-
Why Sporadic Websites not opening
I have some occasional websites that do not open and no warning messages appear in the logs.
Here is one for example:
https://registration.bancaditalia.it/newRegistration/login
why? I can't solve in any way.
Web link is inserted inside content filter -> trusted web sites (*.bancaditalia.it).
In my company we use an ATP500…
-
Cannot connect to SSL VPN using AD authentication as of this morning
Customer has a USG60W, has worked well for 3 years. Had power issues overnight. I went onsite, reset breakers, reset cable modem, USG, and switch, and server. Internet is up and works well. Local network works well. Users connect to SSL VPN using AD authentication. Test in GUI works. No one can connect. I did latest…
-
ATP700 : "USB Storage is removed without prior umount"
Hello, We have 2 ATP700s with 1 USB key connected on each for saving logs and sometimes, I receive this message by e-mail (regardless of the firewall): "USB Storage is removed without prior umount". The keys are not full (about 8GB out of 64GB) I tried changing the USB drive and it didn't change anything.
Is there a…
-
Migration from USG210 to USG FLEX700
Hello, is it possible to transfer the setting from the USG210 to the FLEX700? Maybe with the Zyxel converter? Thank you and greetings Daniel
-
USG20 VPN
I can no longer access the web interface of the USG20-VPN firewall, in
ssh i can log in and i have disabled the redirect from HTTP to HTTPS but it did not solve anything, the problem was not that. Thank's
Antonio
-
Log Entry : Policy featurer
Hello,can someone explain me log entry :2022-06-15 19:41:05 ,,, debug, web-authentication, INTERNAL ERROR ,,,, Auth. Policy featuer is disabled Yesterday I blocked my IP address due to a bad password (I deleted it using: Router (config) # unlock lockout-users W.X.Y.Z). I search log and find this message through years,…
-
Simple question about USG 1100 and active directory 2019 or 2022
I See that SSO Agent has benn deprecated. (https://support.zyxel.eu/hc/en-us/articles/360015338620) Parhaps, is now USG 1100 (with last firmware) compatible with Active directory 2019 (or better 2022)? I didn't find any info about windows server version, every document uses the generic term "Active Directory" many thanks
-
firmware automatically upgraded even if auto update is disabled
Hi,yesterday we have found the firmware on two of our usg60 FW updated to version V4.72(AAKY.0) / 2022-04-28 23:20:15, even if auto update feature is not enabled.This lead to a misconfiguration of our vpn setup ( the port of the Authorize Link URL Address was modified ).Does anyone have an explanation for this?…
-
USG310 Slow speed site to site vpn ipsec
Hello,we have just acquired 2 Zywall usg310 to replace our USG60 in order to increase the speed of the vpn between the 2 sites. The problem is that we do not exceed 36Mb/s while our old USG60 exceeds 90Mb/s we have two symmetrical 600Mb/s FTTH Link, do you have any idea? Config :BWM disabledFirewall disabled Phase 1 (Vpn…
-
Port forwarding - wan IP is shown instead of source IP
I set up port forwarding on the ATP200 to receive port 25 to an email server. Upon receiving an email, the email server shows the atp200 wan ip address instead of the actual source IP. How can I fix that?
-
ATP100W wpa ssid not working
Hi all I have configured some atp100w and never encounter wifi problems. But on one of them I setup two ssid one for guest which is open and it works well. Device like phone and computer connect to them and got an ip adress on another lan (pool). The second one is a pro ssid. Used to be internal of the office Lan to have…
-
IPsec VPN with NAT
We are soon to start using a software system that is hosted by the softwre supplier. To allow our staff to connect to it they require us to set up a site-to-site VPN. I've never done this before but have read the tutorials and I think I'm OK with the process of setting up the VPN Gateway and Connection. However, they have…
-
Zywall 110 Firmware Update Question
Have a Zywall 110 with firmware V.4.20 (AAAA.1) The latest is 4.72. Is it safe to deploy or are there intermediates first?
-
Unable to finish 2FA setup with Google authenticater.
I have an Zywall USG 60 with PIN code by SMS/Email setup as 2FA. I want to change it to the Google authenticator 2FA, but when i scanned the QR code and try to finish the last step with the 6 digit code I get the following error message : we are not able to verify your code. I tried already to delete the account in the…
-
How to block Port 0
I have a USG210. When running port scans on the WAN side, Port 0 shows as: "Closed. Your computer has responded that this port exists but is currently closed to connections." Is there a way to completely block this port, so the IP shows as completely stealth? Thank you. Clippies of scan from GRC Shields Up attached...
-
VPN Server role IKEv2 broken as far as I can tell
Following another post
about this have made my own post https://support.zyxel.eu/hc/en-us/articles/4411498192914 Android 12 and ikev2 — Zyxel Community Tested on USG60W
V4.71(AAKZ.0) and VPN300 V5.21(ABFC.0) Phone tested with Sony
Xperia 5 II Android 12 I have tested every
setting I can think of but get: Receiving IKEv2…
-
2FA Google Auth time sync issue
Hi all... this is a question (not a issue yet).. Google auth as 2fa for VPN works well, but: what if the mobile with Google app is in a different time zone than USG/ATP? Android App has a function "Time Correction" (not sure it's the correct name), but as far as i know IOS version doesn't. Has anyone tried this scenario…
-
USG 210 - weird behaviour during WAN failover
Hi community, this is my first post here. I'm playing with a Zyxel USG 210, I'm trying to configure properly the WAN failover feature. We have 2 WAN connection, WAN1 is pure ethernet with static IP, WAN2 is a PPPoE connection over VLAN 100, which parent's interface is WAN2. Connectivity check is also enabled on both WAN1…
-
Usg Flex 200 Secuextender SSL Vpn
I'm using SSL VPN on USG200Flex but is disconnected after 24hours, is there anyway to make it always on? If not is there a script to reconnect automatically?
-
Usg210 ike v2 vpn connection with samsung s22
Hi The new android phone support only ike v2 VPN. I try config vpn server role, but not work... I try with certificate and with only password...but i have a problem to connect. I install StrongSwan app...but i have same problem. Have you a tutorial for vpn ike v2 for android phone? Thanks Manuel