-
💡Duo Security Authentication Integration Guide
This discussion has been moved.
-
[2026 January Spotlight] Integrate Secure Cloud Authentication with the USG FLEX H series
As organizations adopt cloud services and support remote and hybrid work models, identity has become a critical foundation of modern security. Traditional authentication methods based on locally managed accounts are increasingly difficult to scale and protect against today’s threats, including credential theft and…
-
Problem with H100 and Canon mutifunction
Good morning Canon asks me to perform a communication test to its servers using port 443 and listing a series of sites (see attachment). I tried to create a funnel with a virtal server to port 443 but the MFP does not communicate. Canon recommends creating a white list on the firewall but I can't find a match within the…
-
v1.38 Dashboard Issues
So I load my dashboard and get this error (I have cleared Edge's cache too) This is being caused by the client usage widget Error Failed to load interface list Error Code: (500) /api/show/gui/widget/client/usage
-
Match default rule DNAT Packet, DROP - Error
Hello i have set a USG100 Flex 100H to foward some ports. I have also set in services→services group add any tcp ad udp to Default_Allow_WAN_To_ZyWALL. but i see always this log and not work the foward Some help please? Thanks
-
Does the USG FLEX H50 support a transparent Layer 2 bridge between a VLAN interface and an untagged
I am configuring a Nebula-managed USG FLEX H50 with the following topology: P3 / ge3 is the internal connection. Untagged traffic on P3 is handled by ge3 and works correctly. VLAN 11 is configured on P3 as a routed internal network with its own IP address and DHCP server. This also works correctly. VLAN 12 is configured on…
-
[USG Flex H] - Summer thermal temperature
Hello everyone, I've an 200HP firewall, and in the summer, the thermal temperature reach more or less 45-47 °C. The temperature is measured via SNMP, I keep the current IC temp. Can be a problem run the firewall at this temp? It's or can be critial? Thank you
-
WOL possible?
I'm wondering why SME grade network device (FLEX700H) while having cloud features here and there has no basic GUI-function like Wake On Lan with a click of a button? And for some older devices there is a list of configuration you have to do to simply send a magic packet.
-
Seeing some random packet loss 3-12 hours at a time
FLEX 700H V1.38(ABZI.0)ITS-26WK16-m11228 I'm thinking its linked to this https://community.zyxel.com/en/discussion/31245/random-latency-handling-delays-on-flex-h-at-low-bandwidth due to how many FQDN I have which can easily be trigged when in use by policy control but this time I have disable them policy control rules for…
-
VPN100 to USG FLEX 500H Upgrade Path
I am getting ready to replace our VPN100 with a USG FLEX 500H. When I go to the online configuration converter and select VPN100, the only option for the target is USG FLEX 200 and USG FLEX 200H. Is there a path from the VPN100 to the USG FLEX 500H or do I need to configure the 500H manually? P.S. I tried multiple times to…
-
[USG Flex H] - Migration from 200HP to 500H
Hello everyone, As I plan to migrate from the 200HP to the 500H, I'd like to know if there's a tool that can provide a 1:1 migration of the 200HP configuration to the 500H. If there's no migration tool, is it possible to save the 200HP configuration file and adapt it somehow to the 500H? Or is the only way to manually…
-
OIDC Setup on FLEX H
I'm trying to configure OIDC on FLEX H with MS Entra. Tried to follow this guide: SSLVPN authentication with Microsoft Entra ID — Zyxel Community But when I press the test button I get this error: Invalid OIDC authorization_endpoint. Error Code: (10016)cmd aaa validate-oidc-profile MS365 Normally my Issuer URL, Client ID…
-
Occasional internet interruptions
Hi, a customer complains about internet interruptions. I'm not sure if it belongs to Zyxel but I delivered a new firewall (USG Flex 100H) in December 2025. Prior to that date the customer used a Zyxel ATP100. The customer uses the tool "PingPlotter" which shows internet interruptions which are mostly 3 seconds long. Two…
-
How to prevent traffic to directly connected subnets being sent through IPSec VPN tunnel ?
Hi ! I'm using a Zywall 50H I set 3 local networks like this: Name Zone IP/Netmask Type Members ge3 LAN3 192.168.105.1/24 (Static) Ethernet p3 ge4 LAN4 192.168.107.1/24 (Static) Ethernet p4 ge5 LAN5 192.168.109.1/24 (Static) Ethernet p5 I have "Computer #1" on ge3 with IP address 192.168.105.34 I have "Computer #2" on ge4…
-
[USG Flex H] - SNMP WAN IN/OUT octet wrong values
Hello everyone, I've the USG Flex 200HP and if I try to query the WAN octet OID, obtain the wrong value. The OID that I query is: 1.3.6.1.2.1.31.1.1.1.6.12 for WAN Incoming and 1.3.6.1.2.1.31.1.1.1.10.12 for WAN Outcoming. Is this the right OID to query? My firewall is up&running from more that 14 hours. Thank you
-
Problem with DHCP permanently offer/request/ack
I have the problem that from some moment on the DHCP for my MGMT Interface (VLAN 168) is no longer working correctly with DHCP, or maybe the zyxel switches like XMG2230 or XMG1915 lost control of DHCP. What i remember is that i have set TTL to 30 days and i have tried to add a Reservation for one other device. Not sure if…
-
FQDN objects not resolving
We seem to have discovered an issue with the method used to resolve DNS hostnames on the USGs, affecting both uOS and previous ZLD based firewalls. Over the last couple of months we are running into issues with certain FQDN objects that will not properly resolve to an IP. Doing a bit of research, it seems some internet DNS…
-
Error with SSLVPN split tunnel
Hello, I'm using SSLVPN (OpenVPN style) in split tunnel mode. I've added subnets to be routed and it used to work fine in firmware v1.37. Then running v1.38, I was in need to expose one more network via vpn and while trying to add it I've got an error "The undefined has existed already", while definitely it was not the…
-
USG FLEX 700H no more connection on web interface after a couple of minutes...
Hi, I am currently setting up a new USG FLEX 700H. After a few minutes, the web management interface becomes unreachable. The only way to recover access is to reboot the firewall from Nebula. The device is running the latest firmware, and I have found reports from other users experiencing the same behavior. Is this a known…
-
USG 500H Web Console Unresponsive UPDATED Still No Go
My mistake was clicking the VPN Configuration Script Download button. Once I clicked that, the interface locked up. Internet, voice, and site-to-site VPN connections remained active. I rebooted the device. Web UI still unresponsive. I power cycled the device - disconnected the power cable for a few seconds - and still the…