-
Zyxel USG FLEX and ATP series – Upgrading your device and ALL credentials to avoid hackers' attack
Zyxel team has been tracking the recent activity of threat actors targeting Zyxel security appliances that were previously subject to vulnerabilities and admin passwords have not been changed since then. Users are advised to update ALL administrators accounts for optimal protection. Based on our investigation, the threat…
-
What's New: uOS1.30 Patch 1Firmware Update for USG FLEX H Series
This discussion has been moved.
-
What's New ZLD5.39
Enjoy stronger traffic control with a new CLI command to drop TCP SYN packets with data, faster filtering, and a fix for Chrome’s TLS 1.3 content filter bug. Update today for seamless protection. Zyxel is committed to continuously updating your devices for important maintenance information. This latest release also…
-
Important Reminder for your Content Filter Service
At Zyxel, we are committed to providing you with the most advanced and secure services possible. In line with this commitment, we continuously enhance our Content Filter service to ensure top-notch security detection from Trellix. To ensure your service running stable and efficiently, please upgrade firmware to the latest…
-
How to solve the issue "ZTP is already enabled" on VPN series?
Symptom: Unable to access the web GUI. Access the web GUI but the page "ZTP is already enabled" appears. The device is on-premises mode and never deployed using ZTP. Q1. What are the impact model and version for this issue? Affected model Affected version VPN50 5.00 through 5.36(ABHL2)C0 VPN100 5.00 through 5.36(ABFV.2)C0…
-
What should I do if the device failed to be upgraded to the latest firmware?
Please follow the procedure to upgrade the firmware Step 1. Make sure you have on-site local support that able to reach the device Step 2. Unplug all WAN connections. Step 3. Access the device via LAN IP. Step 4. Copy startup-config.conf to recover.conf. Download "recover.conf" to your PC. Step 5. Switch to standby…
-
USG Flex 200 rack mount "ears"
We need several pairs of the rack mount "ears" for the flex 200 firewalls. Where can these be ordered at? I'm not finding them in the Zyxel store.
-
USG FLEX 500 VPN Server EAP-MSChapv2 vs EAP-TLS/PEAP on Radius
Hello, i've got some trouble setting up remote user connection with certificate instead of user/password, and i don't find much documentation about this on Zyxel networks. I've setup VPN gateway & tunnel for remote user connection with radius authentification EAP-MSChapv2 successfully, but when i'm trying to change Windows…
-
Strange behaviour on USG Flex 100v2
Something strange is going on with the DNS settings on my USG Flex 100v2. When I set the DNS on wan to my ISP's DNS, one of my computers will not connect to the internet. Well it will connect but then it won't, so it's back and forth. Sometimes it works, sometimes it doesn't. No other computer is affected by that. Sadly…
-
IPSec VPN behind routeur and DMZ
Hello, Using the wizard (USG FLEX 100/200), i build an IPSec vpn. The only modification i made, is on the VPN gateway, setting "Peer ID Type" to "any" on both side. On one side the FLEX 100 is in a DMZ, at other side, the Flex 200 is behind the provider router (fixed ip's, NAT for 50,51,500,4500,47,112 already done). The…
-
USG Flex 200 on Sunrise 2.5Gbit/s Internetconnection
First of all, I know that the USG Flex 200 isn't capable to benefit from 2.5Gbit/s connection on the WAN port. My problem isn't related to the speed of the connection, it is related to the behaviour of certain devices on my network. Before using Zyxel devices on my network I was using an ASUS Wifi-Mesh Router. It was…
-
USG 110 VPN VPN access with domain users
hi, I am configuring L2TP VPN access with AD users. Within the AAA Server configuration I have configured access to the domain, I do a test with the user "Alejandro" and it is OK. I have configured an L2TP VPN connection and with a local user in the USG it works without problem. I have created a global security group in my…
-
Site to Site VPN Quit Connecting
Anyone with Site to Site VPN just suddenly disconnected? My Flex 500's will not reconnect. I've deleted configurations. Started over. Zyxel engineer looked at settings, deleted settings. Nothing!! Any ideas?
-
Client VPN access to site A and B
Hi I am trying to create a senario link the one in the picture. Now: VPN Client can connect to Site A and access local resources. Site to Site VPN between Site A and Site B is working. I want users on VPN Client to be able to acces both Site A and Site B, througth the Site to Site VPN. How to do that?
