Remote Access VPN – Provision Template Enhancement

Options
Zyxel_Claudia
Zyxel_Claudia Posts: 194 image  Zyxel Employee
Network Detective-New Adventure Badge Network Detective Badge First Comment Friend Collector
in Other Topics

To streamline VPN deployment and improve cross-platform support, Zyxel has enhanced the Provision Template system in its latest firmware.

This article outlines what has changed and how the new Nebula-integrated template system ensures faster updates and more reliable client connectivity.

1. What Is a Provision Template?

A Provision Template is a pre-defined configuration file used to generate VPN connection scripts for end-users. These scripts are essential for configuring remote clients to securely connect to Zyxel firewalls using SSL VPN or IPSec VPN.

Previously:

  • Provision templates were embedded in the firmware
  • Any update to the template required a firmware upgrade
  • Workarounds were needed if clients (especially iOS/macOS) updated their VPN software and broke compatibility

2. What’s New in This Enhancement?

Templates Now Managed by Nebula

With the latest firmware:

  • Nebula Control Center (NCC) can now manage and push updated templates directly to the firewall if there is a new version
  • Users simply re-download the configuration script to apply the latest template

This improvement ensures better compatibility with client OS updates, especially for mobile platforms that frequently update their built-in VPN behavior.

3. Where to Download the Configuration Scripts

Users can download the VPN configuration scripts from:

Local Firewall Web GUI:

  • Go to VPN > IPSec VPN > Remote Access VPN or VPN > SSL VPN
  • Click “Download”

Nebula Control Center:

  • Navigate to Configure > Firewall > Remote Access VPN
  • Click “Download Configuration”

Note:

If the download button is greyed out, it means the configuration on the Nebula and the local firewall is not in sync. Ensure both sides are updated before generating the script.

image.png

4. New Multi-Platform Configuration Zip File

Previously, users had to download VPN configuration scripts one by one based on their platform (Windows, macOS, Android, etc.). With this enhancement:

  • A single ZIP file is now available
  • IPScc VPN includes configuration scripts for:
    • Android
    • Apple
    • Windows
    • Zyxel Secure Extender
       image.png
  • SSL VPN includes configuration scripts for:
    • Zyxel Secure Extender
    • Open VPN configuration
       image.png

This is a major usability improvement that ensures users can access the correct configuration for their device - with one click.

Tagged:

Categories

EnglishTiếng ViệtРусскийไทย中文（台灣）