-
NCC server to pop out warning message if any interface IP address subnet are overlap
This discussion was created from comments split from: NCC displays incorrect port status Description: USG FLEX behind NAT, after finished ZTP and online success. But WAN and LAN interface address are overlap, so caused many abnormal behavior. If NCC pop out error message when detects any interface address overlap, then it…
-
Automatically renew DDNS status on the monitor page.
This discussion was created from comments split from: Custom Dynu with auto needs manual update Description: To add an automatically renew monitor status feature on this page(Monitor > system status > DDNS status), rather than manually press the Refresh button to check status.
-
ATP on Nebula
Will ZYXEL be bringing the ATP series to Nebula?
-
NCC support 3rd party certificate import to device
This discussion was created from comments split from: USG Flex 500 SSL CertificateDescription: NCC support 3rd party certificate import to deviceClick like if you think the feature is useful and beneficial.
-
Source port for firewall Policy control
Add Source port drop down when making firewall Policy control rule.
-
Support customize MSS setting in interfaces
This discussion was created from comments split from: Failed Connectivity Check cause VPN terminated Description: To support customize MSS setting in interfaces can prevent TCP packets are fragmented by routers in the path.
-
Failed Connectivity Check caused a termination of S2S IPSec VPN tunnel(USG110)
This discussion was created from comments split from: Failed Connectivity Check cause VPN terminated Description: Add the Primary & Secondary option for connectivity check on VPN page.
-
MTU size on SYN packets
I have been trying to
get my head round this problem and think this could be solution. As it is the MTU only
apply to SYN, ACK by modifying the MSS in packet which tells the
client how big the packet to send to the remote end. The problem is
the client sending SYN the with MSS 1460 needs to be modified or else
the remote…
-
Online converter tool support migration within same series.
This discussion was created from comments split from: Currently using a USG60 upgrading to a Zywall 110 Description: Online converter tool support migration within same series.Click like if you think the feature is useful and beneficial.
-
Making proxy ARP more secure
So this is a bit of
both how to use proxy arp and making it more secure as the current
way is needed for clients that have static IPs without a gateway set. With ARP for ports 15,
16 and 18 are sent to out to port 17 this is where proxy arp comes in
to play so 192.168.255.55 wants a connection with 192.168.255.53 ARP
is…
-
Enlarge the password length of E-mail account to more than 70 characters.
This discussion was created from comments split from: Using SendGrid as SMTP server Description: Enlarge the password length of the E-mail account to more than 70 characters due to SendGrid API usage.
-
To support x-xss-protection header settings for PCI compliance testing
The PCI scan is now failing on the x-xss-protection header being missing.
-
Copy/Duplicate feature for UTM Profiles
Hello Zyxel team, As per the thread title says, there may be an option to copy/duplicate the UTM profiles at a single click. This will ease the administrator to stop the repetition of the work for different user. The feature like "clone" which is available in "Security Policies" -> Profile control section.
-
Standard OpenVPN client support for SSLVPN.
So the feature could also be used by linux clients!
-
Block everything and allow all the antivirus upgrade only
This discussion was created from comments split from: Security_Update outdated Description: Block everything and allow all the antivirus upgrade only Click like if you think the feature is useful and beneficial.
-
Exception to a Region list or a white list.
The feature that allows you to block traffic from certain regions is really great; I block Africa, South America, Latin America and Oceania because there is noo reason for unsoloicted traffic from thos areas. However, Europe is a bit of a problem for me as my employer's head office is in Sweden. I would normally block…
-
Wish there was a dedicated GE port just for Admin stuff for the GUI.
I wish there was a dedicated “Admin” GE port, besides having the DB9 Console port for the CLI. The Console port is ok, but I think that would be really nice to have a dedicated GE port just for the Admin GUI that It would be isolated from all internet traffic and lan traffic to the dedicated Admin Laptop/Desktop. Although…
-
2FA with network down
Zyxel has an existing mechanism for 2FA via email and SMS. But when your WAN is down, this will not work, and that is when you often need to access your Zyxel device for some diagnostics or setup a workaround.Would it be possible designate one physical LAN port as not requiring authentication, or alternatively,…
-
Save System Logs to USB
This discussion was created from comments split from: Feature Request: Save System Logs to USBDescription: Request 1:Need the saving of logs in CSV or XLS format for which we will have more power to obtain the sort and filter option with the help of excel application. Request 2:Download all the system logs as zip in one…
-
Dynamic VLANs for VPN clients with RADIUS server
Hi All, I have USG210, and I would like to dynamically assign VLAN to a VPN client based on RADIUS policies. Is it possible to achieve it? For this moment I have NXC2500 connected to RADIUS for 802.1x WLAN auth with dynamic VLANs and everything works good, now I would like use RADIUS for VPN clients.