Unified Security Gateway User's Guide

Chapter 5 Configuration Basics
ZyWALL USG 300 User’s Guide
122
5.4.20 ALG
The ZyWALL’s Application Layer Gateway (ALG) allows VoIP and FTP applications to go
through NAT on the ZyWALL. You can also specify additional signaling port numbers.
5.5 Objects
Objects store information and are referenced by other features. If you update this information
in response to changes, the ZyWALL automatically propagates the change through the
features that use the object.
The following table introduces the objects. You can also use this table when you want to delete
an object because you have to delete references to the object first.
5.5.1 User/Group
Use these screens to configure the ZyWALL’s administrator and user accounts. The ZyWALL
provides the following user types.
MENU ITEM(S)
Network > ALG
Table 27
OBJECT WHERE USED
user/group See the User/Group section for details on users and user groups.
address VPN connections (local / remote network, NAT), policy routes (criteria, next-hop
[HOST], NAT), firewall, application patrol (source, destination), content filter,
virtual server (HOST), user settings (force user authentication), address groups,
service control (System)
address group Policy routes (criteria), firewall, application patrol (source, destination), content
filter, user settings (force user authentication), address groups, service control
(System)
service, service
group
Policy routes (criteria, port triggering), firewall, service groups, log (criteria)
schedule Policy routes (criteria), firewall, application patrol, content filter, user settings
(force user authentication)
AAA server Authentication methods
authentication
methods
VPN gateways (extended authentication), WWW (client authentication)
certificates VPN gateways, WWW, SSH, FTP
ISP account PPPoE/PPTP interfaces
SSL Application SSL VPN
Table 28
TYPE ABILITIES
Admin Change ZyWALL configuration (web, CLI)
Limited-Admin Look at ZyWALL configuration (web)
User Access network services, browse user-mode commands (CLI)