Best Of

https://www.4shared.com/s/fh5TPiR0Tjq

Hello @JCE,
For HTTPS traffic, please apply SSL inspection which allows you to check SSL-encrypted packages to let Content Filter works with HTTPS traffic.
Please refer to this knowledge base article

James

Hello @JCE,
We still provide services for Anti-Virus and Content Filter.
May I know more information about what you encounter? which website? how's the log display? Could you clear the browser cache and test again?

James

Hello @RSaull @flefebure

Zyxel Firewall does not support that routing multicast cross subnets, and currently we don't have a plan to implement this feature this year.

James

I would guess, that maybe the former session/s get cached and since it's the same client/machine the credentials are still valid? Or the 2FA has a general grace period per user/machine?

Are the links you receive maybe even the same?

I would try logging in, clicking the 2FA, logging out immediately, logging in, compare the links.

Next I would try different clients and see if the 2FA can be skipped with those too.

If it just applies to the same client, the real world implications would exist, but the chances of exploiting this are very slim.

Hi @JCE,

Can you test again and check if the IP shows up in twofa-ipsec-ip? It should be listed in twofa-ipsec-ip before clicking the authorization email.
Once you click the authorization email, it will be delisted from twofa-ipsec-ip.

Here are the steps:

1. Connect the VPN client.
2. Type the CLI command "debug system ipset" to check if the VPN client's IP address is listed in twofa-ipsec-ip."

e.g.
Name: twofa-ipsec-ip
Type: hash:ip
Revision: 3
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 16496
References: 2
Members:
X.X.X.X <= You should be able to see the IP address in the member list before clicking the authorization email

Hi @JCE ,

You can use ClickSend to send SMS for 2FA. Please refer to the link below for instructions on how to configure two-factor authentication (2FA).

https://kb.zyxel.com/KB/searchArticle!viewDetail.action?articleOid=018012&lang=EN