Help us help you. Send all User Guide-related comments, questions or suggestions for improvement to the following address, or use e-mail instead. Thank you! The Technical Writing Team, ZyXEL Communications Corp., 6 Innovation Road II, Science-Based Industrial Park, Hsinchu, 300, Taiwan. E-mail: [email protected] ZyWALL SSL 10 User’s Guide...
Syntax Conventions • The ZyWALL SSL 10 may be referred to as the “ZyWALL”, the “device”, the “system” or the “product” in this User’s Guide. • Product labels, screen names, field labels and field choices are all in bold font.
Page 5
Icons Used in Figures Figures in this User’s Guide may use the following generic icons. The ZyWALL icon is not an exact representation of your device. ZyWALL Computer Notebook computer Server DSLAM Firewall Telephone Switch Router ZyWALL SSL 10 User’s Guide...
3.3 Opening a File or Folder ...................... 28 3.3.1 Downloading a File ..................... 29 3.3.2 Saving a File ......................29 3.4 Creating a New Folder ......................30 3.5 Renaming a File or Folder ....................30 ZyWALL SSL 10 User’s Guide...
Page 8
Part II: Troubleshooting, Appendices and Index ........ 39 Chapter 5 Troubleshooting........................41 Appendix A Setting Up Your Computer’s IP Address ............. 45 Appendix B Importing Certificates ..................69 Appendix C Legal Information ....................93 Appendix D Customer Support....................95 ZyWALL SSL 10 User’s Guide...
Figure 35 Windows XP: Local Area Connection Properties ..............47 Figure 36 Windows XP: Internet Protocol (TCP/IP) Properties .............. 48 Figure 37 Windows Vista: Start Menu ..................... 49 Figure 38 Windows Vista: Control Panel ....................49 ZyWALL SSL 10 User’s Guide...
Page 10
Figure 78 Internet Explorer 7: Certificate Import Wizard ................ 73 Figure 79 Internet Explorer 7: Security Warning ..................73 Figure 80 Internet Explorer 7: Certificate Import Wizard ................ 74 Figure 81 Internet Explorer 7: Website Identification ................74 ZyWALL SSL 10 User’s Guide...
ZyWALL SecuExtender client program to your computer. With the ZyWALL SecuExtender, you can access servers, remote desktops and manage files as if you were on the local network. See Chapter 4 on page 33 for more on the ZyWALL SecuExtender. ZyWALL SSL 10 User’s Guide...
1 Open a web browser and enter the web site address or IP address of the ZyWALL. For example, “http://sslvpn.mycompany.com”. Figure 2 Enter the Address in a Web Browser 2 Click OK or Yes if a security screen displays. ZyWALL SSL 10 User’s Guide...
ZyWALL. This may take up to two minutes. 5 Download the installation software if you are prompted to upgrade the JVM. Click the link to access the Sun Java software web site. It is recommended you select the Offline Installation option. ZyWALL SSL 10 User’s Guide...
7 The ZyWALL SecuExtender icon displays in the system tray. Figure 7 ZyWALL SecuExtender Icon 8 When the list of available resources displays in the Application screen, you have successfully logged into the network. See Figure 8 on page ZyWALL SSL 10 User’s Guide...
This part of the screen displays a list of the resources available to you. In the Application screen, click on a link to access or display the access method. In the File Sharing screen, click on a link to open a file or directory. ZyWALL SSL 10 User’s Guide...
2 A prompt window displays. Click OK to continue. Figure 10 Logout: Prompt 3 An information screen displays. This indicates that all connections have been successfully terminated. Figure 11 Logout: Information Window 4 The login screen displays with the “Logged out successfully!” message. ZyWALL SSL 10 User’s Guide...
The Type field displays Web Application to indicate a web-based application or Application for a non-web based application. You can move your mouse over a link to display help information on how to access an application. The following shows an example. Figure 13 Application ZyWALL SSL 10 User’s Guide...
The following example shows you how to establish an FTP connection to a switch for device management. 1 In the Application screen, move your mouse over a link to display the pop-up information window. ZyWALL SSL 10 User’s Guide...
Chapter 2 Application Figure 15 Application: Access Non-Web based Application 2 Launch an FTP application and connect to the IP address provided. The following figure shows an example using Windows Command Prompt. Figure 16 Application: Telnet Example ZyWALL SSL 10 User’s Guide...
3.2 Main File Sharing Screen The first File Sharing screen displays the name(s) of the shared folder(s) available. The following figure shows an example with three file shares. ZyWALL SSL 10 User’s Guide...
3 If an access user name and password are required, a screen displays as shown in the following figure. Enter the account information and click Login to continue. Figure 18 File Sharing: Enter Access User Name and Password ZyWALL SSL 10 User’s Guide...
