-
Flex 200 and public web server
I have a new Flex 200 and it's all set up and configured. I have NAT/Sec Policies for SIP and SSH working as expected, but I can't get Remote Desktop Services and a WEB server accessible from the outside. Note - the RDS is coming in on a different public IP than the web server so I have NAT policies for each of the two IPs…
-
VPN Primer needed for my USG 100 Flex
I like to configure my USG 100 Flex to connect with clients when traveling: 1.) for added security 2.) circumvent country blocks for entertainment Can I do this with USG 100? Essentially, the client would use my ISP (Comcast)? Can I do this with laptop and iOS using generic VPN clients?
-
Getting pummelled by CDR reports of MSILHeracles download attempts from several of my ATPs
It appears to be an old issue that happened in 2022 too, if these are indeed false positives. I can't quite tell if it's a false positive though. The two files I've seen it block are: AD2F1837.HPPrinterControl_145.1.1083.0_neutral_~_v10z8vjag6ke6 and ccdeecee-9152-46a2-a8ca-5e4458eb35a5 These look like Windows Update…
-
USGFlex 100: VPN Client - Server Not Found (Check the server address/port)
SecureExtender IPSec VPN Client: Getting error "Server Not Found (Check the server address/port)" trying to download VPN configuration (Configuration\Get From Server) Device WAN public IP is reachable See attached error message Thank you
-
usgflex and client/server static ips
hi all I have recently installed a lot of new usgflex both basic (usgflex100) and more advanced (usgflex200 and 500) to replace the old USG .. both with the new firmware and with the slightly previous ones, I encountered a fairly important problem that check both on lan and vlan interfaces: if I set a static address on any…
-
Buying a Zyxel USG-100 from second hand marketplace
I am planning on purchasing your product from a second hand marketplace, but I want to completely reset it and load in every file from scratch. It is a ZyWall USG 100. Is there an easy way to perform this complete reset, and to make sure that no bad config files are left on the system.
-
Bug in new firmware 5.36.1
Heavier cpu usage and https error keeps popping up with wrong command line usage, during and after upgrade. i downgraded
-
zywall 310 vs usg310 difference ?
whats the difference between those 2 models ? are they the same device ? whats the difference in general with usg and zywall series ? thanks
-
Configure SMTP
good afternoon, can you help me I am configuring mail alert in USG20W-vpn, but it does not send the messages, it shows the following error message: 1-Sending event/alert log to mail server has failed. [count=3] 2- Sending event/alert log to mail server has failed Could you share an image of how it should be configured. I…
-
In regard to the firmware update process of routers using Device HA Pro
I have been reading the documentation on setting up Device HA Pro and I am looking for some clarification on the correct method to update the firmware of these devices. The following page clearly states that you should not use the cloud firmware upgrade method, but instead follow this procedure. These are firmware recovery…
-
auto-inactivate specific VPN Gateway by zyxel shell script
We would like to auto-inactivate 1 specific VPN Gateway in Zywall 1100 by zyxel shell script. Can anyone share this experience ? I tried the below command , but got the system prompt "% Insufficient privilege". crypto isakmp policy TestVPN deactivate crypto map TestVPN-DATA deactivate
-
Device temperature has exceeded system threshold
My USG-500 keeps shutting down. I get the message that the device temperature has exceeded threshold. the router is managed via nebula: Router# debug hardware fan-get Sensor[0]:75 degree Sensor[1]:50 degree Sensor[2]:57 degree FAN[0]:6914 RPM FAN[1]:0 RPM FAN[2]:0 RPM FAN[3]:0 RPM what can i do?
-
Dual WAN routing questions
Setup: - FLEX200 - WAN1 – 1GBit / 100MBit VDSL Line. 1 static IP - WAN2 – another VDSL Line. Less powerful, but has SIP, 5 static IPs, etc. - LAN infrastructure is Level3 HP switches WAN2 is the "original" line, as in "this worked for years, but got a bit narrow for the age of Cloud®". WAN2 comes in via a OneAccess 420…
-
USG Flex 700 Privacy Statement Refresh Error Log
I regularly receive the following two error logs on my USG Flex 700: [Privacy Statement Refresh] process fail. (-103) [Privacy Statement PDF refresh] Connection error has occurred. I am running 5.36 firmware (latest), but these two errors have been going on for a while now. How can I fix this and/or what is causing these…
-
unable to create vlan trunk to switch
I have multiple vlans configured in zyxel firewall. I want to create trunk from firewall to my switch so that all tagged vlans are send to switch. Unable to find a solution
-
Strongvpn locks up USG60W
USG60W V4.73(AAKZ.1) So I have been trying out VPN provides and for what ever reason setting up a LT2P Strongvpn on it connecting up locks up the USG needing a reboot and unplug from the internet to disable the L2TP rule. But on another note my FLEX200 setup in the same way has no problem nope it too locks up
-
FLEX-to-FLEX VPN with VLANs
I set up a FLEX50 (behind router) as client and a FLEX200 as Server (direct WAN). Works fine. As described here: Now I started setting up VLANs on the FLEX50 and those work fine too. But now that I am on the VLAN, I cannot connect to anything on the FLEX200 anymore. If I plug into LAN2 of the FLEX50 (no VLAN), it works…
-
ISP account l2tp don't stay Nailed-Up when disconnected bug
This bug happens on USG60W V4.73(AAKZ.0)ITS-22WK50-r106743 but likely happens on newer models. Testing by privatevpn.com the connection for PPP of lt2p goes up and after being idle for some time disconnects and does not reconnect putting Connectivity Check on makes it stay up for longer but still this disconnects and does…
-
Does the FLEX50/200 support CBC for VPN?
I am looking to connect a Yealink T48 IPphone via VPN to a FLEX50 or FLEX200. #1 Here is a guide I found: OpenVPN Yealink VPN #2 Another guide (in German): Yealink VPN German This explains possible cypher options: Yealink devices support no other hash algos than SHA1 or MD5!. Supported ciphers are AES-128-CBC, AES-256-CBC…
-
Reputation filter not working?
On my Flex 500 I see logs like this (IP reputation is enabled): May 1 00:51:11 xxxxxxxxxxxx May 1 00:51:12 2023 xxxxxx src="192.168.10.37:53272" dst="37.48.65.155:123" msg="Malicious connection:Phishing,Anonymous Proxies" note="ACCESS FORWARD" user="unknown" devID="xxxxxxxxxx" cat="IP Reputation" Why is this traffic…
