-
How can I check the IP Reputation Filter related settings on the USG Flex models using the CLI?
Question : The user can use Web-GUI to check the IP Reputation Filter related settings. How to check IP Reputation Filter related settings using CLI? Answer : The user can use the following CLI commands to check the corresponding settings using below CLIs: show config vrf main ip-reputation allow-list enabled show config…
-
How can I check the current content filter profiles on the USG Flex models using the CLI?
Question : How can I check the current content filter profiles on the USG Flex models using the CLI? Answer : The user can use the following CLI commands to check the current Content Filter profiles. show config vrf main content-filter profile show config vrf main content-filter profile | no-pager
-
How can I flush Content Filter cache and statistics records on the USG Flex models using the CLI?
Question : How can I flush Content Filter cache and statistics records on the USG Flex models using the CLI? Answer : For troubleshooting purposes, the user may want to flush Content Filter cache and statistics records. The user can use the following CLI commands to list the categories: cmd content-filter-cache-flush cmd…
-
How can I check the statistics status of Content Filter on the USG Flex models using the CLI?
Question : How can I check the enabled statistics status of Content Filter on the USG Flex models using the CLI? Answer : The user can use the following CLI commands to check the statistics of Content Filter is enabled or not: show config vrf main content-filter statistics enabled For instance, if the Content Filter…
-
How can I check the Content Filter related settings on the USG Flex H models using the CLI?
Question : How can I check the Content Filter profile on the USG Flex H models using the CLI? Answer : For troubleshooting purposes, the user may want to check the Content Filter settings using CLI. The user can use the following CLI commands to do so: show config vrf main content-filter https-domain-filter enabled show…
-
How can I check the enabled statistics status of App Patrol on the USG Flex models using the CLI?
Question : How can I check the enabled statistics status of App Patrol on the USG Flex models using the CLI? Answer : The user can use the following CLI commands to list the categories: show config vrf main app-patrol statistics enabled show config vrf main app-patrol statistics analyze-all-traffic enabled
-
How can I check the current profiles of the App Patrol on the USG Flex H models using the CLI?
Question : How can I check the current profiles of the App Patrol on the USG Flex H models using the CLI? Answer : For troubleshooting purposes, the user may want to check the current profiles of the App Patrol. The user can use the following CLI commands to list the categories: show config vrf main app-patrol rule
-
How can I check the signature version of App Patrol on the USG Flex H models using the CLI?
Question : How can I check the signature version of App Patrol on the USG Flex H models using the CLI? Answer : For troubleshooting purposes, the user may want to check the current signature version of App Patrol. The user can use the following CLI commands to display it: show app-patrol-signature-version Displays the…
-
How can I list the available App Patrol applications on the USG Flex H models using the CLI?
Question : How can I list theList the available App Patrol applications on the USG Flex H models using the CLI? Answer : For troubleshooting purposes, the user may want to list the available App Patrol applications to see which App Patrol features can be utilized. The user can use the following CLI commands to list the…
-
How can I list the available App Patrol categories on the USG Flex H models using the CLI?
Question : How can I list the available App Patrol categories on the USG Flex H models using the CLI? Answer : For troubleshooting purposes, the user may want to list the available App Patrol categories to see which App Patrol features can be utilized. The user can use the following CLI commands to list the categories:…
-
How to Configure Scheduled Updates for the Geo-IP DB on USG Flex H models?
Question : How to Configure Scheduled Updates for the Geo-IP DB on USG Flex H models? Answer : Please navigate to the Web GUI path: Object > Address > GeoIP. To enable Auto Update and configure the day and time for scheduled updates of the GeoIP database, follow the instructions shown below:
-
How to update Geo-IP DB manually by Web-GUI on the USG Flex H models?
Question : How to update Geo-IP DB manually by Web-GUI on the USG Flex H models? Answer : Please navigate to the Web-GUI path : Object > Address > GeoIP> Click "Update Now" button to update the Geo-IP DB, as shown in below:
-
Why can't I block websites using the Web Content Filter on ATP and USG FLEX?
Question: Why can't I block websites using the Web Content Filter on ATP and USG FLEX? Answer: It is not a bug. The issue is related to the browser update with TLS 1.3 Kyber support introduced in May 2024. If you are experiencing issues with blocking websites using the Web Content Filter, please ensure that firmware on…
-
How can I check if SSL Inspection is working normally on the USG Flex H models?
Question : How can I check if SSL Inspection is working normally? Answer : Once SSL Inspection is set up successfully, whenever a client accesses the internet, the certificate will be replaced by the firewall's certificate. For instance, the user configures the SSL Inspection profile on the security policy of the USG Flex…
-
Opening the web site is very slow and logs appear "Service Unavailable" regarding to content filter
Question: It's very slow when opening website, and logs show Answer: This is because your network environment blocks our content filter’s external query IP. We recommend that you turn off the content filter/DNS threat filter as a workaround. And check whether there is any blocked on the device above.
-
How to Enable Safe Search on USG FLEX H Series?
Question: How to Enable Safe Search on USG FLEX H Series? Answer: Currently, Safe Search is not supported on the Zyxel USG FLEX H series firewall. The feature is not available in the current release, but it is planned for a future update.
-
USG FLEX H Series - External Block List
USG FLEX H Series - External Block List Overview The External Block List (EBL) is a feature that allows the firewall to import a text file hosted on an external web server. This block list contains IP addresses or URLs that should be blocked by the firewall. This is useful for enhancing security by preventing access to…
-
Do we need to add a security policy to allow DNS from LAN to the device when using DNS domain scan?
Question: In the ZLD series, if we want to enable the DNS content filter, we must create a security policy to allow DNS queries from the LAN to the device. For uOS, do we still need to add a security policy to allow DNS traffic from the LAN to the device when using a DNS domain scan? Answer: When the UTM DNS domain scan is…
-
What is the difference between the deny and reject in security policy?
Question: What is the difference between the deny and reject in security policy Answer: Deny: Select deny to silently discard the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender. Reject: Select reject to discard the packets and send a TCP reset packet or an ICMP…
-
How to unlock blocked IP in USG FLEX H series?
Question If users enter wrong username/password too many times and get locked, how to unlock the account? Answer Check lockout IP usgflex200hp> show lockout-users Unlock lockout IP usgflex200hp> cmd lockout-users unlock ip 10.214.48.21