3.3.2 Saving a File After you have opened a file in a web browser, you can save a copy of the file by clicking File > Save As and follow the on-screen instruction. ZyWALL SSL 10 User’s Guide...
Make sure the length of the folder name does not exceed the maximum allowed on the file server. Figure 21 File Sharing: Save a Word File 3.5 Renaming a File or Folder To rename a file or folder, click the Rename icon next to the file/folder. ZyWALL SSL 10 User’s Guide...
You may not be able to open a file if you change the file extension. Figure 23 File Sharing: Rename 3.6 Deleting a File or Folder To delete a file or folder, click the Delete icon next to the file/folder and then OK in a prompt screen that displays. ZyWALL SSL 10 User’s Guide...
4 After the file is uploaded successfully, you should see the name of the file and the message in the screen. Figure 25 File Sharing: File Upload Uploading a files with the same name and file extension replaces the existing file on the file server. No warning message is displayed. ZyWALL SSL 10 User’s Guide...
Figure 26 Opening the ZyWALL SecuExtender 2 Right-click the ZyWALL SecuExtender icon in the system tray and select Connect to open the Connect screen. Use this screen to access and log into the network through the ZyWALL. ZyWALL SSL 10 User’s Guide...
4 Now you can use another application to access resources behind the ZyWALL. 4.2 Statistics Right-click the ZyWALL SecuExtender icon in the system tray and select Statistics to open the Statistics screen. Use this screen to view the ZyWALL SecuExtender’s statistics. Figure 29 ZyWALL SecuExtender Statistics ZyWALL SSL 10 User’s Guide...
ZyWALL SecuExtender to the ZyWALL go through an HTTPS proxy server. Right-click the ZyWALL SecuExtender icon in the system tray and select Proxy Settings to open the Proxy Settings screen. Use this screen to configure the ZyWALL SecuExtender to use an HTTPS proxy server. ZyWALL SSL 10 User’s Guide...
If you have problems with the ZyWALL SecuExtender, customer support may request you to provide information from the log. Right-click the ZyWALL SecuExtender icon in the system tray and select View Log to open a notepad file of the ZyWALL SecuExtender’s log. ZyWALL SSL 10 User’s Guide...
[24/11/2008-18:38:53] TRAY Reading UDP port from registry: count 0 [24/11/2008-18:38:53] Logged in user has admin privileges [24/11/2008-18:38:53] Received port from registry is: 1027 [24/11/2008-18:38:53] Progbar successfully set port num to registry [24/11/2008-18:38:53] Socket created successfully in FtmTray ZyWALL SSL 10 User’s Guide...
Troubleshooting, Appendices and Index The appendices provide general networking information. Some information may not apply to your ZyWALL. • Troubleshooting (41) • Setting Up Your Computer’s IP Address (45) • Importing Certificates (69) • Legal Information (93) • Customer Support (95)
Page 41
• You cannot log in to the web configurator if someone has already logged in using the same user account. In this case, inform that person to log out or contact your network administrator for assistance. ZyWALL SSL 10 User’s Guide...
• If your web browser cannot open a file, you are prompted to download it to your computer. You can then launch the appropriate application to open the file. I cannot rename/delete/upload a file and/or folder. ZyWALL SSL 10 User’s Guide...
Page 43
Chapter 5 Troubleshooting • You must have read/write access rights for the file share. Check with your network administrator for this information. ZyWALL SSL 10 User’s Guide...
The following example uses the default Windows XP display theme but can also apply to Windows 2000 and Windows NT. 1 Click Start > Control Panel. Figure 32 Windows XP: Start Menu 2 In the Control Panel, click the Network Connections icon. Figure 33 Windows XP: Control Panel ZyWALL SSL 10 User’s Guide...
3 Right-click Local Area Connection and then select Properties. Figure 34 Windows XP: Control Panel > Network Connections > Properties 4 On the General tab, select Internet Protocol (TCP/IP) and then click Properties. Figure 35 Windows XP: Local Area Connection Properties ZyWALL SSL 10 User’s Guide...
2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. ZyWALL SSL 10 User’s Guide...
Figure 37 Windows Vista: Start Menu 2 In the Control Panel, click the Network and Internet icon. Figure 38 Windows Vista: Control Panel 3 Click the Network and Sharing Center icon. Figure 39 Windows Vista: Network And Internet ZyWALL SSL 10 User’s Guide...
5 Right-click Local Area Connection and then select Properties. Figure 41 Windows Vista: Network and Sharing Center During this procedure, click Continue whenever Windows displays a screen saying that it needs your permission to continue. ZyWALL SSL 10 User’s Guide...
