USG FLEX Lite 60AX Now Supports Traffic Logs via SecuReporter (Nebula 19.10)

Zyxel_Lynn

The USG FLEX Lite 60AX, originally designed for SOHO environments, has been rapidly gaining popularity in small business, especially in the hospitality sector(cafés, restaurants, and hotels).

A key driver of this demand is compliance—some governments, such as France, now mandate that hospitality businesses retain traffic logs for up to one year. To address this requirement, Nebula 19.10 introduces traffic log support for the USG FLEX Lite 60AX through SecuReporter.

Background: Firewalls and Traffic Logs

Traditionally, Zyxel’s full-featured security appliances(such as USG FLEX, ATP, and USG FLEX H-series) support SecuReporter for detailed traffic and threat logging.

The USG FLEX Lite 60AX, however, was not originally designed with SecuReporter integration. Instead, it included its own simplified Threat Report page in Nebula. While useful for visibility, this left a gap in traffic log storage, particularly for businesses needing long-term compliance.

What’s New in Nebula 19.10

With Nebula 19.10:

• The USG FLEX Lite 60AX now integrates with SecuReporter.
• A lightweight version of SecuReporter is available for this model, focused on traffic logs and activity reporting.
• Threat reports remain visible only in Nebula, not in SecuReporter.

This ensures businesses can store and retrieve firewall traffic logs when required by regulatory bodies.

What “Lightweight SecuReporter” Means

Unlike USG FLEX or ATP firewalls, which send detailed threat intelligence (malware, reputation filtering, etc.) to SecuReporter, the USG FLEX Lite 60AX supports only:

• Traffic Logs (source/destination IP, ports, session duration, etc.)
• Traffic Activity Statistics (geolocation breakdowns, top services, traffic percentages)

All other threat-related analytics remain available in Nebula’s Threat Report page.

How It Works

1. Automatic Organization Mapping
   • When a USG FLEX Lite 60AX is added to a Nebula site, an equivalent device entry is created in SecuReporter.
2. Enable in Site Settings
   • Navigate to Site-wide > Configure > Site Settings > Reporting.
   • Enable SecuReporter.
   • A SecuReporter hyperlink appears, allowing direct navigation to the corresponding organization/device view.
3. View Logs in SecuReporter
   • Access logs via the Search > Logs & Activity menu in SecuReporter.
   • Traffic details include:
     • Source/destination IPs and ports
     • Protocols
     • Session duration
     • Countries/regions of origin

⚠️ Note: Unlike USG FLEX/ATP models, the Monitor > Firewall > SecuReporter shortcut is not available for the USG Lite. You must access SecuReporter via Site Settings.

Licensing Requirements

To use SecuReporter with the USG FLEX Lite 60AX, you need:

• Nebula Pro Pack license (minimum)
• Or the Elite Pack license (includes Pro Pack features, and therefore SecuReporter support)

Why This Matters

• Compliance: Meets government regulations, such as France’s one-year traffic log retention mandate for hospitality.
• Operational Insight: Provides traffic visibility for small businesses without needing a higher-end firewall.
• Future-Proofing: While France currently mandates this, more regions may adopt similar regulations.

Summary

Feature	Before 19.10	After 19.10
SecuReporter Support	❌ No	✅ Yes (Lightweight)
Traffic Logs	❌ Not stored	✅ Stored in SecuReporter
Threat Reports	Nebula only	Nebula only
License Requirement	Not applicable	Pro Pack or Elite Pack

The USG FLEX Lite 60AX is no longer just a SOHO firewall—it now provides the traffic logging capabilities small businesses need to meet compliance standards, without losing its simplicity and affordability.