-
ROUTING
Good morning, I have an ATP200 with a vlan/dmz to which I connected a NAS that must be reached on the external IPs of the two WANs for the services on ports 80 443 and 10001, I created the NAT rules and the security policies I needed, from outside it works correctly! If I try to reach the device on one of the public…
-
Ransomware Helldown
Hello, Please comment on this article: https://www.truesec.com/hub/blog/helldown-ransomware-group We have Zywall firewalls deployed at all of our customers and two have already been attacked by Helldown ransomware.
-
USG20W-VPN FSCK message
When rebooting our USG20W-VPN router via the console port, I noticed this message: /dev/mmcblk0p7: UNEXPECTED INCONSISTENCY; RUN fsck MANUALLY. (i.e., without -a or -p options) I already used the reset button on the router and then reapplied a saved config file. The above error was still reported. How can I get rid of the…
-
SSL VPN working on FLEX 100H?
Does anyone have the SSL VPN working on a FLEX 100H? I have 2 FLEX 100H routers and to one connection is made, but no IP address is given, The other on only gives Connection Timeouts. I don't see any blockage in the Firewall. Zyxel tested it and say's it works, but not here, nor at a customer, OpenVPN on several laptops,…
-
Next Hop: VPN Tunnel Flex 100H
I am looking to upgrade my home VPNs from Zywall USG 110s to Flex XXXH(P) - I had upgraded one of them this summer - and realized that I could not define a VPN tunnel as a next hop. Zyxel Customer Service then replied to a message that would be a feature supported in the October firmware - it does not seem to exist in the…
-
VPN100 and FW 5.39 availability
Do you know when we will have the updated firmware 5.39 for the VPN100 series ? I am facing modifications in safety policy and creation of users by hackers. I have removed the modifications but what can you suggest ? Regards
-
64 object limit for IP group
Hello to everyone, today I discovered that there's this limit of 64 entries for Address group, and it hit me in two ways. 1: the limit is present on ZLD 4.x device like USG40. 2: the limit is also present on a ZLD 5.x device, like USG Flex 50 (or as it was born… USG 20 VPN. 3: the limit is not present on a ZLD 5.x device…
-
Site2Site VPN and IKEv2 VPN - No Route to Remote Site
Hello, I have a problem with my ATP. There are 2 different VPNs: Site2Site (HQ<->EXT): 172.16.0.0/16 (HQ) to 172.17.0.0/16 (External Site) IKEv2 for clients (HQ): Range 192.168.10.10 to 192.168.10.100 The S2S connection to the external site (EXT) works without problems when I use it in the HQ, i.e. without an additional…
-
USG40 - routing traffic between two networks
I have two networks in our office: one for general office traffic (192.168.2.x - P1/lan1), and one for a control system (machine automation, PLCs, etc) (192.168.15.x - P4/DMZ). I need to keep the control network isolated so it doesn't get bogged down by heavy office traffic. However, I want to be able to access specific…
-
What's New: uOS1.30 Patch 1Firmware Update for USG FLEX H Series
This discussion has been moved.
-
VPN BETWEEN ZYXEL ATP200 AND FRITZBOX! 7590
Good morning at all,I'm trying to create an IPSec VPN Tunnel between an ATP200 and Fritzbox 7590 without success.Does anyone did this VPN configurantion and can help me? On the Fritzbox the error is:Errore IKE 0x203D --> "phase 1 sa removed during negotiation" The ATP Debug log is atached as "TESTVPN_LOG.txt" Thank you so…
-
Our organization has a USG 1100 firewall installed. We have forgotten the password, what can we do?
-
no IP address from OpenVPN SSL client
I try to connect with the OpenVPN client to a Zyxel Flex 100H with SSL VPN. if I look in the logs the SSL VPN client IP assigned is 192.168.200.2 If I look in the command window I see an 169 address what means that the VPN client did nog get an IP address. I can't get an RDP session despite I am connected. What goes wrong?…
-
USG Lite 60AX feedback as requested for device testers
Device itself nice and compact, very suitable for Home Office users, especially in organizations which already have their network infrastrucure based on Zyxel devices. Two 2.5GHz ethernet ports makes it also future-proof for increasing speeds on home internet connections. Configuration is as easy as on any Nebula-based…
-
SecuExtender VPN Client IPSec 2.2.0.019 not saving password. Doesn't launch 2FA page.
Hello, I have a lot of Windows SecuExtender Clients out there and they work fine. Just installed on a MacBook running Ventura and it's hobbled?? I enter the credentials under EAP and click Configuration→Save. It doesn't save the credentials. When I try the connection fails on EAP. However, if I check EAP Popup and enter…
-
Old Zywall USG 100 DNS inspection feature
Hello… I have an old Zywall USG 100 working flawlessly for 15 years. Yes I know it's end-of-life with all licenses expired… but it still works :) Can someone help me enable its DNS Inspection feature? For example, I have set it up to catch DNS requests for www.printables.com website. This site's IP is whitelisted in 'test'…
-
Port forwarding on VPN100 doesn't work
hello I'm trying since some days to get a certain port forwarded to ony of my clients and I don't get it to work. maybe some basics first: got a fritzbox as modem AND router first (unfortunately there's no bridge mode) zyxel vpn100 is connected over WAN port to the fritzbox, get's an internal IP-address of fritzbox all…
-
Routing internet traffic (only specific domains) through double sNatted IPSec VPN
Good morning i need to route web traffic towards specific domain through a IKEv2 ipsec vpn between two sites with overlapping subnets. Scenario Site A (natted wan ip, can't change nats) calls site B (natted wan ip, CAN change nats) and establish ipsec vpn "site to site with dynamic peer scenario". Both sites have sNAtted…
-
USG20W-VPN Session Monitor Traffic from Server "Wiz_SSL_VPN" No VPN Defined after RESET
After upgrading to 5.39, and performing Factory RESET on Router, I had to rebuild Client's configuration per Zyxel Support recommendation New configuration (after factory RESET) has no VPN defined, After rebuilding Client's Router manually, I'm seeing a lot of Traffic when I view "Session Monitor" from the Server IP,…
-
Zywall 110 documentation
I appreciate this product is now EOL but what was the last Zywall 110 handbook number? Where can it be downloaded from? The latest one ive been able to find is ZyWALL 110_ZLD4.38_Handbook but that appears to be from 2020?