-
dns content filter UsgFlex500 domain environment
hi, I have an usg flex500 that protect my microsoft AD and I have configured/activated the DNS content filter but I can not see anything detected; my clients's DNS point to our domain controllers. I don't know where is the problem. thank you.
-
CLI command "schedule-run"
I'd like to discuss two things within this post. a) Is there a full CLI description for the "schedule" commands within the console environment. I can't find any CLI documentation on the following commands: schedule schedule-run schedule-object I'd especially like to know what "schedule" and "schedule-object" can do. I have…
-
Destination NAT on VPN
I read this: https://mysupport.zyxel.com/hc/en-us/articles/360003321659--ZyWALL-USG-How-to-configure-VPN-SNAT-on-Zyxel-gateways In particular this picture: The first part is very clear: we have LAN1, we have to reach REMOTE with FAKE address. But the latest, DNAT that does the contrary, seems a Virtual Server NAT setting.…
-
SCR 50AXE IPSec VPN only Site2Site?
Hello, I bought an SCR 50AXE privately to get a little more involved with the Nebula Cloud. I have now put it into operation and replaced an AVM router. The info sheet said that the device supports IPSec VPN, which I wanted to use (Android smartphone, Windows tablet). In Nebula itself, however, I can only find the option…
-
SCR50 AXE trial licence is valid or not?
Hello, I'm using Nebula accessing my SCR50 security router with trial licence. At some configuration poins the message appears: "This organization is using the Base Pack version of Nebula.Advanced features can be unlocked by purchasing a Nebula Plus or Pro Pack License". Clicking on it brings up the licence and inventory…
-
Strange behaviour on USG Flex 100v2
Something strange is going on with the DNS settings on my USG Flex 100v2. When I set the DNS on wan to my ISP's DNS, one of my computers will not connect to the internet. Well it will connect but then it won't, so it's back and forth. Sometimes it works, sometimes it doesn't. No other computer is affected by that. Sadly…
-
VPN L2TP no ping LAN
Hi. I have configured an L2TP VPN on the USG40. The VPN connects, but devices are not responding on the network. I can't log in to the router, the router doesn't respond to ping, etc. I am attaching screenshots of routing and security policy. what else should I check?
-
USG Flex 200 rack mount "ears"
We need several pairs of the rack mount "ears" for the flex 200 firewalls. Where can these be ordered at? I'm not finding them in the Zyxel store.
-
Traffic between tunnels (and NAT)
Let's say we have three sites: A, B, C. Between A and B: policy-based site-to-site tunnel Between B and C: policy-based site-to-site tunnel Then we need that an host (a single host) from site A reaches an host or a couple of site C. Only So the config would be On A: -policy route with source host, destination host, next…
-
IPSec VPN behind routeur and DMZ
Hello, Using the wizard (USG FLEX 100/200), i build an IPSec vpn. The only modification i made, is on the VPN gateway, setting "Peer ID Type" to "any" on both side. On one side the FLEX 100 is in a DMZ, at other side, the Flex 200 is behind the provider router (fixed ip's, NAT for 50,51,500,4500,47,112 already done). The…
-
USG Flex 200 on Sunrise 2.5Gbit/s Internetconnection
First of all, I know that the USG Flex 200 isn't capable to benefit from 2.5Gbit/s connection on the WAN port. My problem isn't related to the speed of the connection, it is related to the behaviour of certain devices on my network. Before using Zyxel devices on my network I was using an ASUS Wifi-Mesh Router. It was…
-
USG 110 VPN VPN access with domain users
hi, I am configuring L2TP VPN access with AD users. Within the AAA Server configuration I have configured access to the domain, I do a test with the user "Alejandro" and it is OK. I have configured an L2TP VPN connection and with a local user in the USG it works without problem. I have created a global security group in my…
-
Site to Site VPN Quit Connecting
Anyone with Site to Site VPN just suddenly disconnected? My Flex 500's will not reconnect. I've deleted configurations. Started over. Zyxel engineer looked at settings, deleted settings. Nothing!! Any ideas?
-
atp100
Good afternoon. I am configuring the ATP100 hardware firewall in transparent mode, created a new object, a new bridge, and disabled the last two ports in it. The rules created in the firewall control the passage of traffic through the bridge. Is it possible to redirect DNS traffic, for example, all that goes through the…
-
VPN IPsec entre USG300 et USG40 FREE PRO
Bonjour, Je viens de changer d'opéateur pour passer de Bouygues à Free Pro. Suite à ce changement, impossible de monter un VPN entre un USG300 et un USG40. J'ai créé une DMZ sur la FREEBOX PRO. En log, sur l'USG300, j'ai "[COOKIE] Invalid cookie, no sa found [count=2]. Si quelqu'un pouvez m'aider ou m'aiguiller. Merci et…
-
ZyWALL USG 20 Firmware 4.10
Hi. I try to update my USG 20 (non wireless) fomr V3.30 to the newst one. Unfortunately the earliest firmware I able to download is 4.16. But I need the versions between as the updgare not working strait to 4.16. Can I find all the needed files up to V5 ?
-
Upload config.conf files on different devices
Good morning everyone. I have a question. I have customers who have different security devices: Atp100, Usgflex200, Usgflex100. My question is: if I back up the configuration via config.conf file, is it possible to upload a config.conf file of an Atp100 to a Usgflex100 if necessary? Or Usgflex200 on a usgflex100 or Atp100?…
-
USG FLEX 50 VPN - Split DNS help
Hi, I have recently setup an IPSec VPN (client to site) on my USG FLEX 50. It is working fine on all the devices I need it to work on. I recently came around an issue regarding DNS. I have a local DNS server that's setup in the USG's DNS settings and it is working fine for all local devices using DHCP. However, with the…
-
ZyXEL SecuExtender "request configuration from the gateway"
I have a problem setting up Client 2 Site with IKEv2. On the firewall I already have a Site 2 Site with preshared key which works fine. I now want to add a client 2 site, but as long as the Site 2 Site is turned on, I cannot connect with Secu Extender, unless I turn off "Request configuration from the gateway" This means…
-
Looking for ZyWALL USG 100 firmware version 3.30(AQQ.2)
Hello and good day everyone, I'm looking for version 3.30(AQQ.2) firmware for a backup ZyWALL USG 100. I looked around and the closest versions I found were 3.30(AQQ.0) and 3.30(AQQ.3) in a forum post here. Does anyone have it available? I am currently using version 3.30(AQQ.7) but need the specific firmware above to…
