ZyXEL Communications ZYWALL 5 - V4.04 Betriebsanweisung

ZyXEL Confidential 404XD3C0.docx 1/181 ZyXEL Firmware Release Note ZyWALL 5 Release 4.04(XD.3)C0 Date: Nov. 4, 2008 A

ZyXEL Confidential 404XD3C0.docx 10/181(5) In eWC>ADVANCED>UPnP>Ports, there is only one port mapping rule of uTorrent, of which protocol is

ZyXEL Confidential 404XD3C0.docx 100/181(4) Disable Firewall. (5) PC1 ftp to PC2, and then PC2 ftp to PC1. (6) PC2 disconnects ftp session and then re

ZyXEL Confidential 404XD3C0.docx 101/181 Global Start IP= 4.4.4.4 Global End IP= 5.5.5.5 (3) Click "Apply" button, then ZyWALL cras

ZyXEL Confidential 404XD3C0.docx 102/181 IKE: Static rule, enable XAUTH and set as client mode. IPSEC Policy: Local=Single 1.1.1.1, Remote=Si

ZyXEL Confidential 404XD3C0.docx 103/181addesses. Usage of CLI command: ipsec build<secure gateway> <local IP address> <remote IP addr

ZyXEL Confidential 404XD3C0.docx 104/181provide different NTP server to clients. 15. [ENHANCEMENT] Device will detect if Turbo Card is instered or no

ZyXEL Confidential 404XD3C0.docx 105/181Add a CI command "ip arp ackGratuitous", let ZyWALL to support gratuitous ARP request and update MAC

ZyXEL Confidential 404XD3C0.docx 106/181(2) "sys md5 <string>" Input a string, it will output the md5 code. 4. [ENHANCEMENT] Add CI c

ZyXEL Confidential 404XD3C0.docx 107/181IKE: Nail-up is ON Local: Subnet Type 192.168.167.0/24 Peer: Subnet Type 192.168.1.0/24 (2) On ZW70, s

ZyXEL Confidential 404XD3C0.docx 108/181Modifications in V4.00(XD.4) | 12/15/2005 Modify for formal release. Modifications in V4.00(XD.4)b1| 12/13/20

ZyXEL Confidential 404XD3C0.docx 109/181 WAN:10.0.0.3 LAN:192.168.169.0/24 VPN settings: Branch_A Local IP address 192.168.167.0/24

ZyXEL Confidential 404XD3C0.docx 11/181Condition: Upload the 4.04 pre-version FW, for example,4.04 patch1 and reset to default romfile Update the sign

ZyXEL Confidential 404XD3C0.docx 110/181different subnet with the mail client. Condition: Topology: Mail Server(192.168.12.123/24)---Internet----Devi

ZyXEL Confidential 404XD3C0.docx 111/181PC1----------(LAN)ZW35A(WAN)===Internet===(WAN)ZW35B(LAN)--------PC2 192.168.1.1/24 |

ZyXEL Confidential 404XD3C0.docx 112/1816. [BUG FIX] 051018403 Symptom: PPTP (GRE) cannot pass through NAT. Condition: PPTP Server(192.168.1.

ZyXEL Confidential 404XD3C0.docx 113/181 (4) ZyWALL memory leaks. 5. [BUG FIX] 050922955 Symptom: After updating signature, sometimes the serv

ZyXEL Confidential 404XD3C0.docx 114/181DUT2 to DUT1, it should show W to L logs, but it show W to W logs. Condition: PC1-------LAN DUT1 WAN-----

ZyXEL Confidential 404XD3C0.docx 115/181(2) Change DUT to bridge mode without configure DNS server. (3) PC1 on LAN open a website, and IE would show “

ZyXEL Confidential 404XD3C0.docx 116/181(5) ZyWALL sends [HASH][DEL] to 2nd VPN peer only every 2 minutes which is output Idle time-out timer. 7. [B

ZyXEL Confidential 404XD3C0.docx 117/181 (2) Try (1) more times and sometimes cannot be resolved. 4. [BUG FIX] 050819842 Symptom: ZyWALL 5 will

ZyXEL Confidential 404XD3C0.docx 118/181 (1) Restore default romfile. (2) Configure the two IPSec rules shown as follow: Rule A: loca

