|
Close Window
Protection for your LAN and DMZ utilizing Secure Zones Technology
On the ZyWALL VPN & Internet Security
Gateways [2 plus, 5/35/70] the DeMilitarized
Zone [DMZ] auto-negotiating 10/100 Ethernet port(s) utilizing Secure Zones Technology provides a
way for public servers [Web, e-mail, FTP, etc.] to be visible to the outside
world (while still
being protected from DoS [Denial of Service] attacks such as SYN flooding and
Ping of Death). These public servers can also be accessed from the secure
LAN. The DMZ zone has its own DHCP service and all zones are securely
separated by firewall rules.
The Ethernet ports in the ZyWALL 5/35/70 switch supports three separate
broadcast zones: (1) LAN, (2) DMZ and (3) WLAN; connections between these
three broadcast zones always go through the firewall [consequently they
require firewall rules]
By default the firewall allows traffic between the WAN and the DMZ,
traffic from the DMZ to the LAN is denied, and traffic from the LAN to the
DMZ is allowed. Internet users can have access to host servers on the DMZ but
no access to the LAN, unless special filter rules allowing access were
configured by the administrator or the user is an authorized remote user.
All your public servers should be connected to the DMZ port. If you have
more than one public server, connect a switch to the DMZ port.
Keep all sensitive information off the public servers connected to the
DMZ port. Store sensitive information on LAN computers.
Note: In the world of Computer Networks
most consumer grade mass produced Network Routers refer to a "DMZ
host" —This is NOT a
true DMZ by definition. Many consumer grade routers [Linksys | Belkin
| Netgear] refer to a DMZ host. These are pseudo or naked
DMZ's, as they provide no security between that host and the
internal network like that provided by ZyWALL as described above. Most
consumer grade home router's DMZ host is a host on the internal network that
has all ports exposed, except those ports forwarded otherwise.
Authorized
ZyXEL
SOLUTION PARTNER
ZyWALL VPN & Internet Security
Gateways
Unsuspectingly every minute, droves of malicious attacks are
trying to pass your Internet security gateway, threatening your network
security.
IT-Expert on Call field experience confirms that ZyXEL ZyWALL
provides the most cost effective protection to meet your
demanding security requirements. The ZyWALL delivers the high-performance
firewall you need to defend from outside hackers and vandals, along with
outstanding VPN which provides both cost reduction and security, in your
broadband network.
Let IT-Expert on Call help you get started with ZyWALL to secure
your network. With ZyWALL VPN & Internet Security Gateways you can rest
easy, knowing all information is safely secured and properly protected.
For Example
—Consider the ZyWALL P1 Personal Internet Security Appliance ideal
Remote Access protection for Laptop [Notebook] computer
users while traveling on the road.
For the road-worrier the perfect on-the-road Personal Firewall/VPN
Security Solution — A USB powered Ethernet network interface
internet security appliance with firewall safety and secure
communication link - when traveling on the road and having access
to the Internet the ZyWALL P1 establishes [via
plug-and-play] an IPSec VPN tunnel to your home-office network
- advanced SPI Firewall protects your Laptop [Notebook] computer from
Internet threats, when-ever/where-ever you connect.
Benefits
Proactive End-point Security
Stay in a secure and trusted LAN, and you still need personal and private
protection. The easy-to-pack, compact network device is equipped with
advanced safety and security features that connect you to the LAN or Internet
through any broadband connection. With a powerful SPI Firewall and Network
Outbreak Prevention, it behaves as one of the frontline protection for your
individual PC or mobile Laptop from Internet attacks.
Portable, Secure, Personal VPN Appliance
With this light-weight, compact device, the ZyWALL P1 also provides VPN
connection for mobile users to create a private secure hotspot for yourself
whenever you go. No extra sophisticated software installation and
configuration effort needed. Once you are connected over VPN, its just like
being attached to the local network.
Ease of Deployment
Compared with software-based applications, the ZyWALL P1 is truly
plug-and-play, hardware-based personal security device. It avoids software
installation complexity by benefiting more from ease-of-trouble shooting and
management effort. A familiar web browser interface and setup wizard makes
installation and configuration easy.
Close Window
|