607219

ZyXEL ZyWALL USG 20 Manual

54
Zoom out
Zoom in
Previous page
1/150
Next page
Chapter 3 Protecting Your Network
ZyWALL USG 20-2000 User’s Guide
54
3.1.1 What Can Go Wrong
• The ZyWALL checks the firewall rules in order and applies the first firewall rule the traffic
matches. If traffic is unexpectedly blocked or allowed, make sure the firewall rule you want to
apply to the traffic comes before any other rules that the traffic would also match.
• Even if you have configured the firewall to allow access for a management service such as HTTP,
you must also enable the service in the service control rules.
• The ZyWALL is not applying your firewall rules for certain interfaces. The ZyWALL only apply’s a
zone’s rules to the interfaces that belong to the zone. Make sure you assign the interfaces to the
appropriate zones. When you create an interface, there is no security applied on it until you
assign it to a zone.
3.2 User-aware Access Control
You can configure many policies and security settings for specific users or groups of users. Users
can be authenticated locally by the ZyWALL or by an external (AD, RADIUS, or LDAP)
authentication server. Here is how to have the ZyWALL use a RADIUS server to authenticate users
before giving them access.
1 Set up user accounts in the RADIUS server.
2 Set up user accounts and groups on the ZyWALL (Configuration > Object > User/Group).
3 Configure an object for the RADIUS server. Click Configuration > Object > AAA Server >
RADIUS and double-click the radius entry.
4 Then, set up the authentication method, Click Configuration > Object > Auth. Method. Double-
click the default entry. Click the Add icon.
5 Configure the ZyWALL’s security settings. The ZyWALL can use the authentication method in
authenticating wireless clients, HTTP and HTTPS clients, IPSec gateways (extended authentication),
L2TP VPN, and authentication policy.
3.2.1 What Can Go Wrong
• The ZyWALL always authenticates the default admin account locally, regardless of the
authentication method setting. You cannot have the RADIUS server authenticate the ZyWALL‘s
default admin account.
• The authentication attempt will always fail if the ZyWALL tries to use the local database to
authenticate an ext-user. An external server such as AD, LDAP or RADIUS must authenticate the
ext-user accounts.
• Attempts to add the admin users to a user group with access users will fail. You cannot put
access users and admin users in the same user group.
• Attempts to add the default admin account to a user group will fail. You cannot put the default
admin account into any user group.
… 54 …


Need help? Post your question in this forum.

Forumrules


Report abuse

Libble takes abuse of its services very seriously. We're committed to dealing with such abuse according to the laws in your country of residence. When you submit a report, we'll investigate it and take the appropriate action. We'll get back to you only if we require additional details or have more information to share.

Product:

For example, Anti-Semitic content, racist content, or material that could result in a violent physical act.

For example, a credit card number, a personal identification number, or an unlisted home address. Note that email addresses and full names are not considered private information.

Forumrules

To achieve meaningful questions, we apply the following rules:

Register

Register getting emails for ZyXEL ZyWALL USG 20 at:


You will receive an email to register for one or both of the options.


Get your user manual by e-mail

Enter your email address to receive the manual of ZyXEL ZyWALL USG 20 in the language / languages: English as an attachment in your email.

The manual is 7,47 mb in size.

 

You will receive the manual in your email within minutes. If you have not received an email, then probably have entered the wrong email address or your mailbox is too full. In addition, it may be that your ISP may have a maximum size for emails to receive.

Others manual(s) of ZyXEL ZyWALL USG 20

ZyXEL ZyWALL USG 20 Quick start guide - English, German, French, Italian, Swedish, Spanish - 2 pages


The manual is sent by email. Check your email

If you have not received an email with the manual within fifteen minutes, it may be that you have a entered a wrong email address or that your ISP has set a maximum size to receive email that is smaller than the size of the manual.

The email address you have provided is not correct.

Please check the email address and correct it.

Your question is posted on this page

Would you like to receive an email when new answers and questions are posted? Please enter your email address.



Info