alexey  Master Member

На моменте внедрения порядка 2,5 лет назад пытались обращаться в русскую ТП по почте по поводу регулярно падающего ZySH демона на 1100 и 110. Получил полное игнорирование проблем и пришел сюда. Возможно было связано с реорганизацией российского подразделения. Ну а ветки на форуме и в помине не было. Ну а по поводу бета…

Мой тебе совет, беги ты подальше от этой компании. Мы на них 2,5 года, более 40 устройств. Центральный 1100 живет только на бета прошивках, каждый раз че то исправляют и присылают. Лично я уже нашел 3 или 4 критичных бага, которые просто перезагружали устройство, не считая мелких. 

Good idea don't give older 4.35 releases over portal for download. GREAT. You are sucks!

same result on 435AAPK3ITS-WK13-r92843 after less than 2 days. zw in unuseful state. THANKS for remote work in COVID-19 time!

On test V4.35(AAPK.0)ITS-WK46-r90773 all was good. After update to V4.35(AAPK.3) info about remote peer start missing again.

Also you can block ip range 185.188.32.0/22 to WAN. This denied all traffic to TW servers. In our organisation we used both metods - port & ip range.

hi @Zyxel_Vic , sent all info in pm.

Hi. The problem save on V4.35(AAPK.0)ITS-WK46-r90773. We have 48 ipsec connections. Widget show 49. show sa connection show 48 too.

+1 to this count today

Hi @Zyxel_Emily . I enable OCSP server I don't enter id and password. OCSP is hosted on local CA on IIS, i enable anonymous enter. In id i can't enter domain user, user@domain or domain\user id don't save. OCSP check from certutil It is in revoked status. Why ZW & Windows show different cert serial number? In windows SN…

Hi again. Today this situation returned again on 1 site. Both gw available, but vpn via main dont work. Help only switch ipsec vpn.

Hi. Same issue. After long time info about remote point are missing. This from 1 site connected by 2 vti in 1 trunk. USG20W-vpn & USG1100.

Hi.In policy control you must create 2 rules. 1 - access inbound traffic from wan to lan_ip by this port.2 - access outbound traffice from lan_ip to wan by this portIn other topic i read, that your isp can block 8.8.8.8. May it block 8080 port? Try change it to other external port.In my work, one day one of our isp started…

Hi @IT_Field_Support . Its old toppic for our problem. The new is If you have 2 providers, and problems is same our, Zyxell support simply created 1 security rule to block ESP service between both vpn lans. For some understanding reason, one vpn try to routes via second vpn provider. But blocking this on policy control…

Again on new fw? Great... Zyxel. Zyxel never changes...