USG Flex 50AX - SSL VPN Won't Connect

blujedis

Tried both on Mac and Windows with latest client. New router. No port forwarding to speak of very vanilla. Has static public IP.

Followed the guide here at bottom, seemed quite straightforward but the router doesn't seem to allow the connection.

Here's what the log is showing on the client. It behaves like it's blocked somehow, router never picks up, but again this is a new device with very little config. I have tried messing with the port, showing 443 here but I think the default was 10443. I noticed that there's a service the device uses for it's wizard that updates whatever you set the Global SSL port to

Pretty frustrated seems like it should be rather simple…appreciate the help!!

https://www.google.com/search?q=zyxel+ssn+vpn+setup&rlz=1C5CHFA_enUS874US874&oq=zyxel+ssn+vpn+setup&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIICAEQABgWGB4yCAgCEAAYFhgeMggIAxAAGBYYHjINCAQQABiGAxiABBiKBTINCAUQABiGAxiABBiKBTIKCAYQABiABBiiBDIKCAcQABiABBiiBDIKCAgQABiABBiiBNIBCDU0NDNqMWo3qAIIsAIB&sourceid=chrome&ie=UTF-8#fpstate=ive&vld=cid:8b088fe8,vid:r01NWVEnE6E,st:0

Zyxel_Judy

Hi @blujedis ,

It appears from the client’s log that the SSL VPN client is unable to connect to the firewall. One of the reasons is that the SSL VPN service port is not enabled. Could you please provide the firewall's monitor log during the SSL VPN connection attempt?

Also, is your firewall located behind a NAT? If so, you will need to configure NAT port forwarding on the upstream router for the SSL VPN service port.

Additionally, could you confirm the current firmware version of your firewall?