ZyXEL Communications SSL 10 Manuel utilisateur

Integrated SSL-VPN

Appliance

zywall

ssl 10

Professional Integrated SSL-VPN Appliance

for Small and Medium-sized businesses

Clientless Secure Remote Access

Seamless Integration behind the

Existing Firewall Infrastructure

UTM Security Integration Deployed

Alongside ZyWALL UTM

Supporting AD/LDAP/RADIUS and

Two-factor Authentication

ZyWALL SSL-VPN SecuExtender

Technology

Unified Policy Management with

Object-Based Configuration

Endpoint Security Support

Dual-Mode (NAT-/DMZ-Mode)

Installation with Setup Wizard

Benefits

Clientless Secure Remote Access

The ZyWALL SSL 10 is an integrated SSL-VPN appliance designed for small and medium-sized organizations

with simple, secure and clientless remote access to the resources on corporate networks.

Remote access has never been so easy since no client software is required on users’ laptops.They are

enabled to access corporate applications or shared files with just standard Web browsers, no pre-installed

or pre-configured VPN software is needed. Better yet,administrators can reduce the costly support tasks

involved in deploying,configuring and updating VPN software.

Highly Integrated Capabilities on Existing Network Infrastructure

The ZyWALL SSL 10 fits seamlessly into any network topology and can be easily deployed alongside almost

any third-party firewall as a secure remote access solution.This enables you to leverage the existing

network infrastructure without the need to purchase additional hardware.When deployed alongside a

ZyWALL UTM running Anti-Virus and IDP Service, the ZyWALL SSL 10 utilizes the powerful UTM technology

to scan traffics for malicious threats such as viruses, worms,Trojans and spyware.

Comprehensive End-User Authentication Mechanism

The ZyWALL SSL 10 supports not only the internal database, but also various backend user repositories

such as Microsoft Active Directory, LDAP and RADIUS to seamlessly integrate with the existing user

database. ZyWALL SSL 10 supports the Two-factor Authentication method that requires two independent

pieces of information to recognize identity and grant privileges.Two-factor Authentication is stronger and

more rigorous than the traditional password authentication that requires only one factor (the user

password), and it is especially useful for protecting against threats from keylogger programs.

ZyWALL-SSLVPN SecuExtender Technology

ZyWALL SSL 10 provides powerful capability to seamlessly access any corporate network resource by

transparently pushing a downloadable thin client (ZyWALL-SSLVPN SecuExtender) to users’ desktops or

laptops. Administrators can allow specific user groups (such as employees) to create IPSec-like network

tunnels for accessing any resource,while other user groups (such as customers, vendors or partners) may

access restricted applications and resources listed only on the user portal.

Clientless Secure Remote Access

Highly Integrated Capabilities on Existing Network Infrastructure

Unified Policy Management with Object-Based Configuration

The ZyWALL SSL 10 provides the ability for administrators to define objects such as user groups,network address ranges or applications.When security policies

are changed,administrators can modify the pre-defined objects and propagate the changes instantly without redefining rules, enabling businesses to

implement and manage security policies easily and consistently.

For example, administrators can create one policy for the Sales group to access general applications, and create another for R&D to access confidential design

documents in addition to the general elements.

Endpoint Security Support

Remote access enables more users to take advantage of the network from potentially risky end points and devices, including wireless hotspots and unmanaged

PDAs; however the risk could render access management through user identity simply insufficient.To effectively control network access, ensure secure

communications and reinforce data protection, more attention need to be paid to the security level of user environments.

The ZyWALL SSL 10 provides endpoint security features to enhance protection by detecting the presence of required processes (e.g. virus scan, personal

firewalls, OS patch levels,registry settings, etc.) on the client PC as well as the browser cache cleaner.

Dual-Mode (NAT-/DMZ-Mode) Installation with Setup Wizard

With the ability to shorten the initial setup procedure to less than 10 minutes,the two-scenario Setup Wizard helps administrators to easily configure the device

and reduce the administration cost.The ZyWALL SSL 10 can be easily deployed at the network gateway as a one-box Firewall/SSL-VPN device,or alongside any

third-party firewall as a secure remote access solution.

ł

Using standard browser to access Internal network applications

ł

Using standard browser to access Internal file-sharing folder

ZyWALL UTM or

Third-party firewall

ee o

ome

ute

Web-based

Application

Application Server

(Inventory, Store...)

OA, ERP System

CRM System

ee Laptop

n Airport Kios

n H

utho

rize

ner

utho

rize

Custo

mer

Firewall LAN Zone

Network ExtendRemote DesktopFile Share

Email Server BI System

ZyWALL UTM provides

Anti-Virus/IDP inspection

on SSL-VPN traffic

Internet

Encrypted Decrypted

DMZ

LAN

WAN

Comprehensive End-User Authentication Mechanism

ZyWALL-SSLVPN SecuExtender Technology

Unified Policy Management with Object-Based Configuration

ł

Restricted Access: Extranet Application for Partners, customers

ł

Full Access: Intranet Application for Employees

cy 1 (Sales

)

ocal Database

ser Group

Act

ve D

rector

RADI

User Group

ern

atabas

ZyWALL SSL VPN

yXEL Two-Factor Authentication

erver

or ZyWALL OT

Internet

(1) One-factor (Username/Password)

(2) ZyWALL OTP (One-Time Password)

Object Database

Pol

cy 2 (R&D

)

User 3 Application 1 IP Pool 3 Network 1

User 1 Application 1 IP Pool 1 Network 1

User 2 Application 2 IP Pool 2 Network 2

User 3 Application 3 IP Pool 3 Network 3

User 4 Application 4 IP Pool 4 Network 4

User 4 Application 3

User 1 Application 1 IP Pool 1 Network 1

User 2

Network 3

Endpoint Security Support

Dual-Mode (NAT-/DMZ-Mode) Installation with Setup Wizard

Internet

Remote Users

ZyWALL SSL VPN

DMZ Mode:

oye

Firewa

(

at DMZ

ort of Firewall

)

NAT Mode:

eplo

ed at networ

atewa

as one-

olution

or NAT Router and

L-VPN Gateway

Application Diagram

For more product information, visit us on the web www.ZyXEL.com

65-100-002501G 02/07

product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.

