-
How to register the brand new USG FLEX series on Nebula Control Center (NCC)?
SCENARIO DESCRIPTION: The USG FLEX series are Zyxel’s powerful firewall
products that have the precise protection, delivering high level of performance
and security for SMB business networks. With the recent integration of USG FLEX
firewall series into the NCC, Nebula cloud-managed platform is now further enhanced
with…
-
How Value-added resellers act on behalf of their customer to pre-configure the USG FLEX on Nebula
USG FLEX on Nebula USG FLEX series can be managed and provisioned by Nebula Control
Center (NCC) from ZLD5.00 firmware. This document shows how Value-
added resellers (VARs) act on behalf of their customer to add and
pre-configure the USG FLEX settings on Nebula, before delivering the
device to customer or reseller for…
-
Collaborative Detection & Response (CDR) keeps your network more secured and healthy
In
recent years, rapidly-expanding attacks surface. More and more companies are
encountering a higher risk of transgression than ever before as they are unable
to retain security expertise to keep their network away from current threats. Collaborative
Detection and Response is a feature enhancement that further improves…
-
How to register on-premise USG FLEX series onto Nebula Control Center (NCC)?
The USG FLEX series
are Zyxel’s powerful firewall products that have the precise protection,
delivering high level of performance and security for SMB business networks.
With the recent integration of USG FLEX firewall series into the NCC, Nebula
cloud-managed platform is now further enhanced with zero-trust security…
-
How to establish Site-to-site VPN when both Nebula gateways are in different Organizations?
In Figure1,
there are two Nebula gateways that want to establish site-to-site VPN
connection, but they are in different organizations. Figure 1 Site-to-SIte VPN Configuration Setting: For Demo/Demo: Go
to "Configure > Security gateway > Site-to-Site VPN > Non-Nebula VPN peers"
and configure the parameters. Name:…
-
How to simply troubleshooting on my Nebula Security Gateway?
Hi all Nebuler~ We create a guide for you guys to have simple troubleshooting steps when you encounter a problem on Nebula Security Gateway. We will keep updating more symptoms to the file in the future. Please stay tune on this post. Thanks.
-
[NEBULA] How to set L2TP over IPSec VPN on NSG and end devices?
In Figure1,
there are multiple clients that want to access the server that is behind NSG. To
do that, the clients establish the L2TP over IPSec VPN tunnel to NSG. Figure 1 L2TP over IPSec VPN Configuration Setting: For NSG: * Go
to "Configure > Security gateway > Remote access VPN" and configure the
parameters. Client VPN…
-
[NEBULA] How to protect my network/NSG by using firewall rules on NSG?
Scenario 1: Deny specific IP from other LAN/VLAN to access a server in LAN2. Ex: The user wants to deny 192.168.1.10 to access the server with IP address 192.168.2.10. Scenario 2: Deny specific IP from WAN to access a server in LAN which you have configured virtual server (port forwarding) for it. Ex: The user wants to…
-
How to monitor the Client to site VPN Clients on NCC?
Monitoring the Client to site VPN Clients on NCC You can go to Monitor > Security gateway > VPN Connections > Client to site VPN login account to check the VPN clients. On this page, we list down all the Client to site VPN login accounts here, including Who’s connected – with User Name and Hostname What IP address being…
-
[NEBULA] How to configure the Zyxel VPN client to Nebula Control Center ?
Since Nebula phase 8.1 we have support IPSec VPN client which allow you to connect your devices at home to a VPN server at your work place. Figure 1 Connect IPSec VPN tunnel via home Note: In this scenario client can still connect to the tunnel even it uses private IP (located behind the NAT gateway). On the other hand, if…
-
L2TP over IPSec VPN tunnel not connected, if the NSG is located behind the NAT gateway.
In this scenario you will need to configure the port forwarding on NAT gateway (NSG's uplink device) in UDP port 500 4500 and 1701. If your client is using Windows 10 then since in default setting it won't support this scenario (VPN server behind the NAT) then need to modify the registry. Refer to Windows knowledge base or…
-
Setting Up VPN Connections on Nebula and End Devices to Enable a Secure Connectivity for Remote Work
The world is going through a difficult time due to the impact of the COVID-19 outbreak, many businesses have no choice but to close their physical offices and have their employees work from home. While working from home is becoming essential, network administrators have to work harder to provide everyone with the right…
-
Using Smart/guest VLAN Feature to Ensure Proper Network Setup Across Devices
Nebula Control Center introduced this intelligent feature in October 2019, bringing even more easiness while settings up your networks from the Access point up to the NSG or vice-versa, and making sure that everything is well set and ready by doing sanity checks. Smart/guest VLAN network can be enabled on Site-wide >…
-
[NEBULA] How to Configure L2TP over IPSec VPN Connection on MAC OS?
After configuring L2TP over IPSec VPN for NSG on NCC, please follow the step below to create VPN profile on MAC OS. Go to System Preferences -> Network. Click "+" to create a new service, select "VPN" for Interface, "L2TP over IPSec" for VPN Type and give it a name. Configure Server Address as your NSG's public IP and your…
-
Nebula tools for Multi-site management
When it comes to setting up and managing hundreds or sometimes even thousands of sites, automation is the key. Using automated tools to build and manage multiple networks will most certainly improve efficiency and alleviate workload, saving both time and money for businesses. This article addresses the important automated…
-
[NEBULA] How to configure IPsec VPN client on Nebula control center.
Simple, secure access anywhere Zyxel VPN Clients offer a flexibly easy-to-use, easy-to-manage Virtual Private Network (VPN) solution that provides distributed users with secure, speed and reliable remote access back to corporate resources 1). Click into the new UI and go to Configure>Security gateway>Remote access VPN,…
-
[NEBULA] How to estatblish Site to Site IPSec VPN between NSG and Microsoft Azure?
Here is the example for the user who uses Zyxel NSG and Microsoft Azure and wants to configure Site-to-Site VPN configuration. It only has a few simple steps to accomplish securitly VPN connection between two Cloud Management Platforms! Scenario: Let's begin with the steps on NSG and Microsoft Azure! [For NSG] (Please note…
-
Why I can't establish L2TP VPN from my Windows 10 PC to NSG which is behind NAT?
If you find out that there is no such issue on mobile phone or other OS, please refer to the following KB on Microsoft website. https://support.microsoft.com/en-us/help/926179/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows P.S. In step 7, please configure "2" in the Value Data.
-
[Nebula] How to configure Policy Route on NSG?
Policy Route is a features that could make traffic forward to the desired destination like LAN, WAN or even VPN tunnel. Mechanism of this feature: 1. Maximum of 20 policy Routes per site. 2. Three types of Policy Route: (1)Internet (2)Intranet (3)VPN 3. Routing Hierarchy: Direct Routes > Policy Routes > Static Routes…
-
How does the WAN Conectivity Check work?
WAN Connectivity Check is one of new features on NCC Phase 4. Motivation of this feature: Scenario: NSG has dual active WAN interface that makes traffic potentially route across an interface with no Internet connection because of load sharing. For example, NSG has WAN 1 and WAN 2 connection to perform load sharing.…