USG110 ip-exception
JaapHoetmer
Posts: 3
in Security
Hello,
I am trying to set up ip-exception on a USG110, but the commands listed in the CLI reference are not available on the device.
https://www.zyxel.ch/de/support/download/205152/, chapter 45.
Running firmware version is 4.73, the CLI reference covers v4.10-4.60.
The first command to enable this should be
security-service ip-exception <profile_name>
however, the command security-service isn't even available.
Can anybody shed some light on this?
Your help is much appreciated.
Kind regards,
Jaap
0
All Replies
-
@JaapHoetmer
The design of USG is a little bit different with ATP/USG FLEX.
USG does not support IP exception feature.
But you can create a security policy to bypass security check of a specific source IP/destination IP on USG.
1. Create address object, for example object name is SOURCE_IP, DESTINATION_IP
2. Insert a secure policy rule on the top with the first priority order,
secure-policy insert 1name RULE01sourceip SOURCE_IPdestinationip DESTINATION_IPaction allow0 -
0
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 829 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight