Zyxel_Cooldia  Zyxel Employee

Hi @mLipok The SSL inspection is mainly for https traffic inspect. As for antivirus on mail, it can be scan on SMTP and POP3 protocol without SSL/TLS encrypt.

Hi @OldTiger Does your IP cam vendor have manual/guide to instruct user how to add port mapping in this scenario, so that we can know which service we can create for streaming from IP cam to NVR?

Hi @Niviteka It may need to check this issue on live site, I will contact you via private message.

Hi @DanhVo , Welcome to Zyxel Community.? Did you apply App patrol on security policy? When you open Teamview, can you see any blocked log on USG? Log at “Monitor > Log > View log”, fill in your source IP for log filter.

Hi @Alfonso , thanks for the information.?

Hi @Mitchz, Has the issue solved by local Tech support? Please feel free to let us know if you need further assistance.

Hi @Iraklizh , I follow the video and set up it step by step, the tunnel build up successfully, and I can ping to Lan host without issue. Can you post USG error log when you connect to? BTW, the certificate must import to “Computer account”, instead of “My user account”. Tunnel will build up fail if you import to “My user…

Hi @Van_Dam_ICT We cannot see the password from backend, the only way to recovery it is by the following sop to recovery back. SOP for password recovery: https://businessforum.zyxel.com/discussion/1558/how-to-backup-running-configuration-if-forgot-password#latest

Hi @txyam , 早上已私訊給您了，已私訊的方式聯絡就可以了。

Hi @Pedroj , You cannot convert the USG110 configuration file to ATP800. You need to set up manually from the beginning.

Hi @Quenault , Welcome to Zyxel Community. ? The USG does not support wildcard certificate at current design, but it is indeed in queue to be implemented.

Hi @OldTiger A little bit weird about the port mapping setting for camera and NVR. Based on our understanding, it should have at least one internal port for port mapping. Without designated port, the gateway does not know how to forward the traffic to internal host for incoming connection. One quick question, does it also…

Hi @paulmmluap Can you see VNC packets on Lan interface if you connect VNC from Internet? For port mapping settings, you also need to create a firewall rule to allow VNC traffic from wan to lan. Packet capture CLI: Router> packet-trace interface lanx extension-filter port xxxx

Hi @follet It seems fine now. You can check those item that we have mentioned previously when the issue happen again.

Hi @follet Because it will check the model name of configuration file header when you apply configuration file to USG-100. It only accept the same model. You can remove the first three line of the configuration file header to bypass checking and try it again. (Please note that make sure the firmware version is same before…