Main Offic

emote O

ice

Employee on

Home Computer

Web-based

Application

Application Server

(Inventory, Store...)

OA, ERP System

CRM System

Employee Laptop in

Airport Kiosk or in Hotel

Employee Laptop in

Airport Kiosk or in Hotel

SSL-VPN

Tunnel

SSL-VPN

Tunnel

SSL-VPN

Tunnel

SSL-VPN

Tunnel

Authorized Partner

Authorized Customer

Internet

Main Office LAN Resource

Network ExtendRemote DesktopFile Share

File Share

Email Server BI System

Remote Office

LAN Resource

OA, ERP System

CRM System

Network ExtendRemote Desktop

ZyWALL SSL 10

Employee on

Home Computer

Web-based

Application

Application Server

(Inventory, Store...)

OA, ERP System

CRM System

Employee Laptop in

Airport Kiosk or in Hotel SSL-VPN

Tunnel

SSL-VPN

Tunnel

SSL-VPN

Tunnel

Authorized Partner

Authorized Customer

LAN Resource

Network ExtendRemote DesktopFile Share

Email Server BI System

Deployed behind Firewall

DMZ Mode:

Deployed at Network Gateway

NAT Mode:

ZyWALL UTM provides

Anti-Virus/IDP inspection

on SSL-VPN traffic

One-box solution

for NAT Router and

SSL-VPN Gateway

Internet

Specifications

System Specifications

Mode of Deployment

• NAT Mode

• DMZ Mode

Networking

• WAN: PPPoE, Static, DHCP

• LAN: DHCP Server

• NAT

SSL VPN

• SSL VPN Tunnel:10, 25 (Optional Upgrade)

• SSL Protocol:SSL v2, SSL v3,TLS 1.0

• Encryption: DES, 3DES, RC4 (128), AES (128,

256), IDEA, ADH, DH, DHE, RSA, DSS, CBC, 3CBC,

MD5, SHA-1

SSL-VPN Access Mode

• Reverse Proxy Mode

• Port Forwarding Mode

• Full Tunnel Mode

Authentication

• Internal user database

• RADIUS

• LDAP

• Microsoft Active Directory

• Two-factor Authentication

Certification

• Self-signed

• External CA

Application Support

• Web Application:Web Server, Internet Email,

OWA

• Non Web-based Application: HTTP, HTTPS, FTP,

Telnet, TFTP, SMTP, SMTPS, IMAP, IMAPS, VNC,

RDP, NTP, SSH, SQUID, CIFS, POP3, POP3S

• File-Sharing:Web-based CIFS

• Full Network Access via ZyWALL-SSLVPN

SecuExtender: Any TCP/IP based application

(ICMP, VoIP, IMAP, POP, SMTP, etc.)

Browser Support

• Internet Explorer version 5.5 with MSXML,

version 6 and above.

• Netscape version 7.2 and above

• Mozilla 1.7.3 and above

• Firefox 1.0 and above

Security

• User-/Group-based Policy Control

• User-/Group-based Access Control

• User-/Group-based IP Pools

• User-/Group-based Routing

• User-/Group-based Application List

• User-/Group-based Endpoint Integrity Check

• Cache Cleaning

System Management

• Web GUI

• Dual-mode Setup Wizard

• Dashboard

• Email Notification

• Real-time Monitoring

• Logs

• Report

• NTP Support

Hardware Specifications

• Processor: 266 MHz with cryptographic

accelerator

• Memory (Flash/DRAM): 128 MB/128 MB

• Status LED Indicator: PWR, SYS

• Reset Button:Yes

• WAN: 10/100 Auto MDI/MDIX

• LAN: 4-Port Switch, 10/100 Auto MDI/MDIX

• Console: RS 232 DB9 Connector

• Power: 12 VDC

• Max Power Assumption: 7.5 W

• Warranty: Two years

Physical Specifications

• Dimensions: 242.0 (W) x 75.0 (D) x 35.5 (H) mm

• Weight: 1,200 g

Environmental Specifications

• Operation Environment:

- Temperature: 0°C ~ 50°C

- Humidity: 20% ~ 95%

• Storage Environment:

- Temperature: -30°C ~ 60°C

- Humidity: 20% ~ 95%

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels ZyXEL Communications Routeur réseau

ZyXEL Communications

ZyXEL Communications Prestige 681 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VMG3927-B 0A Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-2602R-D1A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications WSQ60 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications IES-1248-51V Manuel utilisateur

ZyXEL Communications

ZyXEL Communications NBG318S v2 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications WAH7130 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-2602H-D1A Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 650H-E Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-2812HNU-51c Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Dimension ES-116P Guide de référence

ZyXEL Communications

ZyXEL Communications GS1100-8HP Manuel utilisateur

ZyXEL Communications

ZyXEL Communications PRESTIGE 128 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications NBG4604 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 2602R Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications NBG4115 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ARMOR G5 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-2812HNU-51c Manuel

ZyXEL Communications

ZyXEL Communications NU-AP699E9N3 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 642R Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications Prestige 2864I Manuel utilisateur

ZyXEL Communications

ZyXEL Communications VES-1000 Series Manuel utilisateur

ZyXEL Communications

ZyXEL Communications P-335 Plus Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZyXEL EES-1024AF Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité