Page 936 / 944
Scroll up to view Page 931 - 935
Index
ZyWALL USG 50 User’s Guide
936
PPP interfaces
subnet mask
266
PPPoE
270
and RADIUS
270
TCP port 1723
270
PPPoE/PPTP interfaces
216
,
231
and ISP accounts
231
,
655
basic characteristics
217
gateway
231
subnet mask
231
PPTP
270
and GRE
270
as VPN
270
privacy concerns
545
problems
759
product
overview
31
registration
920
profiles
packet inspection
487
protocol anomaly
514
,
529
detection
521
protocol usage statistics
189
,
190
proxy servers
332
web, see web proxy servers
PTR record
685
public server tutorial
143
,
146
Public-Key Infrastructure (PKI)
634
public-private key pairs
633
Q
QoS
283
,
439
query view (IDP)
488
,
493
Quick Start Guide
3
R
RADIUS
618
,
619
advantages
618
and IKE SA
404
and PPPoE
270
and users
584
user attributes
597
RADIUS server
troubleshooting
770
RDP
660
Real-time Transport Protocol, see RTP
RealVNC
660
reboot
35
,
108
,
755
vs reset
755
record route
498
Reference Guide, CLI
3
registration
209
and content filtering
538
,
540
,
542
configuration overview
96
prerequisites
96
product
920
subscription services, see subscription
services
registration status
anti-virus
467
application patrol
448
IDP
482
reject (IDP)
both
489
,
524
receiver
489
,
524
sender
489
,
524
related documentation
3
Relative Distinguished Name (RDN)
620
,
621
,
623
,
624
remote access IPSec
382
Remote Authentication Dial-In User Service,
see RADIUS
remote desktop connections
660
Remote Desktop Protocol
see RDP
remote management
CNM
720
configuration overview
106
FTP, see FTP
prerequisites
106
see also service control
689
Telnet
711
to-ZyWALL firewall
359
WWW, see WWW
remote network
375
remote user screen links
659
replay detection
382
reports
anti-spam
203
Page 937 / 944
Index
ZyWALL USG 50 User’s Guide
937
anti-virus
194
collecting data
176
configuration overview
107
content filtering
198
daily
724
daily e-mail
724
IDP
196
specifications
178
traffic statistics
175
reset
773
vs reboot
755
RESET button
35
,
773
RFC
1058 (RIP)
298
1389 (RIP)
298
1587 (OSPF areas)
300
1631 (NAT)
293
1889 (RTP)
342
2131 (DHCP)
268
2132 (DHCP)
268
2328 (OSPF)
299
2402 (AH)
383
,
405
2406 (ESP)
383
,
405
2510 (Certificate Management Protocol or
CMP)
641
2516 (PPPoE)
270
2637 (PPTP)
270
2890 (GRE)
270
3261 (SIP)
342
RIP
298
and Ethernet interfaces
221
and OSPF
298
and static routes
298
and to-ZyWALL firewall
298
authentication
298
direction
222
redistribute
298
RIP-2 broadcasting methods
222
versions
222
vs OSPF
297
Rivest, Shamir and Adleman public-key
algorithm (RSA)
640
round robin
279
routing
troubleshooting
765
Routing Information Protocol, see RIP
routing protocols
297
and authentication algorithms
309
and Ethernet interfaces
220
RSA
640
,
644
,
651
RTP
342
see also ALG
342
S
safety warnings
8
same IP
503
scan attacks
491
scanner types
477
SCEP (Simple Certificate Enrollment Protocol)
641
schedule
troubleshooting
770
schedules
611
and content filtering
533
,
534
and current date/time
611
and firewall
355
,
370
,
454
,
457
,
460
and policy routes
288
,
451
,
454
,
457
,
460
one-time
611
recurring
611
types of
611
where used
105
screen resolution
43
SecuExtender
433
Secure Hash Algorithm, see SHA1
Secure Socket Layer, see SSL
security associations, see IPSec
security settings
troubleshooting
761
self-directory-traversal attack
530
self-referential directories
530
sensitivity level
520
serial number
159
service control
136
,
689
and to-ZyWALL firewall
689
and users
690
limitations
689
timeouts
690
service groups
606
and firewall
370
and port triggering
290
in IDP
491
where used
105
service objects
605
Page 938 / 944
Index
ZyWALL USG 50 User’s Guide
938
and firewall
606
and IP protocols
606
and policy routes
606
service subscription status
214
services
605
,
841
and firewall
370
and port triggering
290
subscription
210
where used
105
Session Initiation Protocol, see SIP
session limits
360
,
370
sessions
178
sessions usage
160
,
164
severity (IDP)
485
,
489
SHA1
400
shell script
troubleshooting
772
shell scripts
737
and users
597
downloading
747
editing
746
how applied
738
managing
746
not stopping or starting the ZyWALL
36
syntax
738
uploading
748
shutdown
35
,
757
signal quality
185
,
186
signature categories
access control
491
backdoor/Trojan
491
buffer overflow
491
DoS/DDoS
490
IM
490
P2P
490
scan
491
spam
490
virus/worm
491
Web attack
491
signature ID
489
,
499
,
502
signatures
483
anti-virus
474
IDP
479
packet inspection
487
SIM card
242
Simple Certificate Enrollment Protocol (SCEP)
641
Simple Mail Transfer Protocol, see SMTP
566
Simple Network Management Protocol, see
