1. ZyNOS Features Update

• NAT over IPSec

More 3G Card Support (ZyWALL 2WG)

Content Filter Multiple Policy

Customer Application

Host-based Load Balance

Support SCEP via an RA

Auto Diagnosis

GUI Enhancement

2. 1. NAT over IPSec Virtual network NAT over IPSec Setup Private network 3. 2. More 3G Card Support(ZyWALL 2WG) 4. 3. Content Filter Multiple Policy

Administrator can setup different CF policies and applies to different groups.

Each policy contains:

• IP Group sites belong to different groups

• Web Browsing Restrict web features & web site categories

• Customization Trusted/Forbidden web sites and URL keyword blocking

• Schedule When the filter policy works

5. 3. Content Filter Multiple Policy Internet Game Web Sites News/Computer Web Sites 13:30:30 Adult/Gambling Web Sites Financial Web Sites Blocked: Every one, all time, every day 6. 3. Content Filter Multiple Policy Game Web Sites News/Computer Web Sites Adult/Gambling Web Sites Financial Web Sites Schedule to block: 08:00 ~ 18:00, every day every one 19:30:30 Internet 7. 3. Content Filter Multiple Policy 19:30:30 Game Web Sites News/Computer Web Sites Adult/Gambling Web Sites Financial Web Sites Internet Schedule to block: All time, every day, But someone has no such restriction 8. 3. Content Filter Multiple Policy Game Web Sites News/Computer Web Sites Adult/Gambling Web Sites Financial Web Sites Every one can access these kinds of web site, in any time Internet 9. 3. Content Filter Configuration - GUI General External Database Customization Schedule Delete Insert a new profile 10. 3. CF Configuration - General Insert/Modify IP Group Modify Web Feature 11. 3. CF Configuration - External Database Edit External Database 12. 3. CF Configuration - Customization Edit Customization 13. 3. CF Configuration - Schedule Edit Schedule Two time segments 14. 4. Customer Application

User could define different port numbers to serve applications.

Device could monitor those application defined by customers.

15. 5. Host-based Load Balance

In practice, the access of one web page, may be accomplished by many TCP sessions to access different parts on different locations

Host-based Load Balance forced outbound traffic to go through the same WAN interface within a specific time period

2. Redirect client request and information to file server and send information to it. 3. Failed get file because theWAN load-balance function WAN1 WAN2 LAN 1. Client Send HTTP Request to retrieve file. User Client 4. Client successfully get the file through WAN1 port. 16. 5. Host-based Load Balance 17. 6. Support SCEP via an RA

SCEP uses PKCS #10 requests and PKCS #7 formatted responses

RA, Registration Authority

Be used to encrypted the PKCSReq message Be used to verify the CertRep message 18. 7. Auto Diagnosis

Customers need a more convenient method to grab diagnostic information

ZyWALL integrates diagnosis and E-mail system

19. 8. GUI Enhancement

Firewall GUI Enhancement

VPN GUI Enhancement

Support SCEP via an RA

Add Anti-Spam Wizard

20.

Default Rule Setup Page

• Added new Edit icon

8. GUI Enhancement: Firewall 1/2 Edit 21. 8. GUI Enhancement: Firewall 2/2

Rule Summary Setup Page

• Added Packet Direction

• Added new Move and Insert Icon

Insert Move 22. 8: GUI Enhancement: VPN

Edit or Delete a IPSec Rule (Network Policy) from the IKE Rule (Gateway Policy)

Delete Edit 23. 8: GUI Enhancement: Anti-Spam Wizard 1/5

AS Wizard will help the administrator to quickly configure the direction to check mail traffic on ZyWALL

24. 8: GUI Enhancement: Anti-Spam Wizard 2/5 25. 8: GUI Enhancement: Anti-Spam Wizard 3/5 Click here to setup where the e-mail server(s) located 26. 8: GUI Enhancement: Anti-Spam Wizard 4/5 ZyWALL system will give recommendations 27. 8: GUI Enhancement: Anti-Spam Wizard 5/5 Administrators could fine-tuned base on their own demand