-
What's the upgrade procedure for USG FLEX H Series
For the initial installation of the USG FLEX H Series firewall, please using the firmware wizard to upgrade to uOS 1.08 Patch 1 firmware first, and then proceed with the upgrade to uOS1.10 firmware. Models: USG FLEX 100H/ 200H/ 200HP/ 500H/ 700H Utilizing the firmware wizard to upgrade firmware to v1.08 Patch1. Utilizing…
-
How do I create a static ARP entry on USG FLEX H Series devices?
Question: How do I create a static ARP entry on USG FLEX H Series devices? Answer: Yes, it is possible to create a static ARP (Address Resolution Protocol) entry on the USG FLEX H series devices, similar to ZLD devices. Below are the steps to configure it: Access the device's CLI interface. Use the following command to…
-
How Can I Copy a Configuration Template for H Series in Nebula Control Center?
Question: How can I copy a configuration template for USG FLEX H Series in Nebula Control Center? Answer: At the time of writing (version 19.10), the ability to copy a complete configuration template to a new organization for the USG FLEX H Series in Nebula Control Center is not directly available as a configurable…
-
How can I check the e-mail notification status through the CLI on the USG Flex H?
Question : How can I check the e-mail notification status through the CLI on the USG Flex H? Answer : The user can use the CLI 'show notification status mail' to check the e-mail notification status. For instance, the user checks the e-mail notification status on the USG Flex 200HP. The CLI result: The GUI settings:
-
How do I check the traffic statistics of the ports through the CLI on the USG Flex H model?
Question: How do I check the traffic statistics of the ports through the CLI on the USG Flex H model? Answer: The user can use the CLI command 'show port statistics | no-pager' to check the traffic statistics of interfaces. For instance, the user can use this CLI to check the current port statistics on the USG Flex 200H.…
-
How do I check the GUI interface through the CLI on the USG Flex H model?
Question : How do I check the GUI interface through the CLI on the USG Flex H model? Answer : The user can use the CLI command 'show gui interface' to check the current GUI interfaces. For example, the user can access the GUI through ge1, ge2, ge3, and ge4 from the WAN and LAN interfaces.
-
How to forcibly log out a user using the CLI on the USG Flex model?
Question: How to forcibly log out a user using the CLI on the USG Flex model? Answer: If the user wants to forcibly log out an admin user using the CLI, they can use the command: cmd users force-logout ip x.x.x.x user admin. Example: To forcibly log out the admin user from the IP address 10.214.40.53. To use the CLI cmd…
-
How do I check the system time on the USG Flex H via CLI?
Question : How do I check the system time on the USG Flex H via CLI? Answer : The user can use CLI commands to check the current time zone, date, and time. show clock status show clock date show clock time
-
How to replace the existing firewall with a new USG FLEX H Series firewall?
Scope: A Nebula site currently operating with access points (AP), switches, and a USGFLEX, ATP, or NSG firewall. The customer intends to replace the existing firewall with a new USG FLEX H Series firewall. Objectives: Minimize downtime during the replacement process Reserve site-wide AP and switch monitoring historical…
-
How to check the physical port number corresponding to a GE port on the USG Flex H via CLI
Question : How to check the physical port number corresponding to a GE port on the USG Flex H via CLI? Answer : The user can use the CLI command show state vrf main interface ethernet <ge number> to check the corresponding physical port number. For example, using show state vrf main interface ethernet ge3 will show that…
-
Why can't I update the firmware via FTP on the USG Flex H model?
Question : Why can't I update the firmware via FTP on the USG Flex H model? Answer : The possible reason is that the system is experiencing insufficient memory (as shown in the warning message below). 552-Insufficient memory for firmware upgrade!! 552 Please reboot the device first, then perform the firmware upgrade.…
-
Why can't a login account with the user type login to the Web GUI of the USG Flex H series model?
Question : Why can't a login account with the user type log in to the Web GUI of the USG Flex H series model? Answer : Starting from firmware version uOS 1.32, if an account that does not belong to the Local Administrator attempts to log in to the Web-GUI page, access will be denied, as shown below: Therefore, starting…
-
What is the SNMP OID for session number on the USG Flex H series models?
Question : What is the SNMP OID for session number on the USG Flex H series models? Answer : The user can retrieve the memory usage using the OID .1.3.6.1.4.1.890.1.15.3.1.19.0, as shown below:
-
What is the SNMP OID for CPU usage on the USG Flex H series models?
Question : What is the SNMP OID for CPU usage on the USG Flex H series models? Answer : The user can retrieve the memory usage using the OID .1.3.6.1.4.1.890.1.15.3.2.4.0, as shown below:
-
What is the SNMP OID for memory usage on the USG Flex H series models?
Question : What is the SNMP OID for memory usage on the USG Flex H series models? Answer : The user can retrieve the memory usage using the OID .1.3.6.1.4.1.890.1.15.3.2.5.0, as shown below:
-
How can we view the top N traffic in the firewall?
Question: How can we view the top N traffic in the firewall? Answer: The information can be viewed under Traffic Statistics > Application Usage. It includes a pie chart to easily identify which protocol or application is generating the most traffic in the network.
-
How can we check if any account or IP has been locked out by the firewall?
Question: How can we check if any account or IP has been locked out by the firewall? Answer: We can check for lockouts via the CLI by running the command: usgflex700h> show lockout-users.
-
How do I disable device HA sync when troubleshooting?
Question: How do I disable device HA sync when troubleshooting? Answer: When troubleshooting a firewall issue, you can temporarily disable device HA to disassociate the unit for debugging purposes. To do this, navigate to System > Device HA > HA Configuration and pause the device HA.
-
How do I check the firewall to NCC connection status?
Question: How do I check the firewall to NCC connection status? Answer: You can check the connection status by navigating to Maintenance > Diagnostics > Network Tool. Select Nebula Status, then click the "Test" button to run the connection test.
-
How do I configure the firewall to reboot on a weekly basis?
Question: How do I configure the firewall to reboot on a weekly basis? Answer: Scheduled reboots are supported on a daily, weekly, or monthly basis. You can configure a weekly reboot by navigating to Maintenance > Reboot/Shutdown.
-
How can I see connected clients on Nebula?
Question: How can I see connected clients on Nebula? Answer: You can view IP/host information by navigating to Site-wide > Clients > Client List. In the Client List, you can see the IP address, MAC address, and OS information. You can also see where the client is connected.