User manual ZYXEL ZYWALL2 ET 2WE

[. . . ] ZyWALL 2 Series Internet Security Gateway User's Guide Version 3. 62 February 2004 ZyWALL 2 Series User's Guide Copyright Copyright © 2003 by ZyXEL Communications Corporation. The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. All rights reserved. Disclaimer ZyXEL does not assume any liability arising out of the application or use of any products, or software described herein. Neither does it convey any license under its patent rights nor the patent rights of others. ZyXEL further reserves the right to make changes in any products described herein without notice. [. . . ] These read-only fields display detailed information about the certificate. "CA-signed" means that a Certification Authority signed the certificate. "Self-signed" means that the certificate's owner signed the certificate (not a certification authority). "X. 509" means that this certificate was created and signed according to the ITU-T X. 509 recommendation that defines the formats for public-key certificates. This field displays the certificate's identification number given by the certification authority. This field displays information that identifies the owner of the certificate, such as Common Name (CN), Organizational Unit (OU), Organization (O) and Country (C). This field displays identifying information about the certificate's issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. Property Check incoming certificates issued by this CA against a CRL Certification Path Refresh Certificate Information Type Version Serial Number Subject Issuer Certificates 15-19 ZyWALL 2 Series User's Guide Table 15-7 Trusted CA Details LABEL Signature Algorithm DESCRIPTION This field displays the type of algorithm that was used to sign the certificate. Some certification authorities use rsa-pkcs1-sha1 (RSA public-private key encryption algorithm and the SHA1 hash algorithm). Other certification authorities may use ras-pkcs1-md5 (RSA public-private key encryption algorithm and the MD5 hash algorithm). The text displays in red and includes a "Not Yet Valid!" message if the certificate has not yet become applicable. The text displays in red and includes an "Expiring!" or "Expired!" message if the certificate is about to expire or has already expired. This field displays the type of algorithm that was used to generate the certificate's key pair (the ZyWALL uses RSA encryption) and the length of the key set in bits (1024 bits for example). This field displays the certificate's owner`s IP address (IP), domain name (DNS) or e-mail address (EMAIL). This field displays for what functions the certificate's key can be used. For example, "DigitalSignature" means that the key can be used to sign certificates and "KeyEncipherment" means that the key can be used to encrypt text. For example, "Subject Type=CA" means that this is a certification authority's certificate and "Path Length Constraint=1" means that there can only be one certification authority in the certificate's path. This field displays how many directory servers with Lists of revoked certificates the issuing certification authority of this certificate makes available. This field also displays the domain names or IP addresses of the servers. This is the certificate's message digest that the ZyWALL calculated using the MD5 algorithm. You can use this value to verify with the certification authority (over the phone for example) that this is actually their certificate. This is the certificate's message digest that the ZyWALL calculated using the SHA1 algorithm. [. . . ] 30-6 Teardrop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4 Telnet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21-1 TFTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33-5 File Upload . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ]