-
How can we check if any account or IP has been locked out by the firewall?
Question: How can we check if any account or IP has been locked out by the firewall? Answer: We can check for lockouts via the CLI by running the command: usgflex700h> show lockout-users.
-
How do I disable device HA sync when troubleshooting?
Question: How do I disable device HA sync when troubleshooting? Answer: When troubleshooting a firewall issue, you can temporarily disable device HA to disassociate the unit for debugging purposes. To do this, navigate to System > Device HA > HA Configuration and pause the device HA.
-
How do I check the firewall to NCC connection status?
Question: How do I check the firewall to NCC connection status? Answer: You can check the connection status by navigating to Maintenance > Diagnostics > Network Tool. Select Nebula Status, then click the "Test" button to run the connection test.
-
How do I configure the firewall to reboot on a weekly basis?
Question: How do I configure the firewall to reboot on a weekly basis? Answer: Scheduled reboots are supported on a daily, weekly, or monthly basis. You can configure a weekly reboot by navigating to Maintenance > Reboot/Shutdown.
-
How can I see connected clients on Nebula?
Question: How can I see connected clients on Nebula? Answer: You can view IP/host information by navigating to Site-wide > Clients > Client List. In the Client List, you can see the IP address, MAC address, and OS information. You can also see where the client is connected.
-
How do I configure a VLAN on an H Series firewall?
Question: How do I configure a VLAN on an H Series firewall? Answer: Navigate to Network > Interface > Interface. By default, there are external and internal GE interfaces. Click Add to create a VLAN interface: Interface Type: VLAN Member: Bind the VLAN to a GE interface port VLAN ID: Specify the VLAN ID
-
Where can I see the traffic statistics in NCC for the H series firewall?
Question: Where can I see the traffic statistics in NCC for the H series firewall? Answer: It is not supported in the current design. You will need to log in to the device's local web GUI to check the traffic statistics. Navigate to Traffic Statistics, where you will be able to see Application Usage, Port, Interface, and…
-
How can I view the WAN uptime and downtime for all organizations in MSP portal ?
Question: How can I view the WAN uptime and downtime for all organizations as an MSP? Answer: Currently, MSP portal does not support viewing WAN uptime and downtime for all organizations. This feature is not available at the moment.
-
How to debug an issue where the USG FLEX H model stops responding?
Question : How to debug an issue where the USG FLEX H model stops responding? Answer : The firewall device may experience stops responding for unknown reasons. To troubleshoot this issue, please follow the steps below: Step 1: Prepare a PC and connect it to the USG Flex H firewall using a console cable. Access the CLI and…
-
How to debug an unexpected reboot issue on the USG Flex H model?
Question : How to debug an unexpected reboot issue on the USG FLEX H model? Answer : The firewall device may experience unexpected reboots due to unknown reasons. To troubleshoot this issue, please follow the steps below: Step 1: Prepare a PC and connect it to the USG Flex H firewall using a console cable. Access the CLI…
-
Why can't I upgrade firmware to the latest official version from date firmware?
Question: Why can't I upgrade firmware to the latest official version from date firmware on web GUI (Cloud Firmware) or Nebula? If the USG FLEX H is running with the date firmware, I cannot upgrade it to the latest official firmware by clicking "Cloud Firmware". Because the official firmware is unavailable on myZyxel.com,…
-
What's One-time Schedule and Recurring Schedule?
Question: What's One-time Schedule and Recurring Schedule? Answer: One-time schedules begin on a specific start date and time and end on a specific stop date and time. It's are useful for long holidays and vacation periods. Recurring schedules begin at a specific start time and end at a specific stop time on selected days…
-
How to set up web auth with AD server on USG FLEX H?
Question: How to set up web auth with AD server on USG FLEX H? Answer: Set Up a profile for AD server Go to User & Authentication > User Authentication > AAA Server > AD. Click +Add tocreate a new profile Enter the Server Address and port for Server settings. (10.214.48.XX:389 in this example).Enter the domain name and the…
-
How to change the order of security policy for H Firewall on Nebula?
Question: How to change the order of security policy for H Firewall on Nebula? Answer: Go to Site-wide > Configure > Firewall > Security policy, click on the rule that you want to move, and drag it to the desired order, and then release it.
-
What is Login Name Attribute and Group Membership Attribute?
Question: What is Login Name Attribute and Group Membership Attribute? Answer: Login Name Attribute: The type of identifier the users are to use to log in. For example “name” or “email address” Group Membership Attribute: An AD server defines attributes for its accounts. Enter the name of the attribute that the Firewall is…
-
If I change site assigmnet for my H Firewall, the configuration will be removed?
Question: If I change site assigmnet for my H Firewall, the configuration will be removed? Answer: The configuration in device won't be removed, but the Nebula site configuration will be reset.
-
Does H Series support Azure AD (Microsoft Entra ID) ?
Question: Does H Series support Azure AD (Microsoft Entra ID) ? Answer: We currently don't support Azure AD(Microsoft Entra ID) since we don't support SAML so far. You can use Azure AD DS which support general LDAPs protocol as alternative
-
How to delete the lan1 created by default in USG FLEX Firewall in Nebula mode?
Question: How to delete the lan1 created by default in USG FLEX Firewall in Nebula mode? Answer: No, default LAN1 interface is not allowed to be removed.
-
Is it possible to get the old firmware file of the USG FLEX H series Firewall?
Question: Is it possible to get the old firmware file of the USG FLEX H series Firewall? Answer: Now USG FLEX H series only allows to upgrade the firmware by cloud firmware management, which means you don't have a path to download the firmware file includes the old version. Please contact Zyxel Support for this request,…
-
How to set up RADIUS on USG FLEX H Firewall ?
Question: How to set up RADIUS on USG FLEX H Firewall? Answer: You can enter the external RADIUS server information into the RADIUS server settings under the AAA Server section. Verify: To verify the configuration, you can use the Captive Portal function. Select RADIUS as the authentication server. The client’s browser…