Enable Log and Report email to Google without: Allow Less Secure Apps = On

Options
inchica
inchica Posts: 10
First Anniversary Friend Collector First Comment
Hello!

Equipment: ZyWall 110
Firmware: V4.64(AAAA.0) -> Updating to V4.65(AAAA.0)

I wanted to know if there is a new way to enable the Log and Report email through Google Gmail, without enabling Allow Less Secure Apps?  

With the state of the world under constant cyberattacks, is there a better solution?

I appreciate any feedback!

Best Answers

  • mMontana
    mMontana Posts: 1,302  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited July 2021 Answer ✓
    Options
    With the state of the world under constant cyberattacks, is there a better solution?
    Use another email provider. Unless you can convince google to act like a common SMTPs email provider without making you feel dumb.

    Otherwise, you can enable 2FA with google authentication.
    This will add a feature to create, for non OAUTH2 compliant software, some "monoservice" passwords that you can create, delete but not modify or retrieve.


  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,367  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hi @inchica  

    The authentication policy is defined by Google.

    If you doesn’t like to allow Less Secure App, then you can enable 2FA setting what @ mMontana suggested.

    (1) Enable 2FA on your Google account.


    (2) And then add App passwords for your ZyWALL.

    It will generate 16 character new password for your ZyWALL.


    (3) You can enter new password in SMTP notification setting.


All Replies

  • mMontana
    mMontana Posts: 1,302  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited July 2021 Answer ✓
    Options
    With the state of the world under constant cyberattacks, is there a better solution?
    Use another email provider. Unless you can convince google to act like a common SMTPs email provider without making you feel dumb.

    Otherwise, you can enable 2FA with google authentication.
    This will add a feature to create, for non OAUTH2 compliant software, some "monoservice" passwords that you can create, delete but not modify or retrieve.


  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,367  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Hi @inchica  

    The authentication policy is defined by Google.

    If you doesn’t like to allow Less Secure App, then you can enable 2FA setting what @ mMontana suggested.

    (1) Enable 2FA on your Google account.


    (2) And then add App passwords for your ZyWALL.

    It will generate 16 character new password for your ZyWALL.


    (3) You can enter new password in SMTP notification setting.


  • inchica
    inchica Posts: 10
    First Anniversary Friend Collector First Comment
    Options
    @mMontana and @Zyxel_Stanley

    Thank you for the suggestions!  I will configure Google per your recommendations.

    I also remembered that we can connect a USB Drive to the firewall and collect logs that way, too.  

    Thank you for all your help!

Security Highlight