Appendix A Setting Up Your Computer’s IP Address 6 Select Internet Protocol Version 4 (TCP/IPv4) and then select Properties. Figure 42 Windows Vista: Local Area Connection Properties ZyWALL SSL 10 User’s Guide...
2 In the Command Prompt window, type "ipconfig" and then press [ENTER]. You can also go to Start > Control Panel > Network Connections, right-click a network connection, click Status and then click the Support tab to view your IP address and connection information. ZyWALL SSL 10 User’s Guide...
The screens in this section are from Mac OS X 10.4 but can also apply to 10.3. 1 Click Apple > System Preferences. Figure 44 Mac OS X 10.4: Apple Menu 2 In the System Preferences window, click the Network icon. Figure 45 Mac OS X 10.4: System Preferences ZyWALL SSL 10 User’s Guide...
Figure 46 Mac OS X 10.4: Network Preferences 4 For dynamically assigned settings, select Using DHCP from the Configure IPv4 list in the TCP/IP tab. Figure 47 Mac OS X 10.4: Network Preferences > TCP/IP Tab. ZyWALL SSL 10 User’s Guide...
Click Apply Now and close the window. Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network Interface from the Info tab. Figure 49 Mac OS X 10.4: Network Utility ZyWALL SSL 10 User’s Guide...
The screens in this section are from Mac OS X 10.5. 1 Click Apple > System Preferences. Figure 50 Mac OS X 10.5: Apple Menu 2 In System Preferences, click the Network icon. Figure 51 Mac OS X 10.5: Systems Preferences ZyWALL SSL 10 User’s Guide...
• From the Configure list, select Manually. • In the IP Address field, enter your IP address. • In the Subnet Mask field, enter your subnet mask. • In the Router field, enter the IP address of your ZyWALL. ZyWALL SSL 10 User’s Guide...
6 Click Apply and close the window. Verifying Settings Check your TCP/IP properties by clicking Applications > Utilities > Network Utilities, and then selecting the appropriate Network interface from the Info tab. Figure 54 Mac OS X 10.5: Network Utility ZyWALL SSL 10 User’s Guide...
2 When the Network Settings window opens, click Unlock to open the Authenticate window. (By default, the Unlock button is greyed out until clicked.) You cannot make changes to your configuration unless you first enter your admin password. Figure 56 Ubuntu 8: Network Settings > Connections ZyWALL SSL 10 User’s Guide...
7 If you know your DNS server IP address(es), click the DNS tab in the Network Settings window and then enter the DNS server information in the fields provided. Figure 60 Ubuntu 8: Network Settings > DNS 8 Click the Close button to apply the changes. ZyWALL SSL 10 User’s Guide...
Check your TCP/IP properties by clicking System > Administration > Network Tools, and then selecting the appropriate Network device from the Devices tab. The Interface Statistics column shows data if your connection is working properly. Figure 61 Ubuntu 8: Network Tools ZyWALL SSL 10 User’s Guide...
Figure 62 openSUSE 10.3: K Menu > Computer Menu 2 When the Run as Root - KDE su dialog opens, enter the admin password and click OK. Figure 63 openSUSE 10.3: K Menu > Computer Menu ZyWALL SSL 10 User’s Guide...
Figure 64 openSUSE 10.3: YaST Control Center 4 When the Network Settings window opens, click the Overview tab, select the appropriate connection Name from the list, and then click the Configure button. Figure 65 openSUSE 10.3: Network Settings ZyWALL SSL 10 User’s Guide...
Select Statically assigned IP Address if you have a static IP address. Fill in the IP address, Subnet mask, and Hostname fields. 7 Click Next to save the changes and close the Network Card Setup window. ZyWALL SSL 10 User’s Guide...
8 If you know your DNS server IP address(es), click the Hostname/DNS tab in Network Settings and then enter the DNS server information in the fields provided. Figure 67 openSUSE 10.3: Network Settings 9 Click Finish to save your settings and close the window. ZyWALL SSL 10 User’s Guide...
Figure 68 openSUSE 10.3: KNetwork Manager When the Connection Status - KNetwork Manager window opens, click the Statistics tab to see if your connection is working properly. Figure 69 openSUSE: Connection Status - KNetwork Manager ZyWALL SSL 10 User’s Guide...
Page 68
Appendix A Setting Up Your Computer’s IP Address ZyWALL SSL 10 User’s Guide...
In this appendix, you can import a public key certificate for: • Internet Explorer on page 70 • Firefox on page 78 • Opera on page 83 • Konqueror on page 89 ZyWALL SSL 10 User’s Guide...
Figure 70 Internet Explorer 7: Certification Error 2 Click Continue to this website (not recommended). Figure 71 Internet Explorer 7: Certification Error 3 In the Address Bar, click Certificate Error > View certificates. Figure 72 Internet Explorer 7: Certificate Error ZyWALL SSL 10 User’s Guide...
