-
site-to-site vpn, no communication
Having two USG Flex 100 and an VPN connection using IPSec with a pre-shared password. Latest firmware installed. We need 5 VLAN connected to both sides (branch and central). Subnet1 central: 10.7.1.0/24 Subnet1 branch: 10.8.1.0/24 Subnet2 central: 10.7.2.0/24 Subnet2 branch: 10.8.2.0/24 etc. VPN tell me, it's connected,…
-
VPN SSL DROP AFTER OPEN A RDS SESSION
Hi, my customer use zywall secuextender to connect to a VPN 100 the vpn connection work fine but if he want to connect his RDS session, THE VPN DROP here is the log [ 2024/09/16 17:21:29 ][SecuExtender Agent][DEBUG] Virtual network interface: \.\Global{AF359EC3-B88B-4562-82EF-CD6AC01BF5CF}.tap [ 2024/09/16 17:21:29…
-
VPN don't work
Hi, we have a VPN configured, using L2TP. It's not frequently used, but the last time it was working, 1 month ago, maybe… But now it's showing a error message when trying to connect using windows VPN. Error message: "Unable to connect to Palhoça Headquarters. L2TP connection attempt failed because the security layer…
-
configure sfp port
-
ATP100 as a client
Hello, how do I configure ATP100 to be an l2tp client and not a server? Здравствуйте, как настроить чтоб ATP100 был клиентом l2tp и не сервером?
-
USG40 DMZ
Hello, please help,am newbie,have a USG40 firewall,I would like to run a web server on the DMZ port, how do I have to configure the rules so that the web server can be reached from outside, everything works via Lan1 with port forwarding, I just don't know how it works with DMZ, on the Fritzbox which is the DSL modem they…
-
How to access local LAN from IPSec VPN tunnel via USG FLEX
Hi, i have following issue: I would like to access local LAN PCs after being successfully connected via IPSec VPN Tunnel, but can reach only the USG under the local IP adress like (192.168.171.1), but no other LAN PCs like (192.168.171.20) My network route looks as follows: Client PC (Windows) is connected over Zyxel IPSec…
-
VPN100 - smtp authentification password charset
Hi folks, I'm trying to setup an automatic email of our logs, but I'm facing a trouble : smtp authentification password are not considered valid if they contains a space character. As I'm using gmail to send emails, and password apps are generated by google and are always including spaces I'm in a dead end. Could you…
-
Flex 200H - Sending logs via email
Hello everyone, in the past I used to send logs via email, like you could do with USG60W. It was possible for the firewall: and for the APs managed on premise: So it was possible to config an email sent for what you wanted to see with the right panel: Is it possible to do the same also with 200H in the future? Right now…
-
use a specific wan port for a local ip address
i have usg60 device which have wan1 connected to a 5g router(with ip 192.168.1.85 and wan2 connected to a fiber router (with ip 192.168.0.85). the network is connected to lan1 with ip 192.168.2.85. in the configuration we have load balance and failover and a VPN L2TP-ipsec. the question is: how i can force a specific local…
-
IPSec ESP packets dropped by default security policy rule after reboot
This seems like pretty odd behavior. A site-to-site VPN, IKeV2, pre-shared key, local and remote policies are /24 networks, defined in the IPSec_VPN zone. On boot, the tunnel automatically connects but won't pass traffic. If I disable the security policy it will start passing traffic. If I re-enable the security policy it…
-
Cannot find SSL VPN client for MacOS anymore in Downloadcenter
a few month ago i could download SecuExtender VPN Client_SSL_VPN_Client_1.2.6 for MacOS but know i can not find it anymore. What happend? Is not possible anymore to download the client for the perpetual licenses? We bought 8 or 10 licences this year for this SSL-VPN Client moe
-
USG Flex 200H - Impossible to send config via email
Hello everyone, I upgraded to 1.21 firmware and as you can see it's impossible to send a backup config via email: While the connection test is passed: Is there a place where to set an autosend config when something is changed like it happens with "old" USG Flex and ATPs? Thanks
-
Geo IP filter works too much
I'd like to block traffic from China and I set Geo IP filter. Traffic from China is blocked. But part of traffic from Japan is also blocked. I must receive traffic from Japan. What can I do?
-
Flex 700 to Flex 700H migration
Hello, I'd like to replace an existing Flex 700 firewall with the newest Flex 700H. I didn't see any way to convert the current configuration file with the online converter tool. Can I upload directly the config file from the old system to the new one or is there a way to do so ? Thanks !
-
USG Flex 200H - Strange CPU usage
Hello everyone, as you can see with 1.21 firmware you have a strange CPU usage graph: In my case I have about 25% on Core1 and 25% on Core2, while Core3 and Core4 are at zero value. May I miss something somewhere else? To be exact these are details for each CoreX:
-
Transfer USG1100 config to Flex 500H
Need to change firewalls at location. Is this possible? 3rd party utility available? Doesn't appear to be supported via usg configuration converter.
-
Block network access when security policy doesn't comply
Hello everyone, Question, is it with zyxel possible to auto block network access from network clients when they doesn't comply to our security standards. For example: When an client is infected with ransomware, would it be possible that zyxel detects it, and block all network access of this client? I know other brands has…
-
USG FLEX 100 - 5.39: Loss of Internet Access after update
Had a unit auto-update this morning and since restart has not allowed internet access. No internal devices (LAN or VPN) show any logs for WAN access, even with the security policy set to log for approved and deny. Was working perfectly fine until the update. No errors found, no config was changed, only the firmware update.…
-
Who uses virtual interface please post
Please post if you use virtual interface and if you can how.
