ZyWALL 70 Support Notes
10
K26. I am planning my ZyWALL behind a NAT router. What do I
need to know?...........................................................................................294
K27. Where can I configure Phase 1 ID in ZyWALL?.........................294
K28. How can I keep a tunnel alive?......................................................295
K29. Single, Range, Subnet, which types of IP address does ZyWALL
support in VPN/IPSec?............................................................................295
K30. Does ZyWALL support IPSec pass-through? ..............................295
K31. Can ZyWALL behave as a NAT router supporting IPSec pass
through and an IPSec gateway simultaneously?...................................295
K32. Will the traffic coming in through the VPN tunnel also be
scanned by Anti-Virus, IDP and Anti-Spam feature in ZyWALL
ZyNOS v4.0?.............................................................................................295
L. PKI FAQ........................................................................................................296
L01. Basic Cryptography concept ..........................................................296
L02. What is PKI?....................................................................................296
L03. What are the security services PKI provides?..............................296
L04. What are the main elements of a PKI?..........................................297
L05. What is a Certification Authority? ................................................297
L06. What is a digital certificate?...........................................................297
L07. What are public and private keys, and what is their relationship?298
L08. What are Certificate Policies (CPs)? .............................................298
L09. How does a PKI ensure data confidentiality?...............................298
L10. What is a digital signature?............................................................299
L11. How does a digital signature work?...............................................299
L12. Does ZyXEL provide CA service?..................................................300
L13. What if customers don't have access to CA service, but would
like to use PKI function?
.........................................................................300
L14. How can I have Self-signed certificate for ZyXEL appliance? ...300
L15. Can I create self-signed certificates in addition to the default
one?............................................................................................................301
L16. Will Self-signed certificate be erased if I reset to default
configuration file?....................................................................................301
L17. Will certificates stored in ZyXEL appliance be erased if I reset to
default configuration file?
.......................................................................301
L18. What can I do prior to reset appliance's configuration?.............301
L19. If I export My Certificates from ZyXEL appliance, save them
locally, and then import them back after resetting the configuration
file, can I reuse the imported My Certificates ?....................................301
All contents copyright (c) 2005 ZyXEL Communications Corporation.
