Flex H Series - 2FA Page with FQDN

Rathos

Hello together

We would like to have a possibility to assign an FQDN to the 2-FA page. However, this would require the internal DNS to be accessible before verifying with the 2-FA. The reason for our request is that we would like to store a certificate on the firewall so that the browser no longer displays the message that the page is insecure.

Best regards

Niklas R.
System Enginner @ DQ Solutions in Switzerland

Zyxel_Judy

Hi @Rathos ,

Based on your screenshot, it appears you're inquiring about Remote VPN access. When using a remote access VPN to establish a tunnel, all traffic is encapsulated within the encrypted tunnel, so it is acceptable for the 2FA page to use non-HTTPS links.

To meet your requirements, the 2FA authentication URL can be changed from HTTPS to HTTP. For example, changing from https://10.10.1.2:4433 to http://10.10.1.2:4433. Please refer to the configuration here:

PeterUK

what they want is this from FLEX200

Rathos

Hi Judy

We would still prefer using an FQDN for a more professional appearance. Would we be able to switch to User-Defined and then access the authorization page via an FQDN using the WAN IP, as Peter mentioned?

Best regards
Niklas

Zyxel_Judy

Hi @Rathos ,

You can try to use the configuration on H series.

PeterUK

Problem is Judy it don't work it uses the default certificate

Zyxel_Judy

Hi user,

We are considering this as a potential feature for future evaluation. We'll investigate carefully about that.