Problem with H100 and Canon mutifunction

fabiocavallo_65

Good morning Canon asks me to perform a communication test to its
servers using port 443 and listing a series of sites (see attachment). I
tried to create a funnel with a virtal server to port 443 but the MFP
does not communicate. Canon recommends creating a white list on the
firewall but I can't find a match within the H100 management. Can you
help me thank you

Guida Com-test 2026-06.pdf

Zyxel_Judy

Hi @fabiocavallo_65 ,

To better assist you, could you please share the following:

• The complete network topology
• The exact task you'd like to perform between your printer and the Canon server

Note: It is unable to view/ download your pdf file.

fabiocavallo_65

I have taken note of your answer: in the next few days I will produce
what is requested. I'm sorry that you were not able to read the pdf I
had sent that clarified the problem and tried to send it in another
format. Thank you

Fabio Cavallo

Maverick87

Hi @fabiocavallo_65,
I've read the guide (I'm Italian) but the guide suggest to open the 443 port on some FQDN addresses, but you need to do this, only if there are specific policy rules in your firewall that allow or deny direct browsing on the internet (For example, you don't want your computer to reach certain specific internet addresses, or you want to allow that printer to reach only certain addresses)

Is your printer in a network with a specific policy rules that deny internet for some reason?
In this case, what I would do is:

• Create FQDN addresses for every site;
• Create an address group that group all of these FQDN address;
• Create a custom policy rule:
  • From: Printer LAN interface
  • To: WAN
  • Source: The printer IP —> the printer needs to be in a static DHCP or fixed IP mode
  • Destination: The address group created
  • Rule: Allow

But… if your printer is in an interface that not have any specific policy rule, probably your printer is configured correctly.

I put here the original link to the guide, for any other users:

https://us.v-cdn.net/6029482/uploads/2SH68HAV7XQW/guida-com-test-2026-06.pdf

herman445

If the H100 firewall doesnt have a dedicated whitelist feature, try creating an outbound rule that allows HTTPS (port 443) traffic to the Canon domains listed in the document. Also make sure DNS resolution is working correctly and that SSL inspection or web filtering isnt blocking the connection. If the communication test still fails, check the firewall logs to see which connection is being denied, this usually points to the exact rule that needs adjusting.

Zyxel_Judy

Hi @fabiocavallo_65 ,

We can see the document shared by @Maverick87 user. You can refer to his recommendations for configuring the USG FLEX 500H. Create the FQDN entries and group them under Object > Address > Address and Address Group. Remember to put this policy rule place above the other block policy rules for the multifunction printer, because the firewall evaluates policies from top to bottom.

If your multifunction printer still cannot connect to the Canon server, please provide the Nebula organization & site name, and enable Zyxel support access so we can review it.

fabiocavallo_65

Thank you all for the suggestions. I will try to apply them

I am attaching again what Judy requested in zip format

Zyxel_Judy

Hi @fabiocavallo_65 ,

We were able to see and download the topology and Canon test file from the other post you shared.

Please configure the firewall according to the recommendation and let us know the results — or anything further — at this original post here. The duplicated post is removed.