ZyXEL Confidential 404XD3C0.docx 119/1817. [BUG FIX] 050727161 Symptom: Output idle timer should not be disabled. Condition: In eWC->VPN->Global

ZyXEL Confidential 404XD3C0.docx 12/181(4) When client receives a specific mail, ZW5 would crash. (5) Description of an example mail: The mail bod

ZyXEL Confidential 404XD3C0.docx 120/181second security gateway can't update automatically. Condition: PC1 ---- ZW5_1 (wan)----Internet ---- (wan

ZyXEL Confidential 404XD3C0.docx 121/181 (2) Download signature to device and restart. (3) In ”eWC->IDP->General”, enable IDP and activat

ZyXEL Confidential 404XD3C0.docx 122/181 (2) Enable LOGS->Reports "Collect Statistics" and "Send Raw Traffic Statistics to Syslog S

ZyXEL Confidential 404XD3C0.docx 123/181 (1) In eWC>Firewall>Rule Summary page, click "Insert" button, then click IE "Back"

ZyXEL Confidential 404XD3C0.docx 124/181network status field in SMT menu 24.1 indicates the wireless card status. Wording "WLAN" indicates t

ZyXEL Confidential 404XD3C0.docx 125/181 (2) GUI Memory bar will become red when the memory usage percentage is larger than 90% 33. [ENHANCEMENT] (

ZyXEL Confidential 404XD3C0.docx 126/18136. [ENHANCEMENT] Add centralized logs for signature updating events and errors. 37. [ENHANCEMENT] Add a c

ZyXEL Confidential 404XD3C0.docx 127/1812. [ENHANCEMENT] Support small font size on ZyWALL GUI. 3. [ENHANCEMENT] Replace the Cerberian logo

ZyXEL Confidential 404XD3C0.docx 128/18117. [ENHANCEMENT] Add sequence number and SPI in log for ESP / AH packets. 18. [ENHANCEMENT] DHCP log

ZyXEL Confidential 404XD3C0.docx 129/181to have a rule check after users click "Apply" button. It reduces the refresh time and it is more co

ZyXEL Confidential 404XD3C0.docx 13/181Topology: PC--------- (L) Device (W) --------Internet Condition: (1) Manually appoint the DNS server of PC a

ZyXEL Confidential 404XD3C0.docx 130/181 (3) In ZWB, SMT 24.8, type "ipsec sho sa", the "input idle count" in "INBOUND&q

ZyXEL Confidential 404XD3C0.docx 131/181Modifications in V 3.64(XD.2)b2 | 05/25/2005 1. [BUG FIX] 050414592 Symptom: Dynamic rule with more tha

ZyXEL Confidential 404XD3C0.docx 132/181 1. Restore default romfile. 2. WAN is configured as PPTP, and nail-up, and WAN is connected. 3. Configur

ZyXEL Confidential 404XD3C0.docx 133/181 Condition: 1. ZyWALL 5 as responder has one dynamic rule and use XAUTH. 2. Two initiators (two

ZyXEL Confidential 404XD3C0.docx 134/181 4. Unplug the WAN, and WAN is disconnected, and Dial backup is connected. 5. Plug in the WAN line again, a

ZyXEL Confidential 404XD3C0.docx 135/181IP”, Port: 500. (4) After a period time, DUT’s LAN & WAN both deathed that all traffic can’t go out. 3.

ZyXEL Confidential 404XD3C0.docx 136/181P2000W----DUT---Internat---DUT---P2000W (2) P2000W and P2000W can not talk to each other in P2P mode. 8. [BU

ZyXEL Confidential 404XD3C0.docx 137/181exceeds the max. number of session per host, but Max. Concurrent Sessions Per Host (Historical high since la

ZyXEL Confidential 404XD3C0.docx 138/181(1) Dos command ”ping 192.168.1.1 -l 2000” (2) User can not see ”ping of death” consolidation log on eWC/LOGS

ZyXEL Confidential 404XD3C0.docx 139/181(4) PC A also can ftp to DMZ ZW10W. (5) Check Picture [ZW5]Firewall W2D item 3->1 25. [BUG FIX] 050420986

