-
How can I check the configuration status via CLI on a USG FLEX H model?
Question : How can I check the configuration status via CLI on a USG FLEX H model? Answer : The user can navigate to Maintenance > Firmware/File Manager > Configuration File to check the current configuration status via the GUI. The user can also use the CLI command show state configuration file to check the current…
-
How can I check the security policy via CLI on a USG FLEX H model?
Question: How can I check the security policy via CLI on a USG FLEX H model? Answer: The user can use the CLI command show config vrf main secure-policy rule | no-pager to list all security policy rules, as shown below: The user can also use the CLI command show config vrf main secure-policy rule <Tab> to display all…
-
How do I capture the packets through the GUI on the USG Flex H model?
We can use the Web-GUI to collect packets as a useful debugging method. Navigate to the GUI path Maintenance > Diagnostics > Select the interface and specific filters if needed. In this post, we use host port 514(the default syslog service port) for example. After save the capture setting, navigate to Maintenance >…
-
How to collect the diag-info file includes device configuration file from the USG Flex H?
Question : How to collect the diag-info file includes device configuration file at the same time from the USG Flex H? Answer : The user can navigate to Maintenance > Diagnostics > Enable "Collect the configuration files" After the user collects and extracts the diag-info file, the collected device configuration file can be…
-
How do I disable the log function on the USG FLEX H?
Question : How do I disable the logging function on the USG FLEX H? Answer : The user can navigate to Log & Report > Log Settings > System Log and disable the log categories they do not want to record. For example, if the user disables all log categories, no event logs will be displayed.
-
What is the meaning of the "ZyWALL" direction in the Security Policy?
Question : What is the meaning of the "ZyWALL" direction in the Security Policy? Answer : The "ZyWALL" direction refers to the firewall device itself. In this example, the security policy allows LAN clients to access the firewall from the LAN to ZyWALL direction (also referred to as LAN-to-Device traffic). To verify this,…
-
Why H firewall revert WAN configuration changes after applying a static IP?
Question: Why H firewall revert WAN configuration changes after applying a static IP? Answer: This behavior occurs due to an automatic configuration recovery feature. To prevent H firewall from reverting WAN configuration changes, particularly when setting a static IP that temporarily disrupts internet connectivity, you…
-
Why Device HA show sync fail on active role after reboot, while passive role show sync successfully?
Question: Why Device HA show sync fail on active role after reboot, while passive role show sync successfully? Answer: This behavior is not a bug but an expected operational characteristic under specific reboot conditions for your Zyxel firewall HA Pro cluster. Explanation of the Behavior During a scheduled reboot, if the…
-
Is it possible to manage NWA110 by H Firewall?
Question: Is it possible to manage NWA110 by H Firewall? Answer: This AP model cannot be managed by H firewall. Please refer to this website: https://www.zyxel.com/tw/zh/products/next-gen-firewall/usg-flex-firewall-usg-flex-100h/license-and-spec
-
What's the max number of FQDN Address objects on USG FLEX 200H?
Question: What's the max number of FQDN Address objects on USG FLEX 200H? Answer: The maximum number of address objects is 300, but there are 6 default address objects USG FLEX 200H, so it means you can at most have 294 address objects with FQDN type. (Kindly remind, the max number of address object in one address group is…
-
How to edit the name of objects?
Question: How to edit the name of objects? Answer: Once the object is created, the name cannot be edited on Nebula, please edit it from local Web GUI
-
Does H firewall support crypto boost-tcp like USGFLEX/ATP firewall?
Question: Does H firewall support crypto boost-tcp like USGFLEX/ATP firewall? Answer: No USG FLEX H Firewall does not have this feature due to a different design from the USGFLEX/ATP platform. USG FLEX H Firewall does not support running the same tunnel on multiple fast path cores. This is because it would cause packet…
-
What can I do if the object cannot be removed?
Question: What can I do if the object cannot be removed? Answer: Sometimes, we will receive this error message when try to delete the object It means there is a feature is using this object, so it cannot be removed. Please go to local Web Gui > Object, tick the object and click Reference, then you will which feature is…
-
Why Remote SSH is not working?
Question: Why Remote SSH is not working? Answer: Please first check if SSH is enabled. Go to System > Setting
-
Why Webconsole is not working when using Remote Configurator?
Question: Why Webconsole is not working when using Remote Configurator? Answer: When using Remote Configurator to access the Web GUI, the host PC will connect to the device using the port generated by Remote Configurator. However, when clicking webconsole, it will use defaule port 443 which is not avaible in this…
-
How to upgrade firmware version by CLI?
Question: How to upgrade firmware version by CLI? Answer: Use the command to download the latest firmware on the Cloud Helper server to the specified partition on the Zyxel Device, 1 in this example. Then use the second command to automatically reboot the Zyxel Device after the firmware is downloaded usgflex500h running…
-
What is "Configuration Backup Rotation" and what are its benefits in firewall?
Question: What is "Configuration Backup Rotation" and what are its benefits? Answer: This feature automatically retains the most recent configuration files while removing the oldest ones. It enables efficient storage management and reduces manual maintenance efforts. Ultimately, it ensures that network administrators can…
-
What happens if the backup storage size or maximum file limit is reached?
Question: What happens if the backup storage size or maximum file limit is reached? Answer: A: If either limit is reached, no new backup files will be generated, and the backup rotation mechanism will not remove old files. Instead, an error will be logged in the Event Log under the System category: If the size limit is…
-
What are the default system limits for total backup configuration files and storage capacity?
Question: What are the default system limits for total backup files and storage capacity? Answer: By default, the system allows a maximum of 65 backup files, with a strict total size limit of 200 MB for all configuration files combined
-
What are the differences between system-default.conf, startup-config.conf, and lastgood.conf?
Question: What are the differences between system-default.conf, startup-config.conf, and lastgood.conf? Answer: system-default.conf: Contains the factory default settings and is included when you upload a firmware package. startup-config.conf: The configuration file that the Firewall is currently using. Any changes made…