2 Questions

ICTzaak

Hi,

Please, I need your reply on the following questions:

• Wich ports / protocols and Zyxel-IP-adresses may I exclude in my firewall when I have an zero-trust environment?
• Is it possible to use Microsoft Entra to act as an RADIUS to allow devices to connect with a wifi-network?

Thanks in advance for your reply!

With kindly regards,

Harmen van Veldhuizen
Consultant ICTzaak

Zyxel_Melen

Hi @ICTzaak

I assume you are asking the required protocols and IP addresses for Nebula.

Wich ports / protocols and Zyxel-IP-adresses may I exclude in my firewall when I have an zero-trust environment?

You may check Nebula firewall information. Screenshot is attached in below:

Is it possible to use Microsoft Entra to act as an RADIUS to allow devices to connect with a wifi-network?

Nebula support SSID advanced setting with Microsoft Entra ID as sign-in method. Please reference these FAQ:

Microsoft Entra ID Sign-In Support for Zyxel APs (Firmware 7.10) — Zyxel Community

How to configure SAML authentication with Microsoft Entra ID? — Zyxel Community

The support models are:

• WBE series
• WAX series