories?312rating?312J15. How many URL keywords does ZyWALL support?312J17. What is BlueCoat Filter list?312J18. How many ratings does the BlueCoat database contain?312J19. How often does BlueCoat update the database?313J20. How do I locate sites to block?313J21. Do humans review the ratings?313J22. How can I do if I find a WEB site is mis-categorized?314J23. How many and what categories do you provide?314generated sites?315Web Filter geographically load balanced?316J26. Who can generate and view reports on BlueCoat WEB site?316J27. How can I get Content Filtering report?316J28. Can I change the password for BlueCoat service?316Filtering report?316get into Registration page. What should I check?317K. IPSec FAQ317K01. How many VPN tunnels are supported on ZyWALL?317K02. How to count my VPN tunnels on ZyWALL?318K03. What is VPN?318K04. Why do I need VPN?319K05. What are most common VPN protocols?319K06. What is PPTP?319K07. What is L2TP?319K08. What is IPSec?320K09. What is SA?320K10. What is Pre-Shared Key?320K11. What is Phase 1 ID for?321K12. What are Local ID and Peer ID?321K13. Is my ZyWALL ready for IPSec VPN?322K14. How do I configure ZyWALL VPN?322K15. What VPN protocols are supported by ZyWALL?322K16. What types of encryption does ZyWALL VPN support?322K17. What types of authentication does ZyWALL VPN support?322What do I need to know?323K19. Does ZyWALL support dynamic secure gateway IP?323successfully?323successfully?324K22. Will ZyXEL support Secure Remote Management?324K23. Does ZyWALL VPN support NetBIOS broadcast?324K24. Is the host behind NAT allowed to use IPSec?324need to know?325K27. Where can I configure Phase 1 ID in ZyWALL?325K28. How can I keep a tunnel alive?326support in VPN/IPSec?326K30. Does ZyWALL support IPSec pass-through?326through and an IPSec gateway simultaneously?327ZyNOS v4.0?327L. PKI FAQ327L01. Basic Cryptography concept327L02. What is PKI?328L03. What are the security services PKI provides?328L04. What are the main elements of a PKI?328L05. What is a Certification Authority?329L06. What is a digital certificate?329L08. What are Certificate Policies (CPs)?329L09. How does a PKI ensure data confidentiality?330L10. What is a digital signature?330L11. How does a digital signature work?330L12. Does ZyXEL provide CA service?331like to use PKI function?332one?332configuration file?332default configuration file?332L18. What can I do prior to reset appliance's configuration?332file, can I reuse the imported My Certificates ?332M. Dual WAN Auto Fail-over/Fail-back and Load Balance FAQ333connections?333M02. Can ZyWALL support VPN load balancing?333N. Bandwidth Management FAQ333Management class tree? And, what is the max depth of a class?333O. Wireless FAQ334O01. Which wireless cards does it support in ZyWALL 5/35/70?334wireless cards?334サイズ： 15MBページ数： 335Language: Englishマニュアルを開く
クイック設定ガイドサイズ： 3.44MBページ数： 142Languages: English, Deutsch, Español, Français, Italiano, Русский, 中文(zhōngwén)マニュアルを開く
