
ZyXEL Confidential
404XD3C0.docx
103/181
addesses.
Usage of CLI command: ipsec build<secure gateway> <local IP address>
<remote IP address> <Nailed-Up> <num> <Control ping> in which
5. [ENHANCEMENT]
Add direction matrix setting in Firewall/AV/AS/IDP.
6. [ENHANCEMENT]
Chage weighting of Anti SPAM servers based on average time and fail rate.
7. [ENHANCEMENT]
(1) Add CI command to see the runtime data for AntiSpam.
"as display runtimedata <all|black|white> [all|ip|mime|email|subject]"
(2) Wildcard support for subject and email fields in black list and white list.
1. Support "*" to indicate match any character 0 or more times.
2. It is case-insensitive.
3. The maximum length of the email and subject fields is 63 characters.
8. [ENHANCEMENT]
Add PKCS12 for ZyNOS.
9. [ENHANCEMENT]
WLAN Zone enhancement.
(1) ZyWALL has an independent WLAN Zone interface, no matter WLAN card.
(2) WLAN card is not the independent WLAN interface.
(3) WLAN card can be bridged to LAN, DMZ and WLAN Zone interface.
10. [ENHANCEMENT]
support WLAN in "ip nat routing" CI command. Turn on this option for
LAN/DMZ/WLAN, packets will be routed when it cannot match any NAT rule.
11. [ENHANCEMENT].
Add a CI command "ip alg ftpPortNum [port number]" to support a different port
number on FTP ALG. This port is an additional FTP ALG port, the original FTP
port(21) still works. Note: This CI command will not save to SPT, so user will need to
put into autoexec.net if they want to keep the setting.
12. [ENHANCEMENT]
Consolidate "Router reply ICMP packet" log.
(1) Router reply ICMP packet: ICMP(Port Unreachable).
(2) Router reply ICMP packet: ICMP(Host Unreachable).
13. [ENHANCEMENT]
Add a CI command "sys arp ackGratuitous", let ZyWALL to support gratuitous ARP
request and update MAC mapping on ARP table for the sender of this ARP request.
There are two subcommands under "ackGratuitous":
(1) "active [yes|no]": Let ZyWALL accept gratuitous ARP request.
(2) "forceUpdate [on|off]" If zywall ARP table already had target IP address ARP
entry, forceUpdate option will update the exist MAC mapping to new one.
14. [FEATURE CHANGE]
WAS: The ZyWALL uses a fixed NTP server list with 10 NTP servers to adjust the
system time.
IS: Use 0.pool.ntp.org, 1.pool.ntp.org, 2.pool.ntp.org instead of specific NTP servers
to adjust the system time.
The pool.ntp.org is a virtual cluster of timeservers, it uses a round robin way to
Comentarios a estos manuales