-
Why does the apt100 will not send the configuration file?
Bevor the atp100 will send the configuration file to a e-Mail adress. Since two weeks it is not sending. The daily report file is sending correctly. Where i must config that the apt100 send the configuration File?
-
Block all GEO IPs execpt one
Hi All, Is it possible to block all GEO IPs except one?I know it is possible to deny a GEO IP, but I have to add all of them, which is very cumbersome. I have an USG40 and USG210.I hope someone can help me. Thanks in advance.Peter
-
USG FLEX 100 - GEO block seems doesn't work
Dear all, could you please help me with the next question I have USG FLEX 100 V5.20(ABUH.0), configured GEO_BLOCK deny policy (priority 2) from WAN to any (Excluding ZyWALL) for sources IP including China. (action - deny, log - no) but in the log I see: This is why I assume my policy doesn't work properly. Why the rule id…
-
VPN on 192.168.1.x subnet issues
Big client with this setup: 1. Internal network, 192.168.1.x 2. Having AD, DNS and so forth internally 2. Site-to-site VPN to hosting center, with replication of above servers. 3. Employee IP-sec VPN, with MFA through e-mail. The issue: 1. 192.168.1.x is often the employees subnet as well. 2. Some employees cannot reach…
-
Can't get to 123.hp.com if client goes down a GRE tunnel
So posting this out of
ideas about the issue here. https://community.zyxel.com/en/discussion/10698/mtu-size-on-syn-packets#latest So client set for MSS
1460 on USG60W gets a IP on LAN1 192.168.254.128/25 the LAN1 is MTU
1500 a routing rule from LAN1 next hop tunnel0 gateway 192.168.254.1
to Zywall 110 on OPT with tunnel0…
-
Why does it say my Geo Enforcer license is about to expire?
VPN100 - I purchased a new Content Filter 2.0 license but Geo Enforcer still says it is about to expire. Isn't Geo Enforcer still a part of Content Filter 2.0? I do not see a separate Geo Enforcer license available for purchase anywhere in the United States.
-
ZYWALL USG 20 KEEPS REBOOTING
I've been using my Zywall USG 20 for many years without any problem. In the last few weeks it keeps rebooting, randomly, every 10/20 minutes. No changes have been made to the firewall configuration, it's still got the original firmware. I tried to replace the power adapter, but the problem is still there. Any suggestions?…
-
MAC Filter on USG40W
Dear All,on CONFIGURATION MENU (Expert mode) path "OBJECTS, APP, SSID, MAC FILTER LIST" I can edit a MAC address list to deny access at specific MAC pc address, but from SSID LIST i can't enable the MAC FILTERING function just created (the massage is ONLY EASY MODE). In the Easy mode there is no way to edit the SSID to…
-
Security Advisory posts: some thing that could be improved by my point of view.
First of all, thanks for keep listening to the security experts providing Zyxel info about vulnerabilities. But the way of info is published keeps lacking of simplicity, clarity, useability. 1: the advisory (link here) do not provide the list of the devices affected. The list is available in a separate page (link here). 2:…
-
Zywall110 IP binding by ddns
I'm trying to bind a NAT incoming source IP using ddns, and don't see a clearcut way to do this. The user needs to ssh in, and for various reasons VPN is not going to be used, however they are on a home IP, so their public IP changes which can be resolved with ddns on their end. If ddns was an option for binding I the…
-
How to configure Email Security for Phishing mail?
Hi,ATP 100/200/500 with firmware 5.20 do not have flag mail phishing options as shown in your guide https://community.zyxel.com/en/discussion/3350/how-to-configure-email-security-for-phishing-mail
-
Any use of USG20?
Hello everybody A newbie question - at customer's found an USG20 box, FW 3.30(BDQ.9). Nobody remembers who installed it. Now it is used as a border between LAN and Wireless LAN, no connection to WAN. No licenses installed. Is there any sense in putting it into service at a proper place as firewall (they use soft firewall…
-
Propper IGMP setup for home network - USG40, GS1920
I have a USG40 and GS1920. I am told by a device mfg (Bluesound) to enable IGMP support. 1.) is this generally a good idea/best practice? any downside? Security? USG40 2.) if yes to 1.) how to do it. I have to Ethernet config's. One for the internal network and one for the CableModem. I am assuming I only would enable for…
-
Unable to have antispam working for incoming emails
Hi all, I want to apply antispam checking on all emails going to our email server, which resides behind the Zyxel ZyWALL 310. The ZyWALL 310 redirects all SMTP trafic to our email server and the email works fine. But I am not able to make the antispam to work. After following this…
-
Match default rule, DROP
Hello All, I have a VPN100 that has been set up correctly with a service for the port I need to use to forward our accounting traffic to the server. I have also created the Policy Control to allow it to go to the correct IP address and have created a NAT rule to allow it in. But for some reason the default rule is…
-
USG IPSec as Remote Client - possible to import a certificate
Dear, I would like to connect to a site as remote client. We use Certificates so far.With the USG it seems to me it would suport Pre Shared Key's only. Is it possible to import a Certificate to set-up the IPSec connection in the USG. RegardLoft
-
how to block youtube by IP of my network
I use usgflex100 Firewall in my Network. Current Version: V5.20(ABUH.0)
-
Routing additional IP scope to servers behind USG110
Hi Guys, I have USG 110 and i am trying now for a few days to get this working with no luck :( , my WAN1 has an address - 80.64.xx.xx, isp provided us with new address scope 93.26.xx.xx/29. and told me that the Gateway is the gateway from WAN1. Here is what I have configured so far with no result I have created virtual…
-
VPN client to site with USG40
Hello everyone, I need help. First of all, sorry for my bad english, I'm French. I would like to know if it's possible to create 2 VPN client to site through an USG 40.The main site has 2 servers on 2 differents LAN.The server 1 is one the port LAN1 of the zyxel USG 40 with IP 192.168.1.xxx The server 2 is one the port…
-
USG 40W with low internet speed
We changed our internet provider to get faster internet speed (100 Mbit instead 6 Mbit). Our Provider is Telekom and we got this Digitalisierungsbox Smart. Everything is working fine, but we have nochange in unternet speed. The maximum download speed is 5-6 Mbit, the upload is max. 20 Mbit. This should be 100 MBit / 40…
