Zyxel ZyWALL USG 2000 [78/150] What can go wrong

Chapter 4 Create Secure Connections Across the Internet

ZyWALL USG 20-2000 User’s Guide

Figure 33 SSL VPN

• Click Configuration > Object > SSL Application and configure an SSL application object to

specify the type of application and the address of the local computer, server, or web site SSL

users are to be able to access.

• Click Configuration > VPN > SSL VPN > Access Privilege to configure SSL access policies.

•Use the Configuration > VPN > SSL VPN > Global Setting screen to set the IP address of the

ZyWALL (or a gateway device) on your network for full tunnel mode access, enter access

messages or upload a custom logo to be displayed on the remote user screen.

Remote users can access resources on the local network using one of the following methods:

• Using a supported web browser

Once you have successfully logged in through the ZyWALL, you can access intranet sites, web-

based applications, or web-based e-mails using one of the supported web browsers.

• Using the ZyWALL SecuExtender client

Once you have successfully logged into the ZyWALL, if the SSL VPN access policy has network

extension enabled the ZyWALL automatically loads the ZyWALL SecuExtender client program to

your computer. With the ZyWALL SecuExtender, you can access network resources, remote

desktops and manage files as if you were on the local network.

4.5.1 What Can Go Wrong

• If you uploaded a logo to show in the SSL VPN user screens but it does not display properly,

check that the logo graphic is in GIF, JPG, or PNG format. The graphic should use a resolution of

103 x 29 pixels to avoid distortion when displayed. The ZyWALL automatically resizes a graphic

of a different resolution to 103 x 29 pixels. The file size must be 100 kilobytes or less.

Transparent background is recommended.

• If users can log into the SSL VPN but cannot see some of the resource links check the SSL

application object’s configuration.

• If the user account is not included in an SSL VPN access policy, the ZyWALL redirects the user to

the user aware screen.

• Operating system and browser requirements for the remote user’s computer:

• Windows 7 (32 or 64-bit), Vista (32 or 64-bit), 2003 (32-bit), XP (32-bit), or 2000 (32-bit)

• Internet Explorer 7 and above or Firefox 1.5 and above

• Using RDP requires Internet Explorer

• Sun’s Runtime Environment (JRE) version 1.6 or later installed and enabled.

• Changing the HTTP/HTTPS configuration disconnects SSL VPN network extension sessions. Users

need to re-connect if this happens.

Web Mail File Share

Web-based Application

https://

Application Server

Non-Web

LAN (192.168.1.X)