ZyXEL Confidential 404XD3C0.docx 14/181Condition: (1) Setup PPTP server on Redhat Linux. (2) Create PPTP client on PC with Windows XP OS. (3) Co

ZyXEL Confidential 404XD3C0.docx 140/181 Modifications in V3.64(XD.0) | 03/04/2005 Modify for formal release. Modifications in V3.64(XD.0)b4 | 02/2

ZyXEL Confidential 404XD3C0.docx 141/181(3) Edit web eWC/VPN, add gateway policy, Name=IKE2, Remote Gateway Address=0.0.0.0, Pre-Shared Key=123

ZyXEL Confidential 404XD3C0.docx 142/181 Modifications in V3.64(XD.0)b2 | 01/31/2005 1. [BUG FIX] Symptom: The name of Domain name does not c

ZyXEL Confidential 404XD3C0.docx 143/181Symptom: The CI command ”ip nat service irc” may display strange Enable state. Condition: (1) Execute ”ip nat

ZyXEL Confidential 404XD3C0.docx 144/181Condition: (1) Use following topology to test. WiFi A–(L)ZW35(W)----Internet(SIP server)---(W)ZW5(L)--

ZyXEL Confidential 404XD3C0.docx 145/181 inactive. Rule 2 is active and encapsulation is Tunnel. (3) PC A ping PC B, check SA Monitor, ZW70 tunne

ZyXEL Confidential 404XD3C0.docx 146/181(5) However, when out of schedule about 5 minutes, device still cannot send traffic out. 24. [ENHANCE

ZyXEL Confidential 404XD3C0.docx 147/18131. [BUG FIX] Symptom: Save a legal VPN gateway policy but the ZyWALL shows an error message. Condition: (1

ZyXEL Confidential 404XD3C0.docx 148/181(4) It has the same problem when changing interface from "LAN" to "DMZ" if we do th

ZyXEL Confidential 404XD3C0.docx 149/181(4) Set DUT’s system name by SNMP tool "MG-SOFT MIB browser". (5) There is no response from DMZ anym

ZyXEL Confidential 404XD3C0.docx 15/181is checkpoint's WAN IP, the peer ID type is IP and peer ID content is "0.0.0.0". (2) A correspon

ZyXEL Confidential 404XD3C0.docx 150/181(1) Enable Firewall, setup a WAN2LAN firewall rule for H.323 service (2) Enable NAT port forwarding for port 1

ZyXEL Confidential 404XD3C0.docx 151/181entry #[number] ?" 7. [ENHANCEMENT] DNS adds CI command "ip dns system cache flush". 8. [

ZyXEL Confidential 404XD3C0.docx 152/181(2) Add a JavaScript Global function to avoid filling any character in the specific fields on both IE and Nets

ZyXEL Confidential 404XD3C0.docx 153/181name, the log will show MAC address instead of nothing. 36. [ENHANCEMENT] (1) In eWC>CONTENT FILTER>Cac

ZyXEL Confidential 404XD3C0.docx 154/181Condition: 1. Enable firewall. 2. Display TOS sessions. 3. A lot of long timeout UDP sessions. 4. [BUG FIX]

ZyXEL Confidential 404XD3C0.docx 155/1811. Create and dial up a VPN tunnel via Vantage. 2. Delete this active rule in Vantage. 3. Vantage server will

ZyXEL Confidential 404XD3C0.docx 156/1812). Add a URL to "trusted web sites". 3). In "eWC->CONTENT FILTER-Customization>, select

ZyXEL Confidential 404XD3C0.docx 157/181Symptom: MSN Messenger's "Ask for Remote Assistance" function causes system crash. Condition: 1

ZyXEL Confidential 404XD3C0.docx 158/181Condition: 1. enter SMT24.10, configure time server. 2. open daylight saving, configure the start time and end

ZyXEL Confidential 404XD3C0.docx 159/1814. Command for ALG enable/disable and sip timeout. 29. [BUG FIX] Symptom: Sometimes the ZyWALL reboots by sof

ZyXEL Confidential 404XD3C0.docx 16/1813G feature support PX-500 card. 8. [ENHANCEMENT] Modified the ESN parse error for HUAWEI EC360. 9. [FEATURE