SNMP
Simple Traversal of UDP through NAT, see STUN
SIP
336
,
342
ALG
335
and firewall
337
and RTP
342
media inactivity timeout
340
signaling inactivity timeout
340
signaling port
340
troubleshooting
766
SMTP
566
smurf attack
527
SNAT
293
troubleshooting
765
SNMP
715
,
716
agents
716
and address groups
719
and address objects
719
and zones
719
Get
716
GetNext
717
Manager
716
managers
716
MIB
716
,
717
network components
716
Set
717
Trap
717
traps
717
versions
715
Snort
equivalent terms
511
rule header
511
rule options
511
signatures
511
Source Network Address Translation, see SNAT
spam
490
,
565
specifications
775
device
775
feature
776
hardware
775
spillover (for load balancing)
274
spyware
545
SQL slammer
511
SSH
706
and address groups
710
and address objects
710
Page 939 / 944
Index
ZyWALL USG 50 User’s Guide
939
and certificates
709
and zones
710
client requirements
708
encryption methods
708
for secure Telnet
710
how connection is established
707
versions
708
with Linux
711
with Microsoft Windows
710
SSL
411
,
416
,
690
access policy
411
and AAA
623
and AD
623
and LDAP
623
certificates
422
client
433
client virtual desktop logo
418
computer names
416
connection monitor
193
full tunnel mode
416
global setting
416
IP pool
416
network list
416
remote user login
422
remote user logout
428
SecuExtender
433
see also SSL VPN
411
troubleshooting
768
user application screens
431
user screen bookmarks
428
user screens
421
,
427
user screens access methods
421
user screens certificates
422
user screens login
422
user screens logout
428
user screens required information
422
user screens system requirements
422
WINS
416
SSL application object
659
remote user screen links
659
summary
661
types
659
web-based
659
,
662
web-based example
660
where used
105
SSL policy
add
414
edit
414
objects used
412
SSL VPN
411
access policy
411
configuration overview
102
full tunnel mode
41
,
411
network access mode
40
prerequisites
102
remote desktop connections
660
see also SSL
411
troubleshooting
768
weblink
660
where used
102
stac compression
658
starting the ZyWALL
35
,
36
startup-config-bad.conf
740
startup-config.conf
744
if errors
740
missing at restart
740
present at restart
740
static DHCP
346
static routes
282
and interfaces
293
and OSPF
302
and RIP
298
configuration overview
98
metric
293
prerequisites
98
statistics
anti-spam
203
anti-virus
194
application patrol
187
bandwidth
188
content filtering
198
daily e-mail report
724
IDP
196
protocol
189
,
190
traffic
175
status
157
status bar
52
warning message popup
52
stopping the ZyWALL
35
,
36
streaming protocols management
437
strict source routing
498
stub area
300
STUN
337
and ALG
337
subscription services
210
AppPatrol
212
Page 940 / 944
Index
ZyWALL USG 50 User’s Guide
940
content filtering
212
IDP
212
new IDP/AppPatrol signatures
212
see also IDP
SSL VPN
210
SSL VPN, see also SSL VPN
status
214
,
448
,
467
upgrading
214
supported browsers
43
SWM
285
SYN flood
528
syntax conventions
6
syslog
727
,
733
syslog servers, see also logs
system log, see logs
system name
159
,
676
system reports, see reports
system uptime
161
system-default.conf
744
T
target market
31
TCP
605
ACK number
504
ACK (acknowledgment)
527
attack packet
489
,
524
connections
605
decoder
521
,
529
decoy portscan
526
distributed portscan
526
flag bits
504
port numbers
606
portscan
525
portsweep
526
RST
526
SYN flood
527
SYN (synchronize)
527
window size
504
technical reference
155
Telnet
711
and address groups
713
and address objects
713
and zones
713
with SSH
710
terminology differences
with ZyNOS
91
three-way handshake
528
throughput rate
troubleshooting
772
TightVNC
660
time
676
time servers (default)
679
time to live
498
timestamp
498
token
618
to-ZyWALL firewall
358
and NAT
327
and NAT traversal (VPN)
768
and OSPF
300
and remote management
359
and RIP
298
and service control
689
and VPN
768
global rules
358
see also firewall
358
trademarks
917
traffic anomaly
514
,
518
traffic statistics
175
Transmission Control Protocol, see TCP
transport encapsulation
383
Transport Layer Security (TLS)
714
trapdoor attacks
491
triangle routes
365
allowing through the firewall
367
vs virtual interfaces
365
Triple Data Encryption Standard, see 3DES
trojan attacks
491
troubleshooting
749
,
759
admin user
770
anti-virus
760
,
763
anti-virus signatures update
760
application patrol
760
,
766
,
769
application patrol signatures update
760
bandwidth limit
763
bandwidth management
763
cellular
762
certificate
771
configuration file
772
connection resets
766
content filter
760
DDNS
765
device access
759