Appendix B Importing Certificates 4 In the Certificate dialog box, click Install Certificate. Figure 73 Internet Explorer 7: Certificate 5 In the Certificate Import Wizard, click Next. Figure 74 Internet Explorer 7: Certificate Import Wizard ZyWALL SSL 10 User’s Guide...
Figure 76 Internet Explorer 7: Certificate Import Wizard 8 In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK. Figure 77 Internet Explorer 7: Select Certificate Store ZyWALL SSL 10 User’s Guide...
9 In the Completing the Certificate Import Wizard screen, click Finish. Figure 78 Internet Explorer 7: Certificate Import Wizard 10 If you are presented with another Security Warning, click Yes. Figure 79 Internet Explorer 7: Security Warning ZyWALL SSL 10 User’s Guide...
12 The next time you start Internet Explorer and go to a ZyXEL web configurator page, a sealed padlock icon appears in the address bar. Click it to view the page’s Website Identification information. Figure 81 Internet Explorer 7: Website Identification ZyWALL SSL 10 User’s Guide...
2 In the security warning dialog box, click Open. Figure 83 Internet Explorer 7: Open File - Security Warning 3 Refer to steps 4-12 in the Internet Explorer procedure beginning on page 70 to complete the installation process. ZyWALL SSL 10 User’s Guide...
1 Open Internet Explorer and click Tools > Internet Options. Figure 84 Internet Explorer 7: Tools Menu 2 In the Internet Options dialog box, click Content > Certificates. Figure 85 Internet Explorer 7: Internet Options ZyWALL SSL 10 User’s Guide...
5 In the Root Certificate Store dialog box, click Yes. Figure 88 Internet Explorer 7: Root Certificate Store 6 The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. ZyWALL SSL 10 User’s Guide...
3 The certificate is stored and you can now connect securely to the web configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information. Figure 90 Firefox 2: Page Info ZyWALL SSL 10 User’s Guide...
Firefox 2: Select File 5 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information. ZyWALL SSL 10 User’s Guide...
This section shows you how to remove a public key certificate in Firefox 2. 1 Open Firefox and click Tools > Options. Figure 95 Firefox 2: Tools Menu 2 In the Options dialog box, click Advanced > Encryption > View Certificates. Figure 96 Firefox 2: Options ZyWALL SSL 10 User’s Guide...
4 In the Delete Web Site Certificates dialog box, click OK. Figure 98 Firefox 2: Delete Web Site Certificates 5 The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. ZyWALL SSL 10 User’s Guide...
3 The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details. Figure 100 Opera 9: Security information ZyWALL SSL 10 User’s Guide...
1 Open Opera and click Tools > Preferences. Figure 101 Opera 9: Tools Menu 2 In Preferences, click Advanced > Security > Manage certificates. Figure 102 Opera 9: Preferences ZyWALL SSL 10 User’s Guide...
3 In the Certificates Manager, click Authorities > Import. Figure 103 Opera 9: Certificate manager 4 Use the Import certificate dialog box to locate the certificate and then click Open. Figure 104 Opera 9: Import certificate ZyWALL SSL 10 User’s Guide...
Figure 106 Opera 9: Install authority certificate 7 The next time you visit the web site, click the padlock in the address bar to open the Security information window to view the web page’s security details. ZyWALL SSL 10 User’s Guide...
This section shows you how to remove a public key certificate in Opera 9. 1 Open Opera and click Tools > Preferences. Figure 107 Opera 9: Tools Menu 2 In Preferences, Advanced > Security > Manage certificates. Figure 108 Opera 9: Preferences ZyWALL SSL 10 User’s Guide...
4 The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. There is no confirmation when you delete a certificate authority, so be absolutely certain that you want to go through with it before clicking the button. ZyWALL SSL 10 User’s Guide...
Figure 111 Konqueror 3.5: Server Authentication 4 Click the padlock in the address bar to open the KDE SSL Information window and view the web page’s security details. Figure 112 Konqueror 3.5: KDE SSL Information ZyWALL SSL 10 User’s Guide...
Figure 115 Konqueror 3.5: Kleopatra 3 The next time you visit the web site, click the padlock in the address bar to open the KDE SSL Information window to view the web page’s security details. ZyWALL SSL 10 User’s Guide...
4 The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. There is no confirmation when you remove a certificate authority, so be absolutely certain you want to go through with it before clicking the button. ZyWALL SSL 10 User’s Guide...
ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
Page 94
Registration Register your product online to receive e-mail notices of firmware upgrades and information at www.zyxel.com for global products, or at www.us.zyxel.com for North American products. ZyWALL SSL 10 User’s Guide...