ZyXEL Confidential 404XD3C0.docx 160/181(2) Browse EwcÆFirewallÆRule Summary (3) The ZyWALL might crash or hang. Modifications in V3.62(XD.0)b4 | 0

ZyXEL Confidential 404XD3C0.docx 161/181kbps and Scheduler = Priority-Based (2) In eWCÆBW MGMTÆClass Setup, Adds two sub-classes under WAN1 root class

ZyXEL Confidential 404XD3C0.docx 162/181(4) The telnet connection fails. 12. [BUG FIX] Symptom: System crashes. Condition: Configure device by eWC so

ZyXEL Confidential 404XD3C0.docx 163/181Condition: (1) Log in ZyWALL eWC, and go to eWCÆLAN. (2) Deliberately configure the LAN IP address as within

ZyXEL Confidential 404XD3C0.docx 164/181configuration is not available when the ZyWALL is not a DHCP server for its LAN hosts. Condition: (1) Log onto

ZyXEL Confidential 404XD3C0.docx 165/181Modifications in V3.62(XD.0)b1 | 03/11/2004 First Release.

ZyXEL Confidential 404XD3C0.docx 166/181Appendix 1 Remote Management Enhancement (Add SNMP & DNS Control) New function (1) You can change the ser

ZyXEL Confidential 404XD3C0.docx 167/181Appendix 2 Trigger Port Introduction Some routers try to get around this "one port per customer" li

ZyXEL Confidential 404XD3C0.docx 168/181internal table for this port. (This behavior is the same as we did for port forwarding.) (3) The recorded IP

ZyXEL Confidential 404XD3C0.docx 169/181Appendix 3 Hard-coded packet filter for "NetBIOS over TCP/IP" (NBT) The new set C/I commands is u

ZyXEL Confidential 404XD3C0.docx 17/181 Virtual IP 192.168.201.2, private IP 192.168.1.2, remote IP 0.0.0.0 (2) VPN client is Greenbow. (3) After

ZyXEL Confidential 404XD3C0.docx 170/181Appendix 4 Traffic Redirect/Static Route Application Note Why traffic redirect/static route be blocked by ZyW

ZyXEL Confidential 404XD3C0.docx 171/181 Figure 4-2 Gateway on alias IP network (2) Gateway on WAN side A working topology is suggested as below. Fi

ZyXEL Confidential 404XD3C0.docx 172/181 Basically the story is the same when ID type is IP. If user configures ID content, then ZyWALL will use it as

ZyXEL Confidential 404XD3C0.docx 173/1811. When Local ID Content is blank which means user doesn’t type anything here, during IKE negotiation, my ID

ZyXEL Confidential 404XD3C0.docx 174/181Appendix 8 IPSec IP Overlap Support ZyWALL BIP Alias 1.1.2.0/24LAN1.1.1.0/24LAN 1.1.2.0/28WANPCA 1.1.1.33PCB

ZyXEL Confidential 404XD3C0.docx 175/181Appendix 9 VPN Local IP Address Limitation ZyWALL BIP Alias 1.1.2.0/24LAN1.1.1.0/24LAN 1.1.2.0/28WANPCA 1.1.

ZyXEL Confidential 404XD3C0.docx 176/181ZyXEL VPN Client Security Gateway: 1.1.1.1 Phase one Authentication method: Preshare Key Remote: 192.168.1.0/2

ZyXEL Confidential 404XD3C0.docx 177/181ARP, it will update MAC mapping into the ARP table only when there is no such MAC mapping in the ARP table.

ZyXEL Confidential 404XD3C0.docx 178/181 (2)ipsec initContactMode tunnel When the ZyWALL receives a IKE packets with IC, it deletes only one exist

ZyXEL Confidential 404XD3C0.docx 179/181 In this scenario, we should have a mechanism to ensure that the second session should follow the first sessio

ZyXEL Confidential 404XD3C0.docx 18/181 10.1.1.9 10.10.10.0/24 (1) ZWA LAN: 10.1.1.0/24, ZWA as a NAT router ZWB WAN: 10.1.1.21 L

ZyXEL Confidential 404XD3C0.docx 180/181Appendix 14: The mechanism of ZyWALL IPSec policy IP conflict check: ZyWALL classifies traffic to IPSec tunne

