-
Seriously, your ideas could be new feature for Security!
Hello Security Forum Members, Do you have moments that if your own thoughts or ideas can make better experience when using Zyxel security products? <3 We can make your wish come true! <3 Simply start a new post here describing your fabulous ideas for features or services you wish to have! Once your ideas get lots of vote ,…
-
[USG Flex H] - Secondary boot image
Hello, I've discovered that is possible enable, via CLI, a secondary boot image. My idea is to enable directly the secondary image without enter commands into CLI. A secondary boot image can be used to switch between firmware images without re-apply the firmware upgrade process. For example: Image1: Previous Firmware…
-
[USG Flex H Series] - PHY-based Virtual Cable Tester
Hello everyone, I would like to suggest a new PHY-based Virtual Cable Tester/Time Domain Reflectometry diagnostics to the USG FLEX H Series. Basically is so quite simple: Select the port/ports that you would like to check; The firewall check the selected ports and report: Status: Cable OK/Normal → When the connection is…
-
USG Lite 60AX DHCP Option 66
User @Alex_91 need USG Lite 60AX to support DHCP Option 66 to ensure that IP phones can correctly retrieve their provisioning configuration from the PBX or provisioning server. Anyone who also needs this option, please leave your comment and give it a vote. Original post
-
Zyxel H - Open VPN and slow UDP protocol
We would welcome a fix for UDP performance on FLEX H devices. TCP performs as expected, but UDP throughput is consistently very low. 😐️ Testing across multiple ISPs and configurations shows download speeds of approximately 4-8 MB/s and upload speeds of only 0.5-2 MB/s, despite both sites having 400 Mbps internet…
-
[USG Flex H - PoE] - Schedule PoE power
Hello everyone, I've a Flex 500H, and use PoE to power a NWA130BE Wifi Access Point. I would like to creare rules for when I would like to power the PoE. For example: mon-fri 08:30AM-11:30PM — sat-sun 09:00AM-12:00AM It's possible to create schedulation for PoE Power? Thank you
-
[USG Flex H Series] - Limit bandwith for Application
Hello everyone, into the Nebula Site, is possible to limit the bandwith usage for application. This functionality seems that is missing into the USG Flex H Series NGFW. Is possible to apply this functionality, limiting the application bandwith for interface but also for client? Thank you
-
Feature request: native Cloudflare Tunnel (cloudflared) on USG FLEX H
Hello everyone, I would like to open a discussion: would native Cloudflare Tunnel support be useful in uOS for the USG FLEX H series? I can show that it works on the hardware. Why. Publishing an internal service today means a port forward and an open WAN port. With Cloudflare Tunnel the firewall only opens outbound…
-
USG Flex H Series Application Routing align the option that listed in the "Applications Usage"
User @Pook raise an idea that USG Flex H Series Application Routing function should align the option that listed in the "Applications Usage". If anyone like this idea, please give it a vote and leave your comment. Original post
-
Zyxel Config Explorer: see what a USG FLEX H (uOS) config does, in your browser
I keep getting handed USG FLEX H firewalls I didn't set up, and before touching anything I want the basics: which zones and VLANs exist, where traffic is allowed to go, what is reachable from the Internet, and whether the rules contradict each other. The web interface shows policies, objects, NAT, VPN and routing each on…
-
SSID Profiles on Flex H
The flex series of firewalls supported an object which defined the properties of the SSID and SSID Security settings, including Band, Mode, DCS Awareness, Mode, VLAN ID, and roaming features. (Object → AP profile → SSID Profile). Once defined these profiles were associated to AP groups. Modifying a SSID profile would…
-
Text field enabled in two-factor authentication (2FA)
When you enter the url to enter the google authenticator OTP for the 2FA of the firewalls you cannot just digit the 6 numbers but you have to click in the field (or press tab) to activate the text field. Moreover, after inserting the OTP you cannot hit enter to go ahead but you have to click on the green button. You should…
-
[USG FLEX H] Allow DDNS Check Period lower than 5 minutes (e.g. 1 minute)
On USG FLEX H, the DDNS "Check Period" currently has a fixed minimum of 5 minutes. This means that in the worst case, after a WAN IP change, it can take up to 5 minutes before the device even notices and starts the DDNS update — which matters for anyone relying on DDNS for remote access, VPN, or similar services. This was…
-
Add "Bind DN Base" to the AD Server settings in NCC for USG FLEX H Series
In response to the requirement raised by user @ChipW , we propose adding the [Bind DN Base] field to the Active Directory (AD) server settings in Nebula Control Center (NCC) for USG FLEX H Series firewalls, to maintain feature parity with the device's local Web GUI. For more context, you can check out the original…
-
Support FQDN groups in the Captive Portal Walled Garden list on USG FLEX H Series
In response to the requirement raised by user @itariant , we propose adding support for FQDN groups in the Captive Portal Walled Garden list on USG FLEX H Series firewalls, in both the local Web GUI and Nebula Control Center (NCC). For more context, you can check out the original discussion here:…
-
USG FLEX H support speed test diagnostic function
User @henriquev hopes USG FLEX H support speed test diagnostic function. Anyone who likes this request, please feel free to leave your comment and give it a vote! Original post
-
DHCP and Secondary IP
It CAN be possible older models do it! when you do a routing rule incoming LAN next hop WAN 2 SNAT outgoing-interface which will be the the DHCP IP Or in my setup also incoming WAN to Secondary IP 192.168.254.1 Source Address 192.168.252.0/23 next hop WAN 2 SNAT outgoing-interface which will be the the DHCP IP with Static…
-
Apple OS Update- option to BWM
Hello, Apple is launching OS updates for iOS, iPadOS and macOS devices simultaneously nowadays. The installation package for each update can vary from 4GB+ to 20GB+ depending on dot release or major release. In practice, when the updates start to take place, it can eat the significant amount of capacity, even for fiber…
-
[USG Flex H] - Resolve A Record only from selected interfaces
Hello, As per request: I've configured an A Record DNS entry: xyz.no-ip.org —> 192.168.0.1 This host is an DDNS that, externally, resolve with my external WAN IP. Now, internally, when I try to resolve xyz.no-ip.org, the gateway return to me 192.168.0.1 as per A Record entry, externally resolve with the WAN IP correctly.…
-
Support PoE Port Priority Management on USG FLEX H Series
In response to the feedback from @Maverick87 , we would like to propose adding a PoE Port Priority configuration feature to the USG FLEX H Series. This feature allows users to define the order in which PoE power output is disabled when total power consumption exceeds the 30W PoE power budget. For more context, you can…