-
VPN on 192.168.1.x subnet issues
Big client with this setup: 1. Internal network, 192.168.1.x 2. Having AD, DNS and so forth internally 2. Site-to-site VPN to hosting center, with replication of above servers. 3. Employee IP-sec VPN, with MFA through e-mail. The issue: 1. 192.168.1.x is often the employees subnet as well. 2. Some employees cannot reach…
-
Can't get to 123.hp.com if client goes down a GRE tunnel
So posting this out of
ideas about the issue here. https://community.zyxel.com/en/discussion/10698/mtu-size-on-syn-packets#latest So client set for MSS
1460 on USG60W gets a IP on LAN1 192.168.254.128/25 the LAN1 is MTU
1500 a routing rule from LAN1 next hop tunnel0 gateway 192.168.254.1
to Zywall 110 on OPT with tunnel0…
-
Why does it say my Geo Enforcer license is about to expire?
VPN100 - I purchased a new Content Filter 2.0 license but Geo Enforcer still says it is about to expire. Isn't Geo Enforcer still a part of Content Filter 2.0? I do not see a separate Geo Enforcer license available for purchase anywhere in the United States.
-
ZYWALL USG 20 KEEPS REBOOTING
I've been using my Zywall USG 20 for many years without any problem. In the last few weeks it keeps rebooting, randomly, every 10/20 minutes. No changes have been made to the firewall configuration, it's still got the original firmware. I tried to replace the power adapter, but the problem is still there. Any suggestions?…
-
MAC Filter on USG40W
Dear All,on CONFIGURATION MENU (Expert mode) path "OBJECTS, APP, SSID, MAC FILTER LIST" I can edit a MAC address list to deny access at specific MAC pc address, but from SSID LIST i can't enable the MAC FILTERING function just created (the massage is ONLY EASY MODE). In the Easy mode there is no way to edit the SSID to…
-
Security Advisory posts: some thing that could be improved by my point of view.
First of all, thanks for keep listening to the security experts providing Zyxel info about vulnerabilities. But the way of info is published keeps lacking of simplicity, clarity, useability. 1: the advisory (link here) do not provide the list of the devices affected. The list is available in a separate page (link here). 2:…
-
Zywall110 IP binding by ddns
I'm trying to bind a NAT incoming source IP using ddns, and don't see a clearcut way to do this. The user needs to ssh in, and for various reasons VPN is not going to be used, however they are on a home IP, so their public IP changes which can be resolved with ddns on their end. If ddns was an option for binding I the…
-
How to configure Email Security for Phishing mail?
Hi,ATP 100/200/500 with firmware 5.20 do not have flag mail phishing options as shown in your guide https://community.zyxel.com/en/discussion/3350/how-to-configure-email-security-for-phishing-mail
-
Any use of USG20?
Hello everybody A newbie question - at customer's found an USG20 box, FW 3.30(BDQ.9). Nobody remembers who installed it. Now it is used as a border between LAN and Wireless LAN, no connection to WAN. No licenses installed. Is there any sense in putting it into service at a proper place as firewall (they use soft firewall…
-
Propper IGMP setup for home network - USG40, GS1920
I have a USG40 and GS1920. I am told by a device mfg (Bluesound) to enable IGMP support. 1.) is this generally a good idea/best practice? any downside? Security? USG40 2.) if yes to 1.) how to do it. I have to Ethernet config's. One for the internal network and one for the CableModem. I am assuming I only would enable for…
-
Unable to have antispam working for incoming emails
Hi all, I want to apply antispam checking on all emails going to our email server, which resides behind the Zyxel ZyWALL 310. The ZyWALL 310 redirects all SMTP trafic to our email server and the email works fine. But I am not able to make the antispam to work. After following this…
-
Match default rule, DROP
Hello All, I have a VPN100 that has been set up correctly with a service for the port I need to use to forward our accounting traffic to the server. I have also created the Policy Control to allow it to go to the correct IP address and have created a NAT rule to allow it in. But for some reason the default rule is…
-
USG IPSec as Remote Client - possible to import a certificate
Dear, I would like to connect to a site as remote client. We use Certificates so far.With the USG it seems to me it would suport Pre Shared Key's only. Is it possible to import a Certificate to set-up the IPSec connection in the USG. RegardLoft
-
how to block youtube by IP of my network
I use usgflex100 Firewall in my Network. Current Version: V5.20(ABUH.0)
-
Routing additional IP scope to servers behind USG110
Hi Guys, I have USG 110 and i am trying now for a few days to get this working with no luck :( , my WAN1 has an address - 80.64.xx.xx, isp provided us with new address scope 93.26.xx.xx/29. and told me that the Gateway is the gateway from WAN1. Here is what I have configured so far with no result I have created virtual…
-
VPN client to site with USG40
Hello everyone, I need help. First of all, sorry for my bad english, I'm French. I would like to know if it's possible to create 2 VPN client to site through an USG 40.The main site has 2 servers on 2 differents LAN.The server 1 is one the port LAN1 of the zyxel USG 40 with IP 192.168.1.xxx The server 2 is one the port…
-
USG 40W with low internet speed
We changed our internet provider to get faster internet speed (100 Mbit instead 6 Mbit). Our Provider is Telekom and we got this Digitalisierungsbox Smart. Everything is working fine, but we have nochange in unternet speed. The maximum download speed is 5-6 Mbit, the upload is max. 20 Mbit. This should be 100 MBit / 40…
-
Zyxel UGS60W and FreeBoxV6Server/player
Hello,Here is the situation: My internet provider (Free) use 2 equipements: 1 server used for network connection and 1 player for TV purposes. In a "normal" way of working these 2 equipement are connected together and communicate on basic VLAN and on VLAN 100. Today, the only solution I found is to use a manageble switch…
-
Strange naming
Device is USG20W-VPN.It's only me that see this as weird or...
-
USG 40 - active session full, Internet drops
Hi, I've been struggling with our USG 40 for a couple of weeks. It runs firmware version V4.35(AALA.3) (yes it's old, I know) and something about two weeks ago all of a sudden it run 100% CPU and made Internet connection drop. Looking throughout Zyxel community I've found that a possible solution was to disable SNMP and…