ZyXEL Confidential 404XD3C0.docx 181/181 Policies under Static IKE rule (configuration) Policies under Dynamic IKE rule(configuration) Runtime policie

ZyXEL Confidential 404XD3C0.docx 19/181 PC1--(LAN)ZyWALL2+(PPPoE)--Cisco2811(LAN)---PC2 (1) Build VPN from ZyWALL2+ to Cisco2811. (2) Change

ZyXEL Confidential 404XD3C0.docx 2/181ZyXEL ZyWALL 5 Standard Version Release 4.04(XD.3)C0 Release Note Date: Nov. 4, 2008 Supported Platforms: Zy

ZyXEL Confidential 404XD3C0.docx 20/181 getonline?type=1&31008201:31008202:" (6) Host on the LAN accesses "www.sina.com.cn".

ZyXEL Confidential 404XD3C0.docx 21/181(2) eWC>>security->idp,enable idp,protected traffic direction=lan->wan,wan->lan (3) Ftp wan si

ZyXEL Confidential 404XD3C0.docx 22/181Modifications in V 4.04(XD.0)b5 | 03/21/2008 1. [BUG FIX] SPR ID: 080313755 Symptom: ZyWALL SMT menu refreshes

ZyXEL Confidential 404XD3C0.docx 23/181(3) Get information “Remote node [WAN 1] is connected, IP is dd783c36”. (4) The IP is strange. 6. [BUG FIX] S

ZyXEL Confidential 404XD3C0.docx 24/181(1) Rom restores (2) On SMT24.8, input command: sys tos fwSchedule active on (3) In eWC>Firewall, add a rule

ZyXEL Confidential 404XD3C0.docx 25/181can be built successfully. (4) In ZyWALL2, configure IKE rule and IPsec rule correctly except Pre-shared Key. E

ZyXEL Confidential 404XD3C0.docx 26/181cannot edit or delete. Condition: (1) Reset rom. (2) EWC>ADVANCED>BW MGMT>Summary, active bandwidth m

ZyXEL Confidential 404XD3C0.docx 27/181(6) After PC1 release this IP successfully, check eWC>>Home>>DHCP table, "PC1's MAC-->

ZyXEL Confidential 404XD3C0.docx 28/181Domains" at the leftward, then click "DNS" icon.You will see "Hostname/Alias" named &q

ZyXEL Confidential 404XD3C0.docx 29/181Enable External Database Content Filtering = selected Matched Web Pages, unselect Block, select Log Enable Repo

ZyXEL Confidential 404XD3C0.docx 3/1811300” from autoexec.net by CI command “sys edit autoexec.net”. (Upgrade from 3.62) 12. In previous 3.64 firmwar

ZyXEL Confidential 404XD3C0.docx 30/181Condition: (1) Insert Huawei E630 3G card to ZW2WG or ZW1WG with 4.04 firmware. (2) Device failed to detect E63

ZyXEL Confidential 404XD3C0.docx 31/181Symptom: Some action in CF is wrong Condition: (1) CF/General, disable Unrated Web Pages & When Content Fil

ZyXEL Confidential 404XD3C0.docx 32/181Modifications in V 4.04(XD.0)b2 | 01/07/2008 1. [ENHANCEMENT] Support following 3G cards: (1) Huawei EC360. (

ZyXEL Confidential 404XD3C0.docx 33/181 6. [ENHANCEMENT] Enhance TA agent: (1) Support Lionic IPS for Vantage CNM. (2) Fix crash bug while registerin

ZyXEL Confidential 404XD3C0.docx 34/181 13. [BUG FIX] SPR ID: 071108567 Symptom: PC under WLAN port can’t get IP form DHCP server! Condition: (1) Con

ZyXEL Confidential 404XD3C0.docx 35/181message "Duplicate MAC Address". 18. [BUG FIX] SPR ID: 071212636 Symptom: We can't search signa

ZyXEL Confidential 404XD3C0.docx 36/181NULL when domain name doesn't exist. Device shouldn’t show the Destination IP of the last time ping. Cond

ZyXEL Confidential 404XD3C0.docx 37/181eWC>settings>Send Report to = your mail account (5) Generate some IDP, Anti-Virus and Anti-Spam traffics.

