-
[USG 200HP] + [NWA130BE] + Unable to connect to Wifi
Hello community, This evening I had problems with Wi-Fi and my iPhone. My phone kept disconnecting from Wi-Fi, connecting and disconnecting in rapid succession. I tried connecting my computer to the firewall LAN, but I couldn't get a valid IP address. From my computer (Windows), I opened a command window and tried to renew…
-
IPSEC VPN - AD link broken with special caracters
Hi, We found a bug in usg flex 100h last firmware concerning ipsec vpn. The authentication doesnt work if the username OR password contain "é" or "è". We are using a standard microsoft ad, and i think a standard configuration on the firewall. The work around is changing name and password but its kinda annoying. Thanks
-
IPS custom signatures
Hello, according to the user handbook https://download.zyxel.com/USG_FLEX_50H/user_guide/USG%20FLEX%2050H-UG.pdf the Zyxel Flex 50H supports a maximum of 32 custom IPS signatures: How can I add these custom IPS signatures? I couldn't find a way in the user handbook or in the CLI guide.
-
Zyxel Flex 100H - VPN Apple mobileconfig returns error on importing on Apple OSX
Here is the screenshot. Apple OSX version Tahoe 26.3
-
Zyxel Flex 100H model - How many SSL VPN licenses are included by default?
I see that the technical limitation is 25 users. But what is the license limitation in the scenario when the Flex 100H model was bought by default (with no extra licenses like Gold pack or something else) ?
-
Tailscale VPN performance issue
Hi Melen. I've been using Tailscale for a long time to connect to my office. For about two weeks now, I've been experiencing problems with Tailscale VPN, sometimes with poor performance, and sometimes with no connection at all. In these situations, I solve the problem by disabling and then re-enabling Tailscale VPN on my…
-
IKEv2 IPSec stability with H- series, experiences
Hello, I’m today using Flex 100. Considering to upgrade to Flex 50H or to other manufacturer product, let’s see. I’m asking experiences for H- series IKEv2 session stability with iPhone and iPad’s. I don’t have too good experience with Flex 100, L2TP/IPSec seems to be much more stable, sessions can last for hours. With…
-
Firewall H series, VPN orchestrator not working
we are trying to make a site to site vpn connection between the customer's offices with vpn orchestrator. vpn connection does not connect, gives error received NO_PROPOSAL_CHOSEN notify error and parsed IKE_SA_INIT response 0 [ N(NO_PROP) ]. Have we forgotten something or what is wrong
-
[USG Flex H] - Simultaneous Logins
Hello, I've enabled a security enhancement for force no login if an user is already logged in (at the moment, I don't remember the function name). I've activated this function on the admin account, but now I'm unable to login: This is because if refreshes web page, the firewall push out the logged user, without really…
-
V1.37(ABXF.1) on 100H - DNS Threat Filter/URL Threat Filter not possible to configure
Hello, after the Update V1.37(ABXF.1) on my 100H it's not possible to configure DNS Threat Filter/URL Threat Filter under External Block List. It's not possible to load files or do something else. IP Reputation is working without problems. Still not possible to do something after 15min. waiting …
-
[USG Flex H] - User 2FA Backup Codes no available anymore
Hello, I've enabled the 2FA for the admin account and after setup it, I've tried to disable/enable the 2FA flag without save the configuration (disable the flag, enable the flag and then click on "cancel" without saving). When I returned into the profile management, I see this: If I try to regenerate backup codes, I obtain…
-
[USG Flex H] - New firmware update - SNMP Community
Hello community, @Zyxel_Melen, I've upgraded my 200HP to the latest firmware version and now I've a problem with the SNMP Community. Now seems that I've obligated to create 2 community (both community 1 and 2 are required) and also I cannot create 2 community read-only (because only 1 community at time can be read-only).…
-
Error update uOS V1.37(ABZI.0)
Good day, I'd like to report a problem I'm having trying to update my 700h. When I update the firmware, the entire update process goes through correctly, but the 700h doesn't start. When I plug in the console, the following error appears (shown in the image), and it restarts and gets stuck in an infinite loop. I should…
-
Zyxel FLEX 100H - with IKEv2 VPN server configured - any problems with MAC OSx?
Anyone got any issues with configuring and connecting VPN with Mac OSx comupters?
-
USG FLEX H Series mac binding
Does the H models have mac binding feature on the lan side. So it was possible to allow only approved mac addresses to the internet
-
USG Flex H freezing issues
Hi, Over the past three weeks, we’ve had three different sites experience downtime because the USG Flex H firewall randomly blocks all outbound traffic. So far, this issue has only occurred on the USG Flex 50H and 100H models. The only workaround I’ve found is to connect to the firewall through Nebula and perform a reboot.…
-
Domain zone forwarder through tunnel
In FLEX (non H) series I was able to add a Domain Zone Forwarder in DNS to an IP-Address behind a tunnel. So the other site could resolve server.domain.local for example. I could select Private DNS Server then and then it mentioned "query via tunnel". In FLEX H Series I don't have that option anymore, can only select one…
-
1.37 uOS - Nebula SSL VPN - Change from Cloud Authentication to Local Users
Hello everyone, following this thread: https://community.zyxel.com/en/discussion/32315/h-series-ssl-vpn-download-config-button-is-green-only-on-premise I saw that upgrading from 1.36 to 1.37 the Nebula UI shows me changed authentication from "Nebula cloud authenticaton" to "Local Users". I re-use same screenshots taken for…
-
H series & SSL VPN - Download config button is green only On-Premise
Hello everyone, as you can see I have a grey button on Nebula: While I see it green On-Premise: How is it possible?
-
configuring remote access vpn
When i try to configure an remote access vpn, i get this error: There were errors saving this configuration. ERR_LOCAL_CERTIFICATE_NAME_UNEXIST any ideas?