ZyXEL Communications ZYWALL 5 - V4.04 Manual de usuario Pagina 1

1/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. ZyXEL Firmware Release Note ZyWALL USG 50 Release 3.00(B

10/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. After WinXP SP3 Microsoft RDP Client Control is set dis

11/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. [Solution] Microsoft provides the solution to solve thi

12/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 5. [SPR: 080430468] Since F/W version 2.11  Design [Sy

13/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 1) PC environment: Windows XP with SP3, using IE7 as bro

14/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. [Symptom] When rename system name, the USB storage can no

15/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. a) Open Firefox and input URL with “about:config” b) In

16/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. [Symptom] When there are more than 10000 sessions in DUT,

17/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Features: Modifications in 3.00(BDS.4)C0 – 2013/01/18 1.

18/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. ESET_NOD32_AntiVirus_5 Kaspersky Anti-Virus 7

19/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 3. Reboot device 4. After rebooting,Tunnel Interface/Brid

2/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. ZyXEL ZyWALL USG 50 Release 3.00(BDS.4)C0 Release Note Da

20/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Symptom: Service Object abnormal delete Condition: 1.) Cr

21/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 5- Inactivate the firewall and activate it, PC's pin

22/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: Customer found they can use URL test on Commto

23/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 4. build L2TP will have a login deny logs.(Incorrect User

24/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: Try to access Content Filter from WEB G

25/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 5.System>DNS, add a FQDN record(on Mx Record)-

26/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 4. Receive this mail from Lan, device will generate oops.

27/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. (7) Use CLI "debug ipsec crypto-layoff enable"

28/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2.When disable SIP ALG transformation function in SIP ALG

29/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2. disable all ipsec vpn rule, then pm daemon dead. 47. [

3/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. File name: 300BDS4C0-enterprise.mib, 300BDS4C0-private.mi

30/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: Some internet environment client maybe link th

31/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Access fail 56. [BUG FIX] eITS# 120402403, SPR: 12050967

32/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 3. Change to pre-share key. I can see the logs. 60. [BUG

33/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Symptom: VPNs Unstable Condition: The customer can estab

34/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. |-----(59.124.163.148)FTP server 2. USG-100 GUI -> Net

35/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: Test topology: PC------(LAN)DUT1(WAN)PPPoE====

36/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2. Set Pre-Share key 1234 5678 wiht the space string. 3.

37/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. This one of the problem report on 120403246, in Phase 1 s

38/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Features: Modifications in 3.00(BDS.2)b1 – 2012/04/27 1.

39/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Features: Modifications in 3.00(BDS.1)C0 – 2012/03/02 Mo

4/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 8. Since BWM has been activated in system default configu

40/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Features: Modifications in 3.00(BDS.1)b1 – 2012/02/22 1.

41/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Features: Modifications in 3.00(BDS.0)C0 – 2012/02/17 1.

42/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. CLI: [no] anti-spam ip-reputation private-check activate,

43/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Enable Commtouch and BlueCoat Security Threat (unsa

44/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 4) Not Support IKE nego with certificate auth. 5) IPS

45/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 40. [ENHANCEMENT] L2TP authentication over IPSec 1) Supp

46/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 52. [ENHANCEMENT] Dashboard information enrichment 1) Top

47/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Add system default service objects: Kerberos-TCP, MS-RPC,

48/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Norton_360_V4 Norton_360_V5 Kaspersky_A

49/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. In a policy route rule with next hop is Trunk, a

5/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. a) testdomain.com 192.168.10.100 b) www.testdomain.com 192

50/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 96. [FEATURE CHANGE] WAS: NAT-T in IPSec VPN phase 1 is d

51/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 107. [BUG FIX] ITS: 54390 SPR: 110119986 Symptom: In A

52/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. SPI:0x0 seq:0x0 no rule found Condition: User

53/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 3. Check the "auto-destination and then save. It w

54/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2.2 IP Address Pool: DMZ1_SUBNET c) GUI->

55/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. b) Create a VPN connection named "test", with a

56/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2) Unplug all the LAN side wired in the device to make t

57/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 3) There will be an error messages "Fallback to las

58/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. the remote web server. Description : The remote webserve

59/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Symptom: Special ip format in Trusted Web Sites will ca

6/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 1. [SPR: 100105242, 100105292] Since F/W version 2.12 [Sy

60/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 4. Acceptable character list don't contain '\&a

61/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 1. USG300 crashes regularly and can not be reproduced lo

62/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: 1. Add an AAA server and fill in rel

63/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 2. Capture virtual interface in usb storage. 3. In usb st

64/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Insert E156G to USG then device can't detect the 3G

65/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: When device turns on SNMP service, then SNMP a

66/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Condition: a) GUI-> CONFIGURATION-> Log & Rep

67/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. c) Set DUT LAN1 as a dhcp server, and first DNS server a

68/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. c) Enter OK, it will show warning message like "

69/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. downloaded spreads wide between 100Mbyte to 1.2Gbyte. The

7/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. 6) After DPD triggered on ZyWALL-B, the VPN Connection wi

70/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved.

71/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Appendix 1. Firmware upgrade / downgrade procedure The f

72/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Appendix 2. SNMPv2 private MIBS support SNMPv2 private MI

73/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. Appendix 3. Firmware Recovery In some rare situation, ZyW

74/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved.  The message here could be “Invalid Firmware”. However

75/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved.  Enter atkz –f –l 192.168.1.1 performing the “Restore F

76/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved.  The console session displays “Firmware received” after

8/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. This problem caused by MS KB958469/958470/958471/956744.

9/76 www.zyxel.com © Copyright 1995-2013, ZyXEL Communications Corp. All rights reserved. More information can see Microsoft Support Site: http://