Usg Flex 100: sometimes Nat rules stop working

LucaSantamarianova

Hi

I have an usg Flex 100 with latest firmware

After some year of perfect working from 1 month, sometimes, Nat rules stop working and the workstation software cant receive traffic from external call (external devices call the local software for record some status information)

Solution: uncheck Nat rules

Wait some minutes

Recheck Nat rules

I cant find other solution....

Thanks

LucaSantamarianova

LucaSantamarianova

Ps: VPN is disabled

Zyxel_Jeff

Hi @LucaSantamarianova

We suggest you can update to our latest firmware V5.36P2 for further verification. If it still has a problem, please share your running-config file with us via private message and indicate is which NAT rule cannot work sometimes. Thanks.

LucaSantamarianova

hi

thanks for reply!

after firmware updating ( more times, the last is V5.37(ABUH.0)) the issue is came back randomly another 2 times

thanks

PeterUK

Never seem this problem what type of traffic is it?

Try disable ADP

LucaSantamarianova

LucaSantamarianova

Small packet traffic from allarm systems (home and business)

Thanks

LucaSantamarianova

The ADP Is already disabled

PeterUK

Why would a alarm systems need inbound traffic? Thats bad it should be outgoing to a server

how do you know its stopped working?

LucaSantamarianova

the USG FLEX is on a alarms installer.

the systems of the various customers connect to communicate

- the state in life

- eventual alarms moreover,

the control units report the lack of communication with my client's alarm centre

also via direct connection (link to the web server of the alarm center pc hosted behind the USG http://333.555.222.111/subfolder ) technicians can access the system to verify customer problems etc.

when the rules are blocked, the customers' systems are unable to send reports and are blocked, furthermore the system becomes unreachable at the address used by the technicians

a simply deactivation and reactivation of the rules unlocks the issue

PeterUK

Not sure it will help but try increasing UDP Session Time Out to 120 in Session control

you could do a packet capture of the port will help