-
What should I do if the device failed to be upgraded to the latest firmware?
Please follow the procedure to upgrade the firmware Step 1. Make sure you have on-site local support that able to reach the device Step 2. Unplug all WAN connections. Step 3. Access the device via LAN IP. Step 4. Copy startup-config.conf to recover.conf. Download "recover.conf" to your PC. Step 5. Switch to standby…
-
How much remote access is possible on the ATP/USG FLEX?
Question: How much remote access is possible on the ATP/USG FLEX? Answer: You can configure a Security Policy to allow access from WAN to the Firewall via HTTPS/SSH/Telnet. By default, it's only allow AH, ESP, IKE, NATT from WAN to Device. You can add HTTPS/SSH/Telnet to the sevice group named Default_Allow_WAN_to_ZyWall.…
-
Signature can't update
Question: Why my ATP/FLEX can't perform signature update. For example: App patrol, IPS etc.. Answer: 1)Please check the DNS resovled is fine on Firewall. 2)show service-inspect site all, to ensure all point to official site. If the issue is still persist, Please contact Zyxel Support.
-
Why I can't perform cloud upgrade ?
Question: Why I can't perform cloud upgrade ? Answer: Because you used ITS or Weekly firmware, Please kindly contact Zyxel Support for further assistance.
-
How do I check the Nebula connection status using the CLI on the USG Flex H model?
Question: How do I check the Nebula connection status using the CLI on the USG Flex H model? Answer : The user can use the CLI command 'show state nebula callhome-status' to check the Nebula connection status, as shown in the example below where the USG Flex 200HP connects to the Nebula normally. usgflex200hp> show state…
-
How do I check the Nebula connection status using the Network Tool on the USG Flex H model?
Question : How do I check the Nebula connection status using the Network Tool on the USG Flex H model? Answer : The user can navigate the local Web-GUI path Maintenance > Diagnostics > Network Tool > Choose Nebula Status to check it. Click 'Test' to check the Nebula status. Confirm that the Nebula Status is connected.
-
How do I download the configuration file from the Nebula for the USG Flex model?
Question : How do I download the configuration file from the Nebula for the USG Flex model? Answer : The user can navigate to Site-wide > Monitor > Devices > Firewall > Backup & Restore and click the 'Download' icon. Click 'Confirm' to download the configuration file The configuration file will be successfully downloaded.
-
How do I back up the configuration file to the Nebula for the USG Flex model?
Question : How do I back up the configuration file to the Nebula for the USG Flex model? Answer : The user can navigate to Site-wide > Monitor > Devices > Firewall > Backup & Restore and click 'Backup'. Enter the description and click 'Confirm' to back up the configuration file. The configuration file will be successfully…
-
How do I set up the scheduled backup configuration function on the Nebula for the USG Flex model?
Question : How do I set up the scheduled backup configuration function on the Nebula for the USG Flex model? Answer : The user can navigate to Site-wide > Monitor > Devices > Firewall > Backup & Restore and click 'Schedule Backup' to set it up. The user can choose the frequency to 'Monthly,' 'Weekly,' or 'Daily,' then…
-
How to update the firmware on the Nebula for the USG Flex H model?
Question : How to update the firmware on the Nebula for the USG Flex H model? Answer : Once logged into the Nebula Control Center successfully, the user can navigate to Site-wide > Configure > Firmware management > Firewall. Check if the status changes to 'Upgrade available,' then choose 'Upgrade now' and save it to update…
-
How do I edit the configuration file to disable two-factor authentication for admin access?
Question : How do I edit the configuration file to disable two-factor authentication for admin access on USG Flex/ATP firewalls? Answer : If you have already enabled 2FA authentication for the admin account and would like to bypass it during the recovery procedure, please disable 2FA authentication by removing…
-
How do I disable abnormal_tcp_flag_detect using the CLI?
Question: The user may encounter a Monitor log message stating, 'abnormal TCP flag attack detected, DROP' However, this does not impact any services on the user's network. The user can ignore this log message or deactivate this function using the CLI. This article will guide the user on how to deactivate the function via…
-
How do I configure Zyxel firewall to send logs to a Syslog server?
Question : How do I configure my Zyxel AP to send logs to a Syslog server? Answer : Please navigate to the GUI path Log & Report > Log Settings > Remote Server 1, activate the Syslog feature, set the Syslog server address, and select the Log Categories you want to enable. Test result: For instance, we used Visual Syslog…
-
How to encrypt your configuration File
Question: How to encrypt your configuration File Answer: We recommend encrypting your configuration file to protect the privacy
-
How to perform the speed test on the Web-GUI of the USG Flex/ATP model?
Question : How to perform the speed test on the Web-GUI of the USG Flex/ATP model? Answer : The USG Flex/ATP model has a built-in speed test tool. To perform the speed test, follow these steps: Navigate to Maintenance > Diagnostics > Network Tool > Select Speed Test > Choose the WAN interface that you want to test. Select…
-
[ATP/FLEX] How to collect diagnostic file on Firewall Local WEB GUI?
At times, you may be asked to provide the diagnostic file for further troubleshooting. This article will guide you through the process: Access the local Web GUI. Navigate to Menu > MAINTENANCE > Diagnostics > Diagnostics > Controller page to click the Collect Now button. Download the diagnostic file: Navigate to Menu >…
-
[ATP/FLEX] How to download configuration file on Firewall Local WEB GUI?
At times, you may be asked to provide the configuration file for further troubleshooting. This article will guide you through the process: Access the local Web GUI. Navigate to Maintenance > File Manager > Configuration File. Click on startup-config.conf and then click the Download button. For more details on the different…
-
How do I switch the boot partition number on the ATP/USG Flex models via CLI?
Question : How do I switch the boot partition number on the ATP/USG Flex models? Answer : For instance, the user can use the CLI command below to set the boot partition number to 2. Once set, the firewall will reboot immediately. Router# configure terminal Router(config)# set firmware boot number 2 Welcome to ATP100…
-
How to find the running-config in the collected diag-info file for USG Flex/ATP models?
Question : How to find the running-config in the collected diag-info file for USG Flex/ATP models? Answer : When the user collects the diag-info log from the USG Flex/ATP firewall for troubleshooting purposes, they can find the running-config in the diag_zysh_common.dbg file. If you navigate to 'show running-config,' you…
-
How to collect ZyWALL diagnostic files via the local GUI?
Background Collecting diagnostic files from your ZyWALL device is crucial for troubleshooting and resolving technical issues. These files provide detailed information about the system's performance, configuration, and events, allowing support teams to identify and address potential problems efficiently. For users who need…
-
Why Did Device HA Sync Fail?
Question: Why did my ATP500 devices fail to sync when setting up Device HA? Answer: The sync failure likely occurred due to overlapping IP subnets between the heartbeat port and the VTI interface. This issue can prevent proper synchronization and even cause problems accessing the Device HA page. Solution: * First, make…