-
SSL VPN still available?
Knowledge Base | Zyxel I was wondering if this option is still available with the newest firmware and an zyxel usg flex 500. I would like to use this for users who want to connect to an internal website with their mobile devices. I cannot find it anymore i the settings. (SSL vpn of course there is, but the next part i…
-
HOW TO BLOCK TIKTOK WITH ZYXEL USG USING APP PATROL?
Hello, I have tried to prevent users from access tiktok but i cann't. When I go to : SETTING -> OBJECT -> APPLICATION -> SOCIAL NETWORK Tiktok is not listed. How do I prevents using tiktok app from their mobile phone? Employees spent most of their time on tiktok using company wifi. I have attached list of social network on…
-
Help setting up a site-to-site VPN with VTI
Hi all, I need to set up a route-based site-to-site VPN from my ZyWall 310 with a supplier company so they can provide some services to us. This is not my skill area so I'm feeling my way and looking for some help! The supplier has sent me details and it will be connecting to Azure so I have been using the guide here How…
-
Connection Site to site Ipsec VPN
Hello everybody I have a site to site Ipsec VPN connection between 2 Zywall 110 How can I
activate ICMP trough this tunnel ? I have the same Problem on many site 2 site with Zyxel Firewall. Thanks
-
What is IP Reputation Hits in SecuReporter App?
Hi, I use Genuine windows 11 laptop OS. I have installed ATP200 firewall with latest firmware in my office. and I have noticed slow wifi connections. So, I configured my laptop WiFi IP with a static IP, instead of usual DHCP IP. My problem: Whenever I browse through various websites mainly for customer support. There are…
-
USG FLEX 50W Not Following Allow Policy
I have a USG FLEX 50W (USG20W-VPN) running V5.32(ABAR.0) that was just installed in front of a PBX. Initially all went well. After installation, we could make calls in and out. Now, for some reason, it is dropping packets due to the default rule when it should not. I pulled a packet capture and see the packets for a new…
-
HTTPS virtual server - requests coming in on different ports?
Hello all, I'm trying to configure an ATP500 to pass https traffic to a FileMaker Pro server. I have everything set properly as far as I can tell, but when I look in the logs I see: Match default rule, DNAT Packet, DROP Source=IP of Source Server:5103 Destination= IP of internal FMP server:443 ACCESS BLOCK I can't figure…
-
USG Flex Arp Table Flushing Issue
I had a few extra devices added to a vlan to configure them to deploy elsewhere, and then removed them and released the ip addresses assigned to them. I just tried to add another to configure and received an ip conflict error from the previous device I had added and removed 2 weeks ago. I used the cli to view the arp…
-
x2 usg100 vpn site-to-site question
Hi all I have read this guide for site to site VPN https://support.zyxel.eu/hc/en-us/articles/360001378873-VPN-Configure-IPSec-Site-To-Site-VPN#h_01GM2RA8B5PS1XV4HBQXRYSEVQ What I want to do is connect x3 sites (one central and x2 branches) together but my question is will each site use the gateway/dns of the central site…
-
When ZyXEL will stop publishing updates to USG-60W?
Hi I believe that the 60w is near EoL. But when will be the last firmware released?
-
USG FLEX 200 - Green activity light on the ports
This is very minor and something I can live with but I just find it odd. I just installed a brand new USG Flex 200 and everything is working perfectly. All ports are connected and auto-negotiated to 1 GB/full. However, I noticed that the only light on the port that lights up is the orange connection light. The green…
-
USG 110 - VPN - Geo ip blocking.
Hi,Having a VPN connection using L2TP over IPSec with a pre-shared password. Latest firmware installed. I would very much appreciate if someone could help me with the setup of blocking access to my VPN from all other countries than my home country. Some time ago when I loged into the USG110 I was suggested to use a wizzard…
-
How can I enable the Ping function from WAN port on a USG FLEX 100
I cant find any information about this
-
problems with HApro
Hello everyone, why can't HApro switch when you physically pull out the cable from the active zuvol, but writes this in the logs: Tue Jan 24 08:25:49 2023 Enter Stand_By mode Tue Jan 24 08:26:03 2023 Change to Active mode because timeout. Tue Jan 24 08:26:15 2023 Change to Passive mode because Interface WAN_MAI_GE2…
-
ATP 200 and SFP-10G-C
I know that my ATP 200 per the documentation support - SFP-1000T. However the devices also supports 10G in both single and multi-mode but how about "10/100/1000/10,000BASE-T Copper Ethernet SFP+" Regards,
-
VPN IPSEC IKEv2 and ANDROID13
Hi, I'm trying to connect a smartphone under Android 13 and my USG110 with an IKEv2 connection. My USG110 is behind an other product (not direct on internet). I don't understand why I have : Phase 2 Local policy mismatch I have followed :…
-
DNS
Hi everyone, I can't get my.name.it to point to the internal network address 192.168.x.x. I compiled the dns but it doesn't work. from outside the network instead typing my.name.it the correct client replies and everything works correctly. Can someone please help me to solve the problem. thank you very much
-
ATP100: Policy Control Center "skips" rules?
Hi, I'm trying to configure a simple rule for incoming Remote Desktop Connection.I've first configured Policy Control Center and then the Nat with a Virtual Server. The problem is that when i try the connection the FW reject it saying "Match default rule, DROP". it seems that the rule saved is "skipped" by the firewall.…
-
SSL VPN
Hello, so my first visit here. I have a question about SSL VPN. A customer from me, needs to access an internal website from everywhere. (mobile devices etc etc.) We always use Secuextender, but this is not available for mobile devices. So i have read the manual, and i see it's also posible to create an ssl connection, by…
-
making the router aware of users (AD)
Afternoon anyway i can get the zywall aware of users so we can do user based rules with out having them to log into the router? ie can i point to LDAP some way or have a agent like sophos >https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Authentication/STAS/index.html thanks
