ZyXEL Communications USG-300 - V2.20 ED 2, Руководство пользователя

Страница: 844 / 1149

Chapter 50 System
ZyWALL USG 300 User’s Guide
844
Server Port The HTTPS server listens on port 443 by default. If you change the
HTTPS server port to a different number on the ZyWALL, for example
8443, then you must notify people who need to access the ZyWALL
Web Configurator to use “https://ZyWALL IP Address:
8443 ” as the
URL.
Authenticate Client
Certificates Select Authenticate Client Certificates (optional) to require the
SSL client to authenticate itself to the ZyWALL by sending the
ZyWALL a certificate. To do that the SSL client must have a CA-
signed certificate from a CA that has been imported as a trusted CA
on the ZyWALL (see
Section 50.7.7.5 on page 852 on importing
certificates for details).
Server Certificate Select a certificate the HTTPS server (the ZyWALL) uses to
authenticate itself to the HTTPS client. You must have certificates
already configured in the
My Certificates screen.
Redirect HTTP to
HTTPS To allow only secure Web Configurator access, select this to redirect
all HTTP connection requests to the HTTPS server.
Admin/User
Service Control Admin Service Control specifies from which zones an administrator
can use HTTPS to manage the ZyWALL (using the Web Configurator).
You can also specify the IP addresses from which the administrators
can manage the ZyWALL.
User Service Control specifies from which zones a user can use
HTTPS to log into the ZyWALL (to log into SSL VPN for example). You
can also specify the IP addresses from which the users can access
the ZyWALL.
Add Click this to create a new entry. Select an entry and click Add to
create a new entry after the selected entry.
Edit Double-click an entry or select it and click Edit to be able to modify
the entry’s settings.
Remove To remove an entry, select it and click Remove . The ZyWALL
confirms you want to remove it before doing so. Note that
subsequent entries move up by one when you take this action.
Move To change an entry’s position in the numbered list, select the method
and click
Move to display a field to type a number for where you
want to put it and press [ENTER] to move the rule to the number
that you typed.
# This is the index number of the service control rule.
The entry with a hyphen (-) instead of a number is the ZyWALL’s
(non-configurable) default policy. The ZyWALL applies this to traffic
that does not match any other configured rule. It is not an editable
rule. To apply other behavior, configure a rule that traffic will match
so the ZyWALL will not have to use the default policy.
Zone This is the zone on the ZyWALL the user is allowed or denied to
access.
Address This is the object name of the IP address(es) with which the
computer is allowed or denied to access.
Action This displays whether the computer with the IP address specified
above can access the ZyWALL zone(s) configured in the
Zone field
( Accept ) or not ( Deny ).
Table 243 Configuration > System > WWW > Service Control (continued)
LABEL DESCRIPTION