VPN without open HTTPS port

CIppalipa

It's possible ? I have a USG210. I have configured a vpn (SSL that works fine) but I would like the initial page, my zyxel login, to not be shown to anyone who reaches my public ip.

I'm not talking about changing port 443 to another. I simply speak of having access to the vpn only through the Secuextender client and port 443 closed.

I don't want anyone in the world to see my zyxel home page and try a brute force of user and password.

I hope I explained myself. Thanks.

alehzn

Hi.

I had the same challange and did not find any possiblities to do so except to enable client certificate authentication for the log in page (System - WWW).

Hope that helps.

Zyxel_Charlie

@CIppalipa & @alehzn
Regarding to this case,
you can create the profile on service control to prohibit remote user who try a brute force of user and password.
Go to Configuration>System>WWW>Service Control>Click Add on Admin Service Control and user can not login via Wan IP address.

Charlie

CIppalipa

Zyxel_Charlie said:

@CIppalipa & @alehzn
Regarding to this case,
you can create the profile on service control to prohibit remote user who try a brute force of user and password.
Go to Configuration>System>WWW>Service Control>Click Add on Admin Service Control and user can not login via Wan IP address.

Charlie

Great. Simple and useful. Thanks