ZyXEL Confidential 404XD3C0.docx 38/1813. [ENHANCEMENT] In GUI->WAN->WAN2 page, CDMA system can configure initial string. 4. [ENHANCEMENT] E

ZyXEL Confidential 404XD3C0.docx 39/181"AES192", "AES256" items. 14. [ENHANCEMENT] Support Multiple Dynamic DNS. Add 3 new dynam

ZyXEL Confidential 404XD3C0.docx 4/181(3) The host can still ping Internet using LAN DHCP address (4) The scenario will continue about 30secs. 3. Be

ZyXEL Confidential 404XD3C0.docx 40/18118. [FEATURE CHANGE] SPR ID: 070806425 WAS: Some IPSec network policies can be saved even they conflict with ea

ZyXEL Confidential 404XD3C0.docx 41/181 (Bridge mode) PC----- (LAN) ZyWALL_A (WAN) ----ZyWALL_B----Internet PC: 10.0.0.34

ZyXEL Confidential 404XD3C0.docx 42/181(3) It shows "bwengine on". 29. [BUG FIX] SPR ID: 071023274 Symptom: In eWC>Reports, device canno

ZyXEL Confidential 404XD3C0.docx 43/181(3) Then the WAN2 IP address will lose and need to renew to get the IP address. 34. [BUG FIX] SPR ID: 07101789

ZyXEL Confidential 404XD3C0.docx 44/181Call from P2002B to P2002A, SIP rule's bandwidth can’t be protected. 37. [BUG FIX] SPR ID: 070824666 Symp

ZyXEL Confidential 404XD3C0.docx 45/181(3) If you add a policy(policy name: aaa) and repeat step 2 again and it works. (4) Add another policy again(po

ZyXEL Confidential 404XD3C0.docx 46/181 Symptom: Device hang when input command "ip cf ob add trust aa.aa". Conditions: (1) Input

ZyXEL Confidential 404XD3C0.docx 47/181(9) The 3G can’t be dialed anymore and console shows “Dial Fail ***3G budget is overed.” Modifications in V

ZyXEL Confidential 404XD3C0.docx 48/181(10) 3G works only for WAN2. (11) Support Sierra Wireless AirCard AC875 , Huawei E612 / E620 for HSDPA. (12)

ZyXEL Confidential 404XD3C0.docx 49/18117. [FEATURE CHANGE] Add switch on/off user configuration into CF report service. The CLI command is: For proje

ZyXEL Confidential 404XD3C0.docx 5/181PC4(31.33)-- Configure as attached romfile. Steps: (1) DUT configures 2 IKE dynamic rules, and each attaches 2 I

ZyXEL Confidential 404XD3C0.docx 50/181(3) SIP connection can be built successfully with Customer's SIP server. (4) But SIP Traffic can't be

ZyXEL Confidential 404XD3C0.docx 51/181Symptom: We can't change the default route on ZyWALL Condition: (1) Use CI command "ip route status&q

ZyXEL Confidential 404XD3C0.docx 52/181DDNS Log is not readable. Was: DNS update IP:138.188.40.255 (host 1) successfully Is: Update domain name zywal

ZyXEL Confidential 404XD3C0.docx 53/181Symptom: The tunnel can be built, but pc can't ping peer via the tunnel in NAT over IPSec test case. Top

ZyXEL Confidential 404XD3C0.docx 54/181Condition: (1) Enable AV and POP3 all directions. (2) Send a mail and attach 3 infected files from LAN to WAN.

ZyXEL Confidential 404XD3C0.docx 55/18145. [BUG FIX] SPR ID: 070514624, 070503096 Symptom: It takes long time to initialize 3G when using AC850. (Abou

ZyXEL Confidential 404XD3C0.docx 56/181(4) Forbidden web site and Keyword blocking also have this issue. 51. [BUG FIX] SPR ID: 070522106, 070522107, 0

ZyXEL Confidential 404XD3C0.docx 57/181(1) Go to Content Filter>Customize, create 3 items for Keyword/Forbidden/Keyword. (2) Delete all the items y

ZyXEL Confidential 404XD3C0.docx 58/18164. [BUG FIX] SPR ID: 070528395 Symptom: budget control upload cannot work when using AC850 3G card! Cond

ZyXEL Confidential 404XD3C0.docx 59/181"hide detail...". It will not be changed by refreshing page manually or automatically. 70. [BUGF FIX]

ZyXEL Confidential 404XD3C0.docx 6/181(4) Reboot the device, sometimes also can’t upgrade the firmware.

