-
Enable/Disable Global zone forwarder is not that good
I'm thinking it might be when a listed this idea but it was not what I was hoping it be Remove AUTO added DNS as forwarder — Zyxel Community This is how I want the FLEX H to be this is what I want to stop from DHCP client interfaces Yes there is a way to remove the DNS option from DHCP discover/request but really just…
-
Random latency handling delays on FLEX H at low bandwidth
USG FLEX 700H V1.36(ABZI.0) So I know this to be the case with some testing I have done with BQM by thinkbroadband.com and StarTrinity CST by FLEX 700H vs FLEX 200 (non H) With any luck this can be fixed by firmware and is not a hardware limitation? My understanding of FLEX H is the sessions get put on fast path CPU if…
-
Migration ATP700 to USG FLEX 700H
https://us.v-cdn.net/6029482/uploads/ZE12WO3X4SWD/log-debug-2026-01-12.xlsx Hello, I performed a configuration migration from an ATP700 to a USG FLEX 700H. After installing the USG FLEX 700H on the client and replacing the ATP700, the USG FLEX 700H is not working correctly. The firewall stops (without restarting) and…
-
[USG Flex 200HP] - After firmware update, it's reboot randomly
Hello everyone, I've updated the USG Flex 200HP firewall to the latest firmware (1.37 ABXE.0), and for some reason it's reboot randomly. One or two times per day after the firmware update, the firewall reboot inexplicably. Yesterday night I watching a streaming movie on TV and it's rebooted alone, with only this TV…
-
CLI command via Remote Configurator is NOT available
Hello everyone, I tried to follow this guide: https://community.zyxel.com/en/discussion/31853/how-can-i-capture-nebula-sd-vpn-packets-through-the-cli So I logged in remotely via Remote Configurator: in a pair of FlexH firewalls of mine and click here: and also on a cheaper model: Anyway I am NOT able to have the CLI…
-
usg flex h new firmware 1.37
hi I've updated my devices in ha pro configurations and I had a problem on some services configured on them. there is anyone that had installed it and tested it? thank you.
-
Domain join | AAA Server
Good morning / Hi everyone, I have a 200 Flex H firewall and I would like to allow VPN access via SSL only to certain domain users (domain on Windows Server 2025). In the past I was able to configure this type of setup, but with this new customer I can’t get it to work. Is there something that no longer works after the…
-
FQDN stopped update IP lookup
USG FLEX 700H V1.36(ABZI.0) For some reason FQDN are not being lookup any more when I test on FLEX 200H thats fine to the same DNS. Like I put in pingbox1.thinkbroadband.com for a rule but the FLEX700H will not DNS for it. Not rebooted yet
-
[USG Flex H] - Cannot use Policy Control between devices in the same Zone
Hello everyone, I've the Zyxel NWA130BE as AP and I've created a VLAN zone for smart devices. Between the AP and the USG Flex 200HP I've a third party 2.5Gbit Switch that manage the VLAN (as switching). This is the VLAN configuration into the switch: And this is the VLAN definition into the FW: The "turning" table is: The…
-
USG Flex 50H - questions regarding migration to the new series
Hello, I'm planning to implement a firewall. I've been using USG FLEX 100 models so far, but it's becoming increasingly difficult to find this model in wholesale. I have a question about the USG Flex 50H model. I see there's a way to convert configuration files between these firewalls. Has anyone used the config converter…
-
100H - block external IP address ... not all IP's are blocked !
Hello All, I blocked several external IP adresses and found that most of them are not really blocked via "external block list". Firmware is "V1.36(ABXF.0)". Example IP 209.38.78.160: IP address blocked via "external block list" "IP reputation" - IP-addess not blocked - in Log / events under note as "ACCESS FORWARD". IP…
-
Remote Access VPN on 500H
I am trying to set up a remote access IPSEC VPN on a 500H using Windows VPN. I have turned on the IPSEC VPN server in Nebula and added a cloud authentication user. I have also logged directly into the firewall and downloaded the VPN setup. When I attempt to connect to the VPN, I get a message stating the remote server is…
-
200H - IPV6 support ?
hello, any news for ipv6 support for Flex H series? my old zywall 110 used to support it
-
DNS Content Filter does not work with Tailscale on Flex 50H
Hello, I was running into a quite weird issue, but I managed to dissect it somewhat now. The problem is, that the DNS Content Filter, as far as I understand it, is supposed to work in two ways: 1. Creates an invisible allow udp:53 to ZyWall when it is applied to a Security Policy, so that the ZyWall responds through this…
-
Spam filter USG Flex 100h
Hi, I just upgraded our firewall to a flex 100H. In my old firewall I had a Spam filter option. I can't find that in the new one. Is there no spam filter available? Thanks, Rob
-
SecuReporter no Traffic data
Hi, I have a full configured USG 500H firevall + Gold Security Pack. I set up the SecuReporter integration a few months ago. But the Traffic page on SecuReporter is totally empty. What can I do? Why empty the Traffic page? Thanks!
-
USG FLEX 200H - Import Certificates is broken. ( Error code: 11 )
USG FLEX 200H, firmware V1.21(ABWV.0)ITS-24WK35-m5760 When I try to import certificate the following error occurs: This error message happens for all accepted formats I tried to import. PEM (Base-64) encoded X.509 Binary PKCS#7 PEM (Base-64) encoded PKCS#7 Binary PKCS#12 Did not try Binary X.509…
-
FQDN objects not resolving
We seem to have discovered an issue with the method used to resolve DNS hostnames on the USGs, affecting both uOS and previous ZLD based firewalls. Over the last couple of months we are running into issues with certain FQDN objects that will not properly resolve to an IP. Doing a bit of research, it seems some internet DNS…
-
USG 500H Import DHCP
Upgrading from an older ATP200 to a new USG 500H and hoping to import the DHCP reservations from the ATP200 instead of having to type them all manually. I found an older post with a link to a tool that doesn't apply to the new device/firmware. Is there any way to import DHCP reservations on the 500H?
-
It has been over year of this issue
And I I'm on the edge of losing it! Routing Zywall out a given interface when you have other WAN In my care my main virgin media and EE 5G and O2 G4 as backup Still in talks with Salim about this. Here is what we know if you don't do routing of Zywall all works fine if you set the default trunk to just one interface with…