-
If my device running on ZLD 4.60C0, how to upgrade it to ZLD4.60 P1?
To
upgrade your firmware to the ZLD v4.60 patch 1, there are several methods that
can achieve this purpose. Method 1. Download the
firmware from myZyxel portal and upgrade the firmware from LAN locally. Step
1: Login
to myZyxel portal, after logging into the portal, you will see your registered
device list in Device…
-
How do I check unauthorized users trying to access my device? Can I check the login history?
You
can find it from the device log directly from MONITOR > Log > View Log. In
“View Log”, choose the “User” category. When
users successfully login to the device, the device will show logged in user
information (and so do login failed users).
-
If firmware upgrading is impossible at this moment, what else I can do to avoid this vulnerability?
1. If
it is not absolutely necessary to manage devices from the WAN side, you can
turn off the FTP/TELNET/SSH/HTTPS/HTTP/SNMPv3 service on WAN. These services are disabled
by default, so you won’t have to do so unless you have enabled it in the past. Go to CONFIGURATION > Security Policy >
Policy Control and check the…
-
Is my ZyWALL/USG/VPN/ATP/USG FLEX firmware version affected by CVE-2020-29583? How to check?
Only
the Running version 4.60(XXXX.0) is affected. Go
to MAINTENANCE > File Manager >
Firmware Management > Firmware Status and check the version of Running partition. We strongly suggest
you upgrade the device to the latest version 4.60(XXXX.1). The device
is not affected when the version of Running
partition is…
-
USG FLEX Frequently Asked Questions
The following sections cover product portfolio, license service, and more. Part1 Product Portfolio Q1: Why USG FLEX? Zyxel is proud to announce the completely new ZyWALL USG FLEX series, tailored-made for SMB customer who is looking for worry-free security protection. Packed with top-notch threat intelligence,…
-
Why does the firmware version show as V4.35(VVVV.0)/4.35(WWWW.0) /4.35(ZZZZ.0) /4.35(YYYY.0) ?
The behavior was mentioned on page 20 of the release note. Select the Standby firmware row and click Reboot. After the device reboots, the correct firmware version is able to be shown on the web GUI.
-
How to setup SecuReporter on USG and server side?
SecuReporter is a server can analyze all of traffic that pass through by USG. You can follow these steps to setup all of it. On USG side: * Enable SecuReporter license. (30 days for free tail) * Enable SecuReporter service. * Enable "Collect Statistics" in all of UTM functions. (Monitor > UTM Statistics) On SecuReporter…
-
How to recovery database when it is broken.
When file system broken, the device is unable boot up successfully. And may display error log like: mount: wrong fs type, bad option, bad superblock on /dev/loop0, missing codepage or other errorYou can the follow this steps to recovery device database.(Console cable is required) (1) Plug-in power cable and enter to debug…
-
How to backup running configuration if forgot password?
Note: You must physically beside at your device, and using serial connection for below SOP You can follow these steps to backup device running config: 1. Reboot device 2. Enter debug mode and type “atkz –b” 3. Use “atgo” booting device 4. Now device will reset system-default configuration and backup old startup-config.conf…
-
How to get different privileges by RADIUS authentication
Background: In the
ZyWALL USG, you can
configure local users
with different privileges such as admin, limited-admin, users
and guests. This allows users
to have different privileges when they login to the USG.
For ext-user accounts, which are authenticated by an external RADIUS server, the USG sets
the privilege for…
-
The procedure to configure the email log?
Step-by-Step: Step 1: Go to Configuration > Log & Report > E-mail Daily Report > Select the Enable Email Daily Report checkbox > Enter the necessary info of Email Settings/Schedule/Report Item > Click on Apply Log Settings Step-by-Step: Step 1: Go to Configuration > Log & Report > Log Settings > Select System Log >…
-
How can I upgrade the firmware by using FTP?
You can access the device by using a console and enable FTP on the USG. On your PC, use CLI commands to access the USG by FTP. Set the binary and add the file.(paste the path of bin file) After clicking Enter, the firmware starts to upgrade. VERIFICATION: If the configuration is correct, you will see the “Transfer…
-
How to Configure Single Sign-on with ZyWALL/USG and SSO agent?
SETUP/STEP BY STEP PROCEDURE: (Download SSO agent : http://www.zyxel.com/tw/zh/products_services/sso_agent.shtml?t=p) Configuration example Configuring AAA server ▪Configuring AAA server on ZyWALL/USG▪CONFIGURATION > Object > AAA server > Active Directory > Click “Edit”▪Edit AAA server parameters Configuring Auth. method…
-
How can captured packets be save as Wireshark compatible files via "tcpdump" command in the SBG3300?
Step 1 Establish a Telnet connection to the SBG3300. The default IP address is 192.168.1.1. Use the “admin” account to access the SBG that can do the packet capture. Step 2 Enter the command "sh". Step 3 Enter command “tcpdump -i ‘interface name’ -w /var/tmp/’file name’”. In this example, the goal is to capture packets in…
-
How can captured packets be save as Wireshark compatible files in the SBG3300?
Step 1 Establish a Telnet connection to the SBG3300. The default IP address is 192.168.1.1. Use the “admin” account to access the SBG that can do the packet capture. Step 2 Enter the command "sh". Step 3 Enter command “tcpdump -i ‘interface name’ -w /var/tmp/’file name’”. In this example, the goal is to capture packets in…
-
How do I change boot up partition by commands ?
Router> configure terminal Router(config)# set firmware boot number 1|2 After boot up partition number is set, device will reboot immediately by selection partition.
-
How to check the issue during apply the configuration file?
How to check the issue during apply the configuration file? If a user cannot apply a configuration file and the device shows an error log, choose "Immediately stop applying the configure file" first before trying to apply the configuration file. VERIFICATION: Go to Monitor > Log > Display category, choose "File Manager";…
-
How can I be sure that the CPU high usage is due to heavy traffic loading?
How can I be sure that the CPU high usage is due to heavy traffic loading? Use the command line "debug system show cpu status" to see the CPU usage details. Refer to the screenshot below wherein "softirq" means that the CPU is occupied with traffic load. On the other hand if the CPU is occupied with a system item, users…
-
Why can't the daily report be sent when I configure Gmail as the mail server in Email Daily Report?
Configurations on the USG Configurations on Gmail account Turn on "Allow less secure apps" on the Gmail account.
-
How can I unlock a user who has been locked by ZyWALL USG due to failed login attempts?
SCENARIO DESCRIPTION:I have forgotten my device login password, so I tried many times to log in to device. But the device shows the password is wrong, and locked my address. And after 5 minutes, I have found my password again. But my address is still locked, how can I resolve this issue? SETUP/STEP BY STEP PROCEDURE:You…