-
Do you know? Pay less and secure more from USG FLEX with UTM license bundle
Are Your VPN/USG Firewalls Getting Old? Get
USG FLEX with UTM Bundle: Pay Less Secure More! Look at how the cyber Attacks are mounting every day. Are your existing firewalls equipped with reliable security to face it head to head? Why risking it all when you can simply get an UTM-bundled USG FLEX to leverage Zyxel Security…
-
USG60W slow wifi
I'm using a USG60W with a 400M connection from my ISP. With wired connections, I get just over 400, but my wifi speed is about a tenth of that. No VPN in use. Things I have tried to resolve the issue:1) verify AP not listed as "limited AP"2) turn off Anomaly Detection and Protection 3) turn on Bandwidth Management (no…
-
Question about a security log entry
What is going on here?btw, I have a GEO fencing rule WAN to Zywall for Asia.But doesn't seem that rule triggered. 39 2022-10-17 13:27:01 alert User Failed login attempt to Device from ssh (incorrect password or inexistent username) [count=4] [my public IP] Account: root 40 2022-10-17 13:27:01 alert User Fail login attempt…
-
Problem with VoIP in WAN1
Hello,I have 2 subnets.The first one is for PCs and wifi, the second one for phones in VoIP.The problem is that my TLC operator needs 2 different eth ports to manage data and VoIP.There is no way to merge both data and VoIP in the same port of the router of the TLC. I have a USG Flex 100 deployed, so WAN1 is the uplink for…
-
Routing problem ikeV1/ipsec VPN
Hi everyone I'm trying to setup a remote client vpn between my pc and an USG FLEX 50. I've already configured similar connections in the past and I hadn't any trouble, but, this time, I can't make it work. Basically, the vpn is configured on the usg via configuration wizard, then i export the config to a zyxel vpn client…
-
SSL Vpn client Win vs. Mac
Hi everyone, I have a problem with a Mac SSL client on a ATP200 (latest Lab fw released in may): a home worker bought a new Mac AIO, installed the SSL client (latest version) and copied the configuration from the old Win client. There is no way to be authenticated. Win client works fine. Have i missed something? Just for…
-
Pros/cons in blocking GEO locations from inbound - other use of GEO fencing?
What is the advantage to further protect though incoming traffic from GEO locations?Should I also block outbound?
-
USG40: strange DHCP Behavior
I've setup a USG40 with 3 network segments: Lan1 (192.168.20.0/24), Lan2 (172.31.2.0/23), OPT as WAN with a fixed IP address matching network segment for WAN connection (subnet 192.168.1.0/24). DHCP was enabled on LAN2. Starting address 172.31.2.51, 400 clients available, so addresses should start from 172.31.2.51 to…
-
USG Flex 700 & GS1920-24HPv2 Throughput Issues
Hello all, I currently have a USG Flex 700 connected to a GS1920-24HPv2 with a 4 Port LAG. I currently have 5 vlans (1, 10,20,40,50) using the lag0 port on the USG and the T1 LAG on the switch. I have normal IP Addressing using 192.168.xx.1/24 on the USG and 192.168.xx.2/24 on the GS1920. My issue is with a loss of…
-
Should I enable IP/MAC binding on ISP interface?
Should I enable IP/MAC binding on ISP interface?What are the pros/cons?
-
USG FLEX 100 does not receive DPD_ACK from remote linux client l2tp
Hello, any help solving the below problem is appreciated 1. usg flex 100 <->nat<->internet<->nat<->android 10 client (working) 2. usg flex 100 <->nat<->internet<->nat<->ubuntu 20.04 client (not working) 2.a. symptoms: 2.a.1 R_U_THERE (DPD) from usg flex 100 are received and answers are send (but never received) Oct 10…
-
USG 1100 - DHCP issue - stops serving IP addresses
I have a USG 1100 running v4.35 which is providing DHCP for the configured lans and vlans. Most of the devices on the lans and vlans are set up with IP/Mac binding so that they are always assigned the same IP address. Periodically (4 times in the last 48 hours) the USG 1100 stops serving IP addresses. When this happens no…
-
which one to choose?
could you give me a hand for a quote to do for a customer relating to a firewall that performs the following functions: - 2 separate LAN IPs (LAN1 x OFFICE SWITCH 192.x.x.x and LAN2 x GUEST SWITCH 122.x.x.x)
- 2 WAN with load balancing or bonding and failover backup operation (WAN1 x FIBRA ESTRA proprietary router not…
-
How to analyze IPv6 issues on Zywall
My Zywall is behind a cable modem (home network router) provided by the ISP. The cable modem has hardly any configuration options, but supports IPv6.If I connect a device directly to the cable modem, it gets an IPv6 address and "everything" works. The cable modem has the IPv6 prefix 1234:5678:9abc:def00::/56 (IP addresses…
-
How to debug IPv6 Issues with Zywall 100 (duplicate post)
My Zywall is behind a cable modem (home network router) provided by the ISP. The cable modem has hardly any configuration options, but supports IPv6.If I connect a device directly to the cable modem, it gets an IPv6 address and "everything" works fine. The cable modem has the IPv6 prefix 1234:5678:9abc:def00::/56 (IP…
-
Can't connect L2TP VPN
Hi everyone, i have a atp 500 firewall. There is an L2TP configuration made by xyxel distributor. Genarally i have no problem but some clients can not connect with l2tp. I 've tried deactive client's firewall, network protection and antivirus program but this is not helped. I can access to my local using l2tp with same…
-
L2TP VPN saved credentials connects...not saved disconnects
Our L2TP VPN connection connects when the user saves their user credentials through Windows VPN client. If they don't have VPN credentials saved and wait for windows to prompt, by the time the user enters credentials the VPN has disconnected. -----------------------------------------------------------------------…
-
Can't Access Opposite Web Interface Across Site-to-Site VPN
Hello. We have a Site-to-Site IPSEC VPN set up between two sites. From either site we can access all resources (eg. computers, servers, APs), but we can't access the web interface of the opposite side's ATP via its internal IP. The connection simply times out and we don't see anything listed in the logs. However, we can…
-
SSL Inspection question (iPhone iOS 16)?
Hi. I've been experimenting with SSL Inspection on my iPhone (iOS 16) and it seems to work most of the time (traffic is being inspected as it should be). But some apps like Apple App Store, banking apps, national ID apps, home security apps and so on always seem to have an "untrusted certificate chain" flag when checking…
-
Zyxel USGFLEX 200 problem with two PPPOE
Zyxel USGFLEX 200 problem with two PPPOE connections, I have a message like in the attachment. What am I doing wrong that after 1 minute disconnects # 1 or # 2