Zyxel_Cooldia  Zyxel Employee

Hi @Piliya , Welcome to Zyxel community.😀 You can check if the virtual NIC MTU is 1370 in Device Manager. It would have connection issue if it is 1500.

Hi @Ray00731 , Can you provide a brief network topology with interface IP marked for troubleshooting

Hi @Ray00731, You can add static route in Nebula for routing traffic to Fortigate.

Hi @Ray00731, Please configure the SNAT from from outgoing-interface to None in policy route.

Hi @infosecwest , Just conduct a lab test on FLEX100W. I can make / receive FaceTime Video connections in FLEX100W. What is your wifi router mode? Router mode(NAT) or Bridge mode ?

Hi @PuuhaPete , You can bind a fake IP in uplink router to simulate cusotmer's ISP gateway. Once the device provision to NCC succesfully, just shutdown the device.

Hi @Reg, Welcome to Zyxel community.😀 it's unable to shutdown device from NCC, but you can ssh to device and type CLI to shutdown FLEX200. CLI: Router> shutdown

Hi PuuhaPete, It is unable to turn off this mechanism. what are those devices wan interface type? DHCP, PPPoE, or static public IP?

HI @Vagabound, Sorry for inconvenience caused. It is in our roadmap, and the solution would be ready at the end of April.

Hi @infosecwest, Can you send me startup configuration file in PM. I would like to conduct a lab test based on your configuration file.

Hi @PuuhaPete, We can pre-configure settings in Nebula in office. When you go to customer's site to deploy firewall, just log in device local Web GUI to modify Wan interface. Local Web GUI Wan Settings. How to log in device local web gui…

Hi @infosecwest, Welcome to Zyxel community. :) Do you have any policy route to force restrict traffic to specific wan interface ?

Hi @PeterUK, Can you send me diag-info in PM for further checking.

Hi @Vagabound, The hash 927acfcba3f91bcf10264dde216d5ec9 has been marked clean in cloud today. please try it again. We will come out a solution for this issue to minimize false positive case. Before the solution is implement. please add Microsoft update IP into white list. 

Hi @Tasagore, Welcome to Zyxel community. =) You can refer below link to configure external AD group. https://community.zyxel.com/en/discussion/15857/for-some-rds-users-exception-from-web-site-blocking-usg-flex-500#latest