Zyxel ZyWALL USG 2000 — обеспечение безопасности SSL VPN с помощью EPS для клиентов [66/185]

Превью страниц Страница 66 / 185

ZyWALL USG Support Notes

After the client pass the USG authentication and EPS checking, the USG will grant

the client access to the internet.

2.3. Deploy EPS in SSL VPN

In SSL VPN application, some SSL VPN clients may not have anti-virus software

installed. They may have some virus. If they access HQ network resources through

SSL VPN, they may propagate virus to the HQ network. HQ network administrator

can utilize EPS to restrict SSL VPN clients that only comply with certain security

criterion can build SSL VPN with the HQ USG.

2.3.1. Application Scenario

Internet clients can access HQ resources by building SSL VPN to HQ USG. To

prevent any SSL VPN client from bringing virus to HQ network, administrator can

enable EPS check in SSL VPN policy, to allow only clients that have anti-virus

software installed to build SSL VPN tunnel to USG.