-
💡Duo Security Authentication Integration Guide
This discussion has been moved.
-
[2026 January Spotlight] Integrate Secure Cloud Authentication with the USG FLEX H series
As organizations adopt cloud services and support remote and hybrid work models, identity has become a critical foundation of modern security. Traditional authentication methods based on locally managed accounts are increasingly difficult to scale and protect against today’s threats, including credential theft and…
-
USG FLEX 200H - IPSEC Site To Site VPN - FIRMWARE BUG V1.35(ABWV.2)
Multiple VPN connections can't be established when there are two distinct networks on the same Flex 200. For example, you have a port with IP subnet address 192.168.1.0/24 and another port with subnet 192.168.10.0/24. If you attempt to create two distinct IPSEC Site to Site VPN connections it will fail. In this example,…
-
SSL VPN from internet
Hi, I have a USGFLEX100HP. I configured SSL VPN according to the manual, exported the configuration file, imported it to OpenVPN, and I can connect via VPN, but only from the local network. When I try to log in from the internet, it won't let me in. It logs in, logs in, and then stops. What do I need to do? Any NAT or…
-
USG FLEX 700H - Problems
Hello: I currently have a USG FLEX 700H with firmware version 1.37(ABZI.1). I've been experiencing unexpected devicerestarts. Upon checking the systemmonitoring, I observed that both CPU and RAM usage remain at high levels. Torule out a configuration issue, I performed a factory reset, restoring thedevice to its default…
-
Zyxel Newbie - Basic Network configuration
Hello, I want to make easy and secure management of my home network. I'm newbie on firewall management and configuration, so forgive me if I can't understand some terms. My network devices are: Fritzbox 7690 (DHCP disabled) Zyxel USG FLEX 50H (DHCP enabled on LAN Zone) Zyxel XMG1915-18EP (Default configuration with VLAN 1)…
-
FLEX 700H services
Good day, Have a question if there are any plans to add functionality: SSL VPN certificate based authentication. Login/Pass as the only method looks really insecure. In NXC2500 (wifi controller) it was a nice feature to generate guest logins on the fly. Is it something similar feasible/planned in 700h? Thank you
-
Can I determine which firmware version is pre-installed without booting up the USGFLEX200H?
Can I determine which firmware version is pre-installed based on the labels on the USGFLEX200H device and the box? Best regards :) Wojtek
-
[USG Flex H] - Wireguard/Tailscale
Hello everyone, Today I've tried to configure the Tailscale VPN, but I've some questions about: Why is not possible to use Wireguard? I think that Wireguard is more affidable than Tailscale. Tailscale is a service on-top of Wireguard, end of support/develop, end of Tailscale service; instead Wireguard is a low level app,…
-
USG 100H cant access youtube via roku
I just switched from a USG FLEX 700 down to a USG 100 H. With the new devices, none of our Roku devices can access youtube. I have disabled all security services without any luck. There is nothing in the logs the shows any type of an error from these devices. As a last resort, I specifically added a rule to permit QUIC…
-
[USG Flex H] - Timeout during Tailscale connection
Hello everyone, At night, I have the habit of turning off everything I'm not using; one of these is my networking, including my firewall. Every morning, I use automations to turn everything back on, and I'm finding that the firewall is no longer connected to the Tailscale network. Today checking the logs, I find this:…
-
stop browsing when vpn ssl is active - USG FLEX 50H
I set up an SSL VPN, and my PC connects seamlessly to OpenVPN. However, when OpenVPN is connected, my PC stops browsing until I disconnect the VPN. How can I fix this? Thanks
-
Configuration import
Is it possible to import the configuration file of a zywall usg 20 into a usg flex 200h firewall?
-
How to deactivate the services
I do not see any command to deactivate How I can deactivate services I do not need ?
-
Flex 200H - SSLVPN attempts to reconnect every few seconds
Hello I set up a Flex 200H with SSL VPN and installed OpenVPN Connect. This worked fine for a few weeks. Then I started using "OpenVPN Gui" which allows for an "%connection%_up.bat file to be executed as soon as the connection is running. This file starts the internal 2FA Website. This also works fine. For this I use a…
-
1.37 Patch1 - Untagged traffic on P3 merged with VLAN on P2
Hello everyone, I have a VLAN created with Zyxel switch on P2, it is seen as expected. Yesterday I discovered inside an ORG that they have an old branch of LAN from warehouses with unmanaged switches that I can manage with a cable on P3. No room to pull another cable from warehouses to the new switch area where I installed…
-
Multiple Source IPs in NAT rules
Hi, I currently have a Web API that requires HTTPS traffic forwarding to our internal Web server through the USG Flex H series. We've got a group of IPs that all require this same NAT rule applying to them, but I couldn't figure out a way to do this and as a result I have had to configure 6 individual NAT rules that…
-
Flex 100H VPN SecuExtender clients connects fine; NO ACCESS to remote network devices
-
SSL-Inspection causes "Content Encoding Error"
Hello everyone, We recently purchased a Zyxel USG Flex 100H, and most of the features are working well so far. However, we’ve run into an issue with SSL-Inspection. When SSL-Inspection is enabled, some websites (like YouTube) load normally, while others (like ChatGPT and Zyxel Support Forum) return a "Content Encoding…
-
USG FLEX 200H - Import Certificates is broken. ( Error code: 11 )
USG FLEX 200H, firmware V1.21(ABWV.0)ITS-24WK35-m5760 When I try to import certificate the following error occurs: This error message happens for all accepted formats I tried to import. PEM (Base-64) encoded X.509 Binary PKCS#7 PEM (Base-64) encoded PKCS#7 Binary PKCS#12 Did not try Binary X.509…