Notification Emails and Certificate

EricNepean · January 2021

I have a USG40W, I'm trying to setup notification of security alerts and daily logs by email to my Apple email account.

I have generated a third-party app password for my Appleid, set System/Notification to use TLS, Start TLS and SMTP authentication with the Apple Mail SMTP server, my Apple username and the 3rd party password - its almost working, but now I'm getting a log message in the USG40W that TLS authentication fails because of a self signed certificate in the chain.

I note that there is only a self signed default certificate in Object/Certificate, likely that's the problem.

So the first question is, does Notification use the certificate in Object/Certificate?

Next, I note that the subject of the default certificate is only the Model name and its MAc Address. I think I need a TLS certifcate for a TLS authentication? Should I add an additonal certificate or replace the existing certificate?

Is anyone using an email ssrevice which is easier to setup, doesn't require new certificates?

Thanks for any help
/Eric

Zyxel_Jeff · January 2021

Hi @EricNepean

If you would like to use your apple icloud email to send notification, you can refer to the following steps.

First, login your Apple icloud ID manage page https://appleid.apple.com/account/manage

and on Security category press generate password.

Enter a password label e.g. ZYXEL

Image: https://us.v-cdn.net/6029482/uploads/editor/7w/64zk1nzebl8d.png

And generate a app-specific password of 12 characters.

Image: https://us.v-cdn.net/6029482/uploads/editor/vt/c87axqnydyfw.png

Enter the Web GUI Configuration > System > Notification > Mail server and type Mail Server: smtp.mail.me.com, Mail Server Port : 587, check TLS Security and STARTTLS, Mail From: your icloud email address, check SMTP Authentication, User Name: your icloud email address, Password: your app-specific password of 12 characters.

And you can enter MAINTENANCE > Diagnostic > Network Tool to test your icloud e-mail address if can work.

Image: https://us.v-cdn.net/6029482/uploads/editor/am/k5qnx58z3db3.png

Enter Configuration > Log & Report > Email Daily Report to enable your email daily report service.

Image: https://us.v-cdn.net/6029482/uploads/editor/1n/oo91xorlc84o.png

EricNepean · January 2021

Hi Jeff. Many thanks for this reply, I got it working now. I wasn't aware of the Maintenance > Diagnostic > Network Tool to test e-mail addresses - learned something new. It seems I had two faults, enabling "authenticate server" when I should not have, and "user name" has to be the icloud email associated with the Apple account, and not Appleid associated with the account, which is actually an email address from my ISP. And the "Mail From" also has to be the icloud email.

kukuman · January 2021

Hi @EricNepean

I use gmail notification on my USG60, it works fine now and can help me monitor my USG60 daily status.
If you would like to use it, too. You can refer to this link:
https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=015984&lang=EN

Hope this can help you!

kamil000 · June 2023

The link is dead. Can you please check that? I'm also having problems with sending email notification from my USG device.

Zyxel_Jeff · June 2023

Hi @kamil000

Please refer to this FAQ article: How to set up Gmail for gateway mail notification? Thanks.

Notification Emails and Certificate

Comments

Categories

Security Highlight

Security Help Center