USG 40 throughput

tesagig

thanks. Can I copy my USG40 config to the USG FLex 100?

mMontana

Configuration should be converted, AFAIK.

https://convert.cloud.zyxel.com/

(at time of writing, a placeholder pace is deployed).

Zyxel_Jeff

Hi @tesagig, @mMontana

The converter tool(https://convert.cloud.zyxel.com/) is maintained now, it shall be back before 9/9/2022, thanks .

tesagig

Got a 100 flex and I used the converter. Work great. Except, the WAN connection. But I used wizard to sort out.

However, I have some questions:

1.) Do I need to enable IP/MAC binding on my ISP (xfinity) interface?

2.) anti-malware: what is recommend, express or stream mode?

3.) is there an easier way to select geo fencing than adding countries manually? e.g. more a checkbox menu.

Zyxel_Jeff

Hi @tesagig

(1).You won’t enable IP/MAC binding on USG Flex100 with the ISP, we usually configure IP/MAC binding on LAN interface to bind the LAN hosts(e.q. internal web server, NAS server, etc.) to fix their internal DHCP IP addresses.

(2). It depends on your requirement. The Express mode is a cloud query based Anti-Malware detection, the USG Flex 100 will scan files by sending each file’s hash value to a cloud database via cloud query.

As for the Stream mode, it is signature based Anti-Malware detection, the USG Flex 100 will scan all files for viruses using its anti-malware signatures to detect known virus patterns.

(3). Currently, we only support adding a Geo IP address object at one time on the Web-GUI. But not sure the CLIs whether would be faster for you, please refer to the below CLI:

Router# show geo-ip country-code (To look up the country code.) 

Router# configure terminal

Router(config)# address-object US geography US all

Router(config)# address-object China geography CN all

Router(config)# address-object Germany geography DE all

Then there are three Geo IP objects on your USG Flex 100 device. 

The below no CLIs would remove those Geo-IP objects.

Router(config)# no address-object Germany

Router(config)# no address-object US

Router(config)# no address-object China

Besides, because those further questions are not related to the original title, so we encourage you could create a new discussion the next time, which can help other people who encounter similar questions like yours to find the answer more easily.