ZyXEL Confidential 404XD3C0.docx 60/181(1) Enable wireless card and notebook gets IP. (2) In eWC-->LOGS you can see notebook's MAC address in

ZyXEL Confidential 404XD3C0.docx 61/18182. [BUG FIX] SPR ID: 070517903, 061024791 Symptom: The status of 3G card is "LCP Up" and can’t be

ZyXEL Confidential 404XD3C0.docx 62/181 Condition: DUT1<------------->DUT2 (Initiator1) | |------>Software VPN c

ZyXEL Confidential 404XD3C0.docx 63/181(2) User Firefox to open eWC>HOME. (3) In 3G WAN Interface Status, you will see 3G Card ESN information is d

ZyXEL Confidential 404XD3C0.docx 64/181(3) Go to other page, and back to this page, you will see initial string as "at+cgdcont=1,"IP",&

ZyXEL Confidential 404XD3C0.docx 65/181 IS: Agent will read and write Content Filter configurations from the new ACL data structure directly. 104. [

ZyXEL Confidential 404XD3C0.docx 66/181 Symptom: ZyWALL cannot trigger traffic redirect. Condition: (1) Enable 3G. (2) Enable Traffic Redirect to a

ZyXEL Confidential 404XD3C0.docx 67/181(3) Device should prevent to dial in "Limited Service" state. 118. [BUG FIX] SPR ID: 070626599, 070

ZyXEL Confidential 404XD3C0.docx 68/181CI command: "sys sw850 resetCard" 124. [BUG FIX] SPR ID: 070703106,070704186 Symptom: CF still blo

ZyXEL Confidential 404XD3C0.docx 69/181(2) Set port 4 as WLAN. (3) Setup WLAN alias 1 as 192.168.103.1. (4) Put PC in port 4 and set IP as 192.168.103

ZyXEL Confidential 404XD3C0.docx 7/181Features: Modifications in V 4.04(XD.3) | 11/04/2008 Modify for formal release. Modifications in V 4.04(XD.3)b2

ZyXEL Confidential 404XD3C0.docx 70/181WAS: Device always bypass Vantage CNM UDP port (1864, 1865) when device active Vantage CNM agent. IS: User need

ZyXEL Confidential 404XD3C0.docx 71/181(3) Press "Apply" and Check device error log "sys log errlog display", sometime display “wr

ZyXEL Confidential 404XD3C0.docx 72/181152. [BUG FIX] SPR ID: 070702057 Symptom: Device crashed after reset to default romfile. Condition: (1) Befor

ZyXEL Confidential 404XD3C0.docx 73/181(3) Then disable budget control and save configuration. (4) Then save WAN2 page again, you will see budget rese

ZyXEL Confidential 404XD3C0.docx 74/181IS: Find the policy which the IP is matched & the time is in schedule too. 167. [BUG FIX] SPR: 070704151 S

ZyXEL Confidential 404XD3C0.docx 75/181Conditions: After some traffic pass through ZyWALL, it crashes. 163. [BUG FIX] SPR ID: 070917931, 070917932 Sy

ZyXEL Confidential 404XD3C0.docx 76/181 CI command: (1) "ls hostBase enable" to enable or disable the feature. (2) "ls hostBase ti

ZyXEL Confidential 404XD3C0.docx 77/181size for the software based IDP/AV. 53. [ENHANCEMENT] SPR ID : 060815905,050414612 We change the ZyWALL br

ZyXEL Confidential 404XD3C0.docx 78/181 sysFlashUsage.0=3 sysRAMUsage.0=30 sysSessionUsage.0=0 (3) You will find that the format and content

ZyXEL Confidential 404XD3C0.docx 79/181 | | PC2 VPN1: ZyWALL35B build a VPN with ZW35A VPN2: ZW5 build a

