Zyxel-communications 5 Series Manual do Utilizador descarregar pdf (Página 117)

ZyWALL 5/35/70 Series User’s Guide

Chapter 4 Tutorial 117

Figure 42 SECURITY > VPN > VPN Rules (IKE): With Gateway Policy Example

4 Use this screen to specify which computers behind the routers can use the VPN tunnel.

Configure the fields that are circled as follows and click Apply. You may notice that the

example does not specify the port numbers. This is due to the following reasons.

• While FTP uses a control session on port 20, the port for the data session is not

fixed. So this example uses the firewall’s FTP application layer gateway (ALG) to

handle this instead of specifying port numbers in this VPN network policy.

• The firewall provides better security because it operates at layer 4 and checks traffic

sessions. The VPN network policy only operates at layer 3 and just checks IP

addresses and port numbers.

Sem comentários

Zyxel-communications 5 Series Manual do Utilizador Página 117