-
💡Duo Security Authentication Integration Guide
This discussion has been moved.
-
[2026 January Spotlight] Integrate Secure Cloud Authentication with the USG FLEX H series
As organizations adopt cloud services and support remote and hybrid work models, identity has become a critical foundation of modern security. Traditional authentication methods based on locally managed accounts are increasingly difficult to scale and protect against today’s threats, including credential theft and…
-
Remote access vpn through site to site vpn
Hi, Site A and B are conneted via site-to-site VPN. I can connet to site A via Remote Access VPN. I need to connect to a server in site B using my remote access to site A. Is this possible using full tunnel configuration in the remote access setup? /Håkan
-
uOS 1.39 - Flex 500H crashed AP Management
Hello everyone, I updated this 500H on premise from 1.38 to 1.39 So after the reboot I saw the AP red and then offline. I tried to change the cable, zero difference. I tried to change the port, zero difference. Always blinking green and yellow, then red 3 times, then shut down. I tried to link it to another switch inside…
-
Cert SSL - autorenew via DigiCert or Sectigo or others
Hello everyone, I recently purchased an SSL certificate, but I read about the 200-day renewal hassle that will later become 100 and then 47 days. It's a terrifying thing for manual certificate replacement, which requires the H-series firewall.How can someone get a recognized SSL certificate (on a domain of the customer's…
-
How to display hostname in traffic statistic ?
Hello, on my Flex200H (FW 1.35), i want to see hostname of ip client in traffic analysis. when you go to Network status > Devis Insight > you can see client ip and their computer hostname but when you go to Traffic Statistic > Application usage > you see the ip adress but no more hostname. how to add hostname in column ?
-
50H firmware 1.39 content filter parsing error?
Hello, There seems to be an issue with 1.39 firmware content filtering. If I have a rule "*.ab" ab- being a country identifier, it creates a hit with all the URLs, independently where the .ab is within the URL, not only at the end of the URL. K
-
50H 1.39 firmware memory leak
50H System memory usage is slowly but steadily increasing. Starting from 52% while booting, after 5 days in 57%. A memory leak? Config has been the same. With USG100 after this amount of days, memory usage was flat. K
-
DDNS Type Cloudflare not working
USG FLEX 700H V1.39(ABZI.0)ITS-260701839 So here is the thing I make a subdomain test.bridgemode.co.uk with IP 127.0.0.1 knowing that this should be updated by this API token which I have setup and put into the FLEX H that shows Success and API token shows Last used by some seconds ago but the IP never updates.
-
Del dhcp request domain-name-servers does not always work
USG FLEX 200H V1.39(ABWV.0) So I get the idea you don't want to change the DHCP client Discover/Request and for good reason but do like: turns out it does remove domain-name-servers from Discover/Request del vrf main interface ethernet Backup_4G ipv4 dhcp request domain-name-servers thereby removing it in config to show /…
-
USG FLEX 500H/uOS dynamic policy-based IPsec issue – RCO/R-CARD traffic works on VPN100/USG but fail
Hello Zyxel Support, We are migrating an existing working RCO/R-CARD IPsec environment from an older Zyxel VPN100/USG/ZLD firewall to a new Zyxel USG FLEX 500H running uOS. The old VPN100/USG is currently working correctly. The new USG FLEX 500H can establish the IPsec tunnel and can transport ICMP and generic UDP traffic,…
-
[USG Flex H - V1.39(ABZH.0)ITS-260800686] - User Custom DDNS effective IP not appear
Hello, I've configured multiple DDNS service: 2 NO-IP and 1 Dynu account. For the No-IP, all works but for Dynu account, seems that the effective IP not appear also if the result is SUCCESS. The Dynu entry is the HomeOrbit profile name, and it is custom because, if I use the Dynu Basic DDNS Type, the update fails: Update…
-
An honest question from a 10-year USG user about where the FLEX H line is going...
After more than ten years on a USG20W-VPN, I did not want to be writing this. That little box has been rock solid. ZLD has been predictable, boring in the best sense, and it has done exactly what I asked of it for a decade. When my current licences run out (soon), my honest first instinct was simple: stay with Zyxel, buy…
-
[USG Flex H] - Resolve A Record only from selected interfaces
Hello, I've configured an A Record DNS entry: xyz.no-ip.org —> 192.168.0.1 This host is an DDNS that, externally, resolve with my external WAN IP. Now, internally, when I try to resolve xyz.no-ip.org, the gateway return to me 192.168.0.1 as per A Record entry, externally resolve with the WAN IP correctly. This happens from…
-
[USG Flex H] - Browse webserver from Mobile/Tablet
Hello everyone, I use Brave Browser on my iPhone 16 and a lenovo tablet 10" inch. With iPhone and little screen seems that is very unusable, all are too little that is impossible to manage; instead with a tablet, the problem is that impossible to scroll down/up the left menu and the lists. There is another browser that can…
-
[USG Flex H - uOS 1.39] - SNMP OID missing
Hello everyone, After update my 500H to the newest uOS, the OID about the "Forward Active Session" (1.3.6.1.4.1.890.1.15.3.1.19.0) are missing. Also, seems that are missing also the Memory Usage (1.3.6.1.4.1.890.1.15.3.2.5.0); now to calculate the memory usage % I need to reading the total memory (1.3.6.1.4.1.2021.4.5.0)…
-
Firmware 1.39 - secondary WAN IP
Did something change with firmware 1.39 when having a secondary WAN IP? Now it seems that all outbound trafic is using the secondary WAN IP and not the primary WAN. IP on the default TRUNK. Is that normal behavior? Policy route is not an option. I have one VPN connection that requires the secondary WAN IP.
-
Been trying out the new Let's Encrypt Certificate by DNS-01 (Cloudflare)
and...it works really well its a bit of a head scratcher finding Cloudflare Zone ID and setup Cloudflare API Token but got there in the end. But there is a down side to DNS-01 (Cloudflare) which if HTTP-01 was different I would not of had to of done so I had bridgemode.network by IONOS which they give you a SSL Starter…
-
How to update USG FLEX 200H from V1.10(ABWV.1) to newest firmware?
Hi all, how to update USG FLEX 200H from V1.10(ABWV.1) to newest firmware safely? It's a very first beta version, no standby image is shown in the UI. Thank you!
-
[USG Flex H] - Unable to see network devices Remote Access VPN (full tunnel)
Hello, I've configured a Remote Access VPN in full tunnel settings, but in this way I'm not able to see services into local network devices. The subnet configured is 192.168.168.0/24, instead the DomoNET is 192.168.0.1 (192.168.0.0/24). For example: I use Home Assistant that use 8123 port. I've configured the policy route…