ZyXEL Confidential 404XD3C0.docx 8/181 9. [BUG FIX] SPR ID: 080905611 Symptom: After synchronization with same NTP server on PC and ZyWALL, the

ZyXEL Confidential 404XD3C0.docx 80/181PPPoE. Condition: (1) Set the WAN encapsulation as PPPoE. (2) In SMT 24.8, enable the ping check feature

ZyXEL Confidential 404XD3C0.docx 81/181 (5) ZWP1 always reconnect tunnel between zw35 and zw70. 71. [BUG FIX] SPR ID: 060731994, 060731995 Sympt

ZyXEL Confidential 404XD3C0.docx 82/181 (5) Keep attacking and reboot the device. (6) Check the centralized log, there be lots of "Common TOS

ZyXEL Confidential 404XD3C0.docx 83/181Please refer the rom-file. (2) If PC1 received several mails through AS function, there is a mail stuck. (3) If

ZyXEL Confidential 404XD3C0.docx 84/181Condition: (1) PC on LAN , mail server on DMZ (2) DUT is SUA only and forward 25 and 110 to DMZ mail server (3)

ZyXEL Confidential 404XD3C0.docx 85/1817. [BUG FIX] 061102070 Symptom: Client can not get IP from DHCP Server even if the pool is not full. Condition

ZyXEL Confidential 404XD3C0.docx 86/181(5) Access http://www.tcc.net.tw (6) Check log OK. (7) eWC＞ Content Filter＞ Categories, unblock when Matched We

ZyXEL Confidential 404XD3C0.docx 87/181(4) Go to eWC>ANTI-SPAM>External DB page, enable External Database, set Threshold= 0. (5) Send a large ma

ZyXEL Confidential 404XD3C0.docx 88/181(1) WAN>Active/Passive Mode (2) Edit web eWC/WAN2 - APN=internet or vibo - PIN=0000 or 1234 - Phone numbe

ZyXEL Confidential 404XD3C0.docx 89/181IP=192.168.1.33，Global Start IP=192.168.10.33 (2) Click ”Apply” button, ”Local End IP” value will be show ”90.x

ZyXEL Confidential 404XD3C0.docx 9/18112. [BUG FIX] SPR ID: 080825974 Symptom: HTTP Service can't be detected when using http upload. Conditio

ZyXEL Confidential 404XD3C0.docx 90/181Address=0.0.0.0 ZW70(Branch) (1) Edit web eWC/VPN, add gateway policy, Name=IKE1, Remote Gateway Address=DU

ZyXEL Confidential 404XD3C0.docx 91/181 6. [BUG FIX] Symptom: zywall 5 WAN fixed 100/full negotiation fail against cisco 3550/2900. Condition:

ZyXEL Confidential 404XD3C0.docx 92/181 (3)Block LAN to LAN packet from Firewall. (4)Make LAN to LAN heavy traffic. 12. [BUG FIX] Sympto

ZyXEL Confidential 404XD3C0.docx 93/181 Symptom: Upload firmware by eWC will cause CPU load 100%. Condition: (1) Use GUI to upload firmware will

ZyXEL Confidential 404XD3C0.docx 94/181(6) Device will crash immediately. 9. [BUG FIX] Symptom: ZyWALL WLAN & DMZ ports cannot work in dynamic VL

ZyXEL Confidential 404XD3C0.docx 95/181server list. (3) The ZyWALL will always use one of built-in time servers to adjust time daily, but the ZyWALL s

ZyXEL Confidential 404XD3C0.docx 96/181Change wording of one category name in external content filtering. Was: Streaming Media/MP3 Is: Streaming Media

ZyXEL Confidential 404XD3C0.docx 97/1816. [ENHANCEMENT] Change the Anti-Spam wording in log. WAS: "Mail Parser buffer is overflow!" IS: &q

ZyXEL Confidential 404XD3C0.docx 98/181(1) Go to "eWC-＞ANTI-VIRUS-＞General". (2) The wording "POP3 (TCP/UDP 110)” should be ”POP3 (TC

ZyXEL Confidential 404XD3C0.docx 99/181 Local ID: Type=DNS Content = a.a.a.a Peer ID: Type=DNS Content = b.b.b.b