[NEBULA] How to set up a Deny Group

Jim_Anderson

I come from the USG series and utilized heavily the Address Group feature inside the Object-Address area to create a DENY_LIST which I could add various addresses that I did not want trying to access our network. Below is a similar group named ALLOW_LIST from one of our old USG's which had various IP's added to it.

How is this duplicated on a NSG100? I cannot locate any method to create a deny list in it.

Thank you,

Zyxel_Jonas

Hello @Jim_Anderson,

Welcome to Zyxel Community!

Nebula Gateway was designed for plug & play usage. There is no need to be complex to achieve your goal on NSG, please go to New Nebula => Security gateway => Configure => Firewall, as figure below. You may just add various addresses, and then select deny.

Note: Please use comma sign "," to add more IP.

Hope it helps.

Jonas

Jim_Anderson

Thank you. That works well. Is there anywhere here where a guide exists that would assist users familiar with USG configuring could reference that details how it should now be handled in NSG devices?

Zyxel_Jonas

Hi @Jim_Anderson,

You are very welcome.

For the guides, please refer to the link below: (starts at page 89)

https://bulletin.nebula.zyxel.com/online-doc/nebula-cc/NCC_UG_v8.20_20200117.en-us.pdf

Hope it helps

-Jonas