Filter
Top Products
Chapter 5 Configuration Basics
ZyWALL USG 1000 User’s Guide
123
If you want to force users to log in to the ZyWALL before the ZyWALL routes traffic for
them, you might have to configure prerequisites first.
5.6 System Management and Maintenance
This section introduces some of the management and maintenance features in the ZyWALL.
Use Host Name to configure the system and domain name for the ZyWALL. Use Date/Time
to configure the current date, time, and time zone in the ZyWALL. Use Console Speed to set
the console speed. Use Language to select a language for the web configurator screens.
5.6.1 DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage
CNM
Use these screens to set which services or protocols can be used to access the ZyWALL
through which zone and from which addresses (address objects) the access can come. Use
Dial-in Mgmt for a remote management connection through an external serial modem
connected to the AUX port.
Example: Suppose you want to allow an administrator to use HTTPS to manage the ZyWALL
from the WAN.
1 Create an administrator account (User/Group).
2 Create an address object for the administrator’s computer (Object > Address).
3 Click System > WWW to configure the HTTP management access. Enable HTTPS and
add an administrator service control entry.
• Select the address object for the administrator’s computer.
• Select the WA N zone.
• Set the action to Accept.
Guest Access network services
Ext-User The same as a User or a Guest. The ZyWALL looks for the specific type in an
external authentication server. If the type is not available, the ZyWALL applies
default settings.
MENU ITEM(S)
Object > User/Group
PREREQUISITES
Addresses, address groups, schedules. The prerequisites are only used in
policies to force user authentication
WHERE USED
Policy routes, firewall, application patrol, content filter, user groups, VPN
Table 28 User Types
TYPE ABILITIES
MENU ITEM(S)
System > DNS, WWW, SSH, TELNET, FTP, SNMP, Dial-in Mgmt, Vantage
CNM, Language
PREREQUISITES
To-ZyWALL firewall, zones, addresses, address groups, certificates (WWW,
SSH, FTP, Vantage CNM), authentication methods (WWW)