lalaland  Ally Member

It may need to strike a balance between convenience and security. Not sure if phone system have ACL to allow or block phone call from specific region.

In general ADP attack items, source IP can be fake IP. it seems meaningless to whitelisting source in ADP.

@Zyxel1900 How about sharing the topology with ip address of devices? It will be helpful to understand your question in the scenario.

Maybe you can try to update firmware via FTP. Just upload firmware file *.bin file into folder firmware1 or firmware2.

There is no IP white list for this. But you can change lockout maximum retry by CLI Router(config)# users retry-count xx BTW, assume branch office most users need to access HQ site resource, I strongly recommend install firewall on 2nd office to establish site to site VPN. With site to site VPN, users in branch no need to…

IMHO, Gateway is mainly for faster traffic routing and network security. Regarding to real time alert/notification, you may install 3rd party syslog server. Once the syslog server "read" the specific keyword we specify , then it will send alert to administrator via mail or SMS immediately.

Can you draw a brief network topology with each device role and interface IP assignment. It would be easily to understand network topology for community users.=)

Did you enable phase2 mode config in IPSec VPN tunnel?

The CLI on cloud mode is Router> show sdwan interface. You can hit CLI Router> packet-trace interface eth0 extension-filter port 3389 to capture packets.

Please don't activate UTM license. It is unable to suspend once it is activated.

It seems that a lot of users encounter similar issue after window update to 21H1 https://www.windowsphoneinfo.com/threads/cannot-connect-any-vpn-on-windows-10-help-plz.576305/ https://answers.microsoft.com/en-us/windows/forum/all/vpn-connection-via-internal-client-stopped-working/467047f8-93ff-4c18-98aa-da571491ba1f…

External wan interface run in round robin mode. it's unable to set up something like that, you still need to create 1-1 policy route for vlan mapping.

@RichP, Maybe you can clear browser cache and try it again, or access web gui with incognito mode.

In my opinion, I think it is still worth the price to renew it given the professional technical support and prompt response provided by Zyxel team based on my own experience with them ;)

It's unable to import ssh key into USG. You can use python netmiko module to do something automatically for network device configuration. https://ktbyers.github.io/netmiko/#tutorialsexamplesgetting-started