Zyxel ZyWALL USG 20 [72/185] Deploy aaa and eps in ssl vpn

ZyWALL USG Support Notes

2.4. Deploy AAA and EPS in SSL VPN

2.4.1. Application Scenario

In the scenario below, there‟re sales group users and CSO support group users in the

AD server. Support users and sales users can access company resources by building

SSL VPN to the company gateway USG.

The company requires that support users and sales users access different network

resources. For example, the support can only access company support fileshares, and

sales can only access company sales fileshares. So network administrator can

configure different SSL VPN rules for different group users. Also network

administrator can deploy different EPS checking policies for different SSL VPN rules.

For example, he/she can deploy EPS check for sales, while not deploying EPS check

for support.

2.4.2. Configuration Steps

Step1. On AD server, add users/groups in AD server.

Go to Start > Administrative Tools >Active Directory user and computer.