-
atp100
Good afternoon. I am configuring the ATP100 hardware firewall in transparent mode, created a new object, a new bridge, and disabled the last two ports in it. The rules created in the firewall control the passage of traffic through the bridge. Is it possible to redirect DNS traffic, for example, all that goes through the…
-
VPN IPsec entre USG300 et USG40 FREE PRO
Bonjour, Je viens de changer d'opéateur pour passer de Bouygues à Free Pro. Suite à ce changement, impossible de monter un VPN entre un USG300 et un USG40. J'ai créé une DMZ sur la FREEBOX PRO. En log, sur l'USG300, j'ai "[COOKIE] Invalid cookie, no sa found [count=2]. Si quelqu'un pouvez m'aider ou m'aiguiller. Merci et…
-
ZyWALL USG 20 Firmware 4.10
Hi. I try to update my USG 20 (non wireless) fomr V3.30 to the newst one. Unfortunately the earliest firmware I able to download is 4.16. But I need the versions between as the updgare not working strait to 4.16. Can I find all the needed files up to V5 ?
-
Upload config.conf files on different devices
Good morning everyone. I have a question. I have customers who have different security devices: Atp100, Usgflex200, Usgflex100. My question is: if I back up the configuration via config.conf file, is it possible to upload a config.conf file of an Atp100 to a Usgflex100 if necessary? Or Usgflex200 on a usgflex100 or Atp100?…
-
USG FLEX 50W (USG20W-VPN) no graphs
Hi I don't have graphs on cpu or others when I clic on the line I don't have anymore graphs on traffic Since the version 5.39 of firmware Is there anybody who can explain to me how to retreive graphs? I don't receive automaticaly the daily report, the smtp server is correct because I receive the report when I clic to send…
-
USG FLEX 50 VPN - Split DNS help
Hi, I have recently setup an IPSec VPN (client to site) on my USG FLEX 50. It is working fine on all the devices I need it to work on. I recently came around an issue regarding DNS. I have a local DNS server that's setup in the USG's DNS settings and it is working fine for all local devices using DHCP. However, with the…
-
ZyXEL SecuExtender "request configuration from the gateway"
I have a problem setting up Client 2 Site with IKEv2. On the firewall I already have a Site 2 Site with preshared key which works fine. I now want to add a client 2 site, but as long as the Site 2 Site is turned on, I cannot connect with Secu Extender, unless I turn off "Request configuration from the gateway" This means…
-
Looking for ZyWALL USG 100 firmware version 3.30(AQQ.2)
Hello and good day everyone, I'm looking for version 3.30(AQQ.2) firmware for a backup ZyWALL USG 100. I looked around and the closest versions I found were 3.30(AQQ.0) and 3.30(AQQ.3) in a forum post here. Does anyone have it available? I am currently using version 3.30(AQQ.7) but need the specific firmware above to…
-
IKEv2 Certificate Based on iOS 17.03
Hello Community, after getting a new apple device (iPhone 15) with the latest version (17.0.3) I am not able to get my IKEv2 VPN running. With the previous apple device (iPhone X) all was working fine. The configuration has not been changed on the ZyXEL (USG20W-VPN) side. Please see a screenshot of the configuration: After…
-
Set up Firewall as Switch
Since im always bored i tried to set up a USG40W as a Switch and i cant get it to work. I disabled Policy Control since i only want it to be a Switch and not a Firewall. My DHCP Server has an IP of 192.168.69.1(255.255.255.0) and it will give the WAN Port on the USG a IP(192.168.69.17) but it will not give an IP to any…
-
USG FLEX 200: is 2FA (Google Authenticator) supposed to work on L2TP vpn?
Is 2FA supposed to work on L2TP vpn? I did some test and it didn't work. The tunnel goes up, and traffic starts to flow. Even if the user doesn't go through 2FA process.
-
ZyWall USG60: VPN IKEv2 Connection using Windows 11?
Hello I'm trying to connect to my LAN from outside, using a VPN IKEv2 connection as instructed here: https://mysupport.zyxel.com/hc/en-us/articles/360005744000--ZyWALL-USG-How-to-set-up-a-Client-to-Site-VPN-Configuration-Payload-DHCP-connection-using-IKEv2 I think the security proposals there are obsolete, as Windows uses…
