Chapter 5 Configuration Basics

 

Table 28

User Types

 

TYPE

 

ABILITIES

 

Guest

 

Access network services

 

 

 

 

 

Ext-User

 

The same as a User or a Guest. The ZyWALL looks for the specific type in an

 

 

 

external authentication server. If the type is not available, the ZyWALL applies

 

 

 

default settings.

 

 

 

 

If you want to force users to log in to the ZyWALL before the ZyWALL routes traffic for them, you might have to configure prerequisites first.

MENU ITEM(S)

Object > User/Group

PREREQUISITES

Addresses, address groups, schedules. The prerequisites are only used in

policies to force user authentication

 

WHERE USED

Policy routes, firewall, application patrol, content filter, user groups, VPN

 

 

5.6 System Management and Maintenance

This section introduces some of the management and maintenance features in the ZyWALL. Use Host Name to configure the system and domain name for the ZyWALL. Use Date/Time to configure the current date, time, and time zone in the ZyWALL. Use Console Speed to set the console speed. Use Language to select a language for the web configurator screens.

5.6.1DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage

CNM

Use these screens to set which services or protocols can be used to access the ZyWALL through which zone and from which addresses (address objects) the access can come. Use Dial-in Mgmt for a remote management connection through an external serial modem connected to the AUX port.

MENU ITEM(S)

System > DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage

CNM, Language

 

PREREQUISITES

To-ZyWALL firewall, zones, addresses, address groups, certificates (WWW,

SSH, FTP, Vantage CNM), authentication methods (WWW)

 

 

 

Example: Suppose you want to allow an administrator to use HTTPS to manage the ZyWALL from the WAN.

1Create an administrator account (User/Group).

2Create an address object for the administrator’s computer (Object > Address).

3Click System > WWW to configure the HTTP management access. Enable HTTPS and add an administrator service control entry.

Select the address object for the administrator’s computer.

Select the WAN zone.

Set the action to Accept.

 

123

ZyWALL USG 1000 User’s Guide