Prohibiting access to the web UI from the extranet on the USG2000 and USG5000

1

Disable HTTP for the Untrust->Local interzone.

Other related questions:
Prohibiting the extranet from pinging the intranet on the USG6000
Add a security policy to prohibit ICMP packets from the extranet to the intranet.

Importing profiles on the web UI of the USG2000 and USG5000
Importing profiles to the USG2000 and USG5000 The profiles are in .zip or .cfg format and do not support Chinese characters. 1. Choose System > Maintenance > Configuration Management. 2. Click Select. The Profile Management page is displayed. 3. Click Upload. The Upload Files page is displayed. 4. Click Browse, and select the profile to be uploaded. 5. Click Upload to upload the profile. After the profile is successfully uploaded, the Profile Management page is displayed. The corresponding files are displayed on the list.

Configuring URL categories on the web UI of the USG2000 and USG5000
There are two URL categories: predefined category and user-defined category. Predefined categories are provided and maintained by the security service center, and available only after a license is purchased and activated. User-defined categories are configured and maintained by users and no license is required. The procedure for configuring a user-defined category is as follows: 1. Configure a URL mode group. (1) Choose UTM > Object > URL Address Group. (2) Click Create. (3) Set relevant parameters, including Name and Description. (4) Click Apply. (5) In URL Address List, click Create. (6) Set relevant parameters, including Matching mode and Content. (7) Click Apply. (8) Click Save and Submit in the upper right corner. 2. Configure a URL user-defined category. (1) Choose UTM > Web Filtering > URL Category. (2) Click Create. (3) Set relevant parameters, including Name, Description, and URL object group. You must select a URL object group that has been created and submitted successfully. The URL object group matches only the non-parameter part of a URL. For example, for the URL http://www.abcd.com/news/education.aspx?name=tom&age=20, only the part "www.abcd.com/news/education.aspx" is matched. (4) Click Apply.

Login through a WAN interface to the USG2000&5000 series
To log in to the USG2000&5000 series from a WAN interface, do as follows: On the WAN interface editing page, select Enable access management, and select HTTP and HTTPS to allow users to access the interface through HTTP and HTTPS to manage the device.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top