-
Why is admin logged in on 127.0.0.1?
Question: Why does the admin appear logged in at "127.0.0.1"? Answer: The "127.0.0.1" login address originates from the Nebula Live Tool when a remote configuration connection is established. Verify if the remote configurator has been used to establish a remote session to your device.
-
Why can't security policy names be renamed in Nebula?
Question: Why can't security policy names be renamed in Nebula? Answer: In the current uOS system architecture, the security policy name is used as a unique key for system identification and processing. As a result, it is not possible to rename security policy names without significantly changing the underlying system…
-
How to Deploy Device HA on USG FLEX H?
The Device HA feature acts as a failover when one of the devices in the network fails or can’t access the Internet. Device HA uses a dedicated heartbeat link between an active device and a passive device for status syncing and backup to the passive device. On the passive device, all ports are disabled except for the port…
-
Secure Reporter Performance and SecurePilot Enhancements in Firmware 1.35
Alongside role-mapping improvements and Pay-As-You-Go license support, the latest updates to Secure Reporter focus on improving performance, log handling, and AI-driven insights. Log Throttling for Better Performance One of the challenges in Secure Reporter is handling large volumes of event logs efficiently. With firmware…
-
Admin 3.0 and Secure Reporter: Role Mapping and Privilege Updates
With the release of Admin 3.0, Zyxel introduces a revamped role and privilege structure designed to align more closely with Secure Reporter and Nebula Control Center (NCC). This alignment ensures a more consistent administrator experience across platforms and improves security management across multi-device and MSP…
-
Secure Reporter Update: Pay-As-You-Go Subscription Model Now Supported
Zyxel’s Secure Reporter now supports the Pay-As-You-Go (PAYG) subscription model, offering customers greater flexibility in managing their security service licenses. What’s New? Previously, Secure Reporter only displayed information for license-based subscriptions (fixed-term licenses with expiration dates). With firmware…
-
Firmware 1.35 Update: SSID Names Now Support UTF-8 Characters
Zyxel firewalls continue to align with modern wireless standards and Nebula features. With firmware version 1.35, SSID names configured on the firewall now support the UTF-8 character set. What Does This Mean? Previously, SSID names were restricted to basic alphanumeric characters and a limited set of symbols. With UTF-8…
-
Firmware 1.35 Update: Mesh Wireless Bridge Configuration Now Available via Firewall
Mesh Wireless Bridge isn't a new feature for Zyxel access points—but with firmware version 1.35, you can now configure and manage wireless bridge settings directly from the firewall’s AP Controller interface, making it easier to deploy wireless bridging without needing separate tools or platforms. What Is Mesh Wireless…
-
New in Firmware 1.35: Group-Level LED Suppression for Managed APs
Zyxel continues to enhance the usability of its AP Controller (APC) feature with the introduction of AP Group LED Suppression Settings in firmware version 1.35. This small but meaningful update gives administrators better control over the visual behavior of their access points (APs)—especially in environments where…
-
New in Firmware 1.35: Local MAC Authentication for Wireless Clients via AP Controller
With firmware version 1.35, Zyxel firewalls gain a valuable enhancement for wireless security: local MAC authentication for wireless clients managed via the built-in AP Controller (APC). What’s New? Previously, Zyxel firewalls supported MAC address-based authentication only through external RADIUS servers. With this…
-
Configuration Backup Rotation: Smarter Auto-Backup Management in Firmware 1.35
Zyxel firewalls have long supported configuration file management through both manual and scheduled (auto) backups. However, with limited internal storage, managing file capacity effectively is critical. Firmware version 1.35 introduces a new feature—Configuration Backup Rotation—to help automate this process intelligently…
-
Device HA Enhancements in Firmware 1.35: Improved Synchronization, Port Management, Failover Control
Firmware 1.35 brings a powerful set of enhancements to Device HA Pro, designed to improve system resilience, simplify upgrade scenarios, and refine synchronization behavior across firewall pairs. Below are the five key enhancements you need to know. Enhancement 1: Expanded Full Synchronization Triggers Previously, full…
-
Enforcing Online Safety with DNS Safe Search on Zyxel Firewalls
While DNS Safe Search isn't a new feature for Zyxel firewalls—having already been available in Nebula-managed ZLD models—firmware updates have refined and expanded its usability. This feature is especially beneficial for households, schools, and any environment where stricter content control is needed. What IS DNS Safe…
-
IP Reputation System Protect Enhancement in Firmware 1.35: Improved VPN Compatibility
In Zyxel firmware version 1.35, we've introduced a crucial update to the IP Reputation System Protect feature to resolve a long-standing challenge affecting VPN tunnel establishment—especially when dealing with public IPs flagged as malicious. The Problem: VPN Tunnel Fails Due to IP Reputation Blocking Some users…
-
Zyxel x Avast: Introducing Endpoint Protection Monitoring in Firmware 1.35
As part of Zyxel’s ongoing evolution in cybersecurity solutions, firmware version 1.35 introduces the first phase of integration with Avast, a globally recognized leader in SMB endpoint security. While this development is still in its early stages, it lays the groundwork for deeper, more impactful collaboration in the…
-
Tailscale VPN Enhancements in Zyxel Firmware 1.35: Improved UI Clarity and Routing Flow Integration
Firmware version 1.35 brings small but meaningful improvements to the Tailscale VPN integration in Zyxel firewalls, focusing on better user clarity and network routing transparency. Improved Labeling for Better Understanding Previously, in the Tailscale VPN interface, the button used to disable the service and remove…
-
New Feature Spotlight: VPN Connectivity Check Tool for Easier Tunnel Testing
With the release of firmware version 1.35, Zyxel firewalls now include a VPN Connectivity Check tool—an essential enhancement that streamlines VPN troubleshooting for administrators. Here’s everything you need to know about this powerful new feature. What Is VPN Connectivity Check? Traditionally, validating VPN tunnel…
-
Zyxel uOS Firmware Update 1.35: Unified Simultaneous Admin Login Policy Across All H-Series Models
In our continued effort to streamline system management and enforce better security practices, uOS firmware version 1.35 introduces a key change to how simultaneous admin logins are handled across all H-Series models. Previous Behavior: Login Limits Varied by Model Previously, the maximum number of simultaneous admin user…
-
uOS 1.35 – Active Directory (AD) Server Enhancement: Bind DN Base Support
When integrating a Zyxel firewall with an Active Directory (AD) server for external user authentication, two important parameters define how the firewall communicates with AD: Search Base DN – specifies where the firewall should begin searching for user accounts. Bind DN Base – specifies where the administrator (bind)…
-
uOS 1.35 – External Group Users Now Supported in Remote Access VPN
Previously, external group user objects in Zyxel firewalls were limited in scope. They could be referenced in security policies, policy routes, session control, and VMW settings, but not in VPN authentication. With uOS 1.35, external group users can now also be used in Remote Access VPN profiles. This provides more…