User manual ZYXEL ZYWALL 2WE

[. . . ] ZyWALL 2/2WE Internet Security Gateway User's Guide Version 3. 60 March 2003 ZyWALL 2 and ZyWALL 2WE Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. [. . . ] Go to the Edit Filter Sets field, press [SPACE BAR] to select Yes and press [ENTER]. Step 3. Apply a filter set (our example filter set 3) as shown in Step 4. Press [ENTER] to confirm after you enter the set numbers and to leave menu 11. 5. Filter Configuration 19-15 ZyWALL 2 and ZyWALL 2WE 19. 4 Filter Types and SUA/NAT There are two classes of filter rules, Generic Filter (Device) rules and protocol filter (TCP/IP) rules. Generic filter rules act on the raw data from/to LAN and WAN. Protocol filter rules act on the IP packets. Generic and TCP/IP filter rules are discussed in more detail in the next section. When SUA/NAT is enabled, the inside IP address and port number are replaced on a connection-by-connection basis, which makes it impossible to know the exact address and port on the wire. Therefore, the ZyWALL applies the protocol filters to the "native" IP address and port number before NAT for outgoing packets and after NAT for incoming packets. On the other hand, the generic, or device filters are applied to the raw packets that appear on the wire. They are applied at the point when the ZyWALL is receiving and sending the packets; i. e. The interface can be an Ethernet port or any other hardware port. The following diagram illustrates this. Figure 19-11 Protocol and Device Filter Sets 19. 5 Firewall Versus Filters Firewall configuration is discussed in the firewall chapters of this manual. Further comparisons are also made between filtering, SUA/NAT and the firewall. 19-16 Filter Configuration ZyWALL 2 and ZyWALL 2WE 19. 6 Applying a Filter and Factory Defaults This section shows you where to apply the filter(s) after you design it (them). The ZyWALL already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, FTP and HTTP connections. If you do not activate the firewall, it is advisable to apply filters. 19. 6. 1 Applying LAN Filters LAN traffic filter sets may be useful to block certain packets, reduce traffic and prevent security breaches. Go to menu 3. 1 (shown next) and enter the number(s) of the filter set(s) that you want to apply as appropriate. You can choose up to four filter sets (from twelve) by entering their numbers separated by commas, e. g. , 3, 4, 6, 11. Input filter sets filter incoming traffic to the ZyWALL and output filter sets filter outgoing traffic from the ZyWALL. For PPPoE or PPTP encapsulation, you have the additional option of specifying remote node call filter sets. Menu 3. 1 ­ LAN Port Filter Setup Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 19-12 Filtering LAN Traffic 19. 6. 2 Applying Remote Node Filters Go to menu 11. 5 (shown below ­ note that call filter sets are only present for PPPoE encapsulation) and enter the number(s) of the filter set(s) as appropriate. You can cascade up to four filter sets by entering their numbers separated by commas. The ZyWALL already has filters to prevent NetBIOS traffic from triggering calls, and block incoming telnet, FTP and HTTP connections. Filter Configuration 19-17 ZyWALL 2 and ZyWALL 2WE Menu 11. 5 ­ Remote Node Filter Setup Input Filter Sets: protocol filters= device filters= Output Filter Sets: protocol filters= device filters= Press ENTER to Confirm or ESC to Cancel: Figure 19-13 Filtering Remote Node Traffic 19-18 Filter Configuration ZyWALL 2 and ZyWALL 2WE Chapter 20 SNMP Configuration This chapter explains SNMP configuration menu 22. SNMP is only available if TCP/IP is configured. 20. 1 Introduction to SNMP Simple Network Management Protocol is a protocol used for exchanging management information between network devices. SNMP is a member of the TCP/IP protocol suite. [. . . ] 21-7, 21-8 Upload Firmware. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22-11 UPnP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3, 36 Upper Layer Protocols. . . . . . . . . . . . . . . . . . . . . . . 13-10, 13-11 Use Server Detected IP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 User Name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4 User Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-8 User Specified IP Addr. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5 J Index ZyWALL 2 and ZyWALL 2WE V View Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18-1 VPN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2 VT100 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1 W WAN DHCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]