-
Seriously, your ideas could be new feature for Security!
Hello Security Forum Members, Do you have moments that if your own thoughts or ideas can make better experience when using Zyxel security products? <3 We can make your wish come true! <3 Simply start a new post here describing your fabulous ideas for features or services you wish to have! Once your ideas get lots of vote ,…
-
USG Flex H Series Application Routing align the option that listed in the "Applications Usage"
User @Pook raise an idea that USG Flex H Series Application Routing function should align the option that listed in the "Applications Usage". If anyone like this idea, please give it a vote and leave your comment. Original post
-
Feature request: native Cloudflare Tunnel (cloudflared) on USG FLEX H
Hello everyone, I would like to open a discussion: would native Cloudflare Tunnel support be useful in uOS for the USG FLEX H series? I can show that it works on the hardware. Why. Publishing an internal service today means a port forward and an open WAN port. With Cloudflare Tunnel the firewall only opens outbound…
-
Zyxel Config Explorer: see what a USG FLEX H (uOS) config does, in your browser
I keep getting handed USG FLEX H firewalls I didn't set up, and before touching anything I want the basics: which zones and VLANs exist, where traffic is allowed to go, what is reachable from the Internet, and whether the rules contradict each other. The web interface shows policies, objects, NAT, VPN and routing each on…
-
SSID Profiles on Flex H
The flex series of firewalls supported an object which defined the properties of the SSID and SSID Security settings, including Band, Mode, DCS Awareness, Mode, VLAN ID, and roaming features. (Object → AP profile → SSID Profile). Once defined these profiles were associated to AP groups. Modifying a SSID profile would…
-
Text field enabled in two-factor authentication (2FA)
When you enter the url to enter the google authenticator OTP for the 2FA of the firewalls you cannot just digit the 6 numbers but you have to click in the field (or press tab) to activate the text field. Moreover, after inserting the OTP you cannot hit enter to go ahead but you have to click on the green button. You should…
-
[USG FLEX H] Allow DDNS Check Period lower than 5 minutes (e.g. 1 minute)
On USG FLEX H, the DDNS "Check Period" currently has a fixed minimum of 5 minutes. This means that in the worst case, after a WAN IP change, it can take up to 5 minutes before the device even notices and starts the DDNS update — which matters for anyone relying on DDNS for remote access, VPN, or similar services. This was…
-
Add "Bind DN Base" to the AD Server settings in NCC for USG FLEX H Series
In response to the requirement raised by user @ChipW , we propose adding the [Bind DN Base] field to the Active Directory (AD) server settings in Nebula Control Center (NCC) for USG FLEX H Series firewalls, to maintain feature parity with the device's local Web GUI. For more context, you can check out the original…
-
Support FQDN groups in the Captive Portal Walled Garden list on USG FLEX H Series
In response to the requirement raised by user @itariant , we propose adding support for FQDN groups in the Captive Portal Walled Garden list on USG FLEX H Series firewalls, in both the local Web GUI and Nebula Control Center (NCC). For more context, you can check out the original discussion here:…
-
USG FLEX H support speed test diagnostic function
User @henriquev hopes USG FLEX H support speed test diagnostic function. Anyone who likes this request, please feel free to leave your comment and give it a vote! Original post
-
DHCP and Secondary IP
It CAN be possible older models do it! when you do a routing rule incoming LAN next hop WAN 2 SNAT outgoing-interface which will be the the DHCP IP Or in my setup also incoming WAN to Secondary IP 192.168.254.1 Source Address 192.168.252.0/23 next hop WAN 2 SNAT outgoing-interface which will be the the DHCP IP with Static…
-
Apple OS Update- option to BWM
Hello, Apple is launching OS updates for iOS, iPadOS and macOS devices simultaneously nowadays. The installation package for each update can vary from 4GB+ to 20GB+ depending on dot release or major release. In practice, when the updates start to take place, it can eat the significant amount of capacity, even for fiber…
-
[USG Flex H] - Resolve A Record only from selected interfaces
Hello, As per request: I've configured an A Record DNS entry: xyz.no-ip.org —> 192.168.0.1 This host is an DDNS that, externally, resolve with my external WAN IP. Now, internally, when I try to resolve xyz.no-ip.org, the gateway return to me 192.168.0.1 as per A Record entry, externally resolve with the WAN IP correctly.…
-
Support PoE Port Priority Management on USG FLEX H Series
In response to the feedback from @Maverick87 , we would like to propose adding a PoE Port Priority configuration feature to the USG FLEX H Series. This feature allows users to define the order in which PoE power output is disabled when total power consumption exceeds the 30W PoE power budget. For more context, you can…
-
[USG FLEX H] Not add DNS to the Global Zone Forwarder when no DHCP DNS option in DHCP request
User @PeterUK hopes USG FLEX H do not add DNS to the Global Zone Forwarder when no DHCP DNS option in DHCP request. Anyone who likes this idea, please leave you comment and give it a vote. Original post
-
[USG FLEX H] force logout admin current login session when delete admin
User @Maverick87 hopes USG FLEX H can enhance: Force logout admin current login session when delete admin. Anyone who likes this idea, please leave your comment and give it a vote. Original post
-
Let's Encrypt Certificate improvements
So this is great to see and hope to see in switches but I would like a custom change to the way HTTP works as I have Nginx which can do the redirect of like zyxel-router1.ddns.net (soon to be change to zyxel-router1.bridgemode.network) without affecting like server.bridgemode.network All thats needed is for the FLEX H to…
-
Feature Request: Displaying PoE Port Information on the Web GUI for USG FLEX H Series
In response to the feedback from @Maverick87 , we would like to propose adding visibility for the following PoE port details on the USG FLEX H series Web GUI: 1.Mode 2.Class 3.Power 4.Current For more context, you can check out the original discussion here: [USG Flex H] - Check PoE Information — Zyxel Community If you…
-
[USG Flex H]PoE management via SNMP
Regarding the requirement raised by @Maverick87 , we recommend adding a new feature: support for PoE management and monitoring via SNMP. This includes PoE management (enable/disable/power reset) and PoE status monitoring (PoE status, PoE power, PoE class, overcurrent/error, current/voltage etc). This suggestion originates…
-
[USG Flex H] - Double check the subnet defined into the Remote Access VPN
Hello, I've configured and enabled the Remote Access VPN, using a subnet 192.168.50.0/24. The login works but I don't reach any website, and seems that the request enter into the Zywall, but then are missed and don't return. Checking the defined interfaces, I see that I've already define an interface with range…