Enable Log and Report email to Google without: Allow Less Secure Apps = On

Options
inchica
inchica Posts: 10
First Comment Friend Collector First Anniversary
image  Freshman Member
Hello!

Equipment: ZyWall 110
Firmware: V4.64(AAAA.0) -> Updating to V4.65(AAAA.0)

I wanted to know if there is a new way to enable the Log and Report email through Google Gmail, without enabling Allow Less Secure Apps?  

With the state of the world under constant cyberattacks, is there a better solution?

I appreciate any feedback!

Best Answers

  • mMontana
    mMontana Posts: 1,506
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    image  Guru Member
    edited July 2021 Answer ✓
    Options
    With the state of the world under constant cyberattacks, is there a better solution?
    Use another email provider. Unless you can convince google to act like a common SMTPs email provider without making you feel dumb.

    Otherwise, you can enable 2FA with google authentication.
    This will add a feature to create, for non OAUTH2 compliant software, some "monoservice" passwords that you can create, delete but not modify or retrieve.


  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,482
    100 Answers 1000 Comments Friend Collector Ninth Anniversary
    image  Zyxel Employee
    Answer ✓
    Options

    Hi @inchica  

    The authentication policy is defined by Google.

    If you doesn’t like to allow Less Secure App, then you can enable 2FA setting what @ mMontana suggested.

    (1) Enable 2FA on your Google account.


    (2) And then add App passwords for your ZyWALL.

    It will generate 16 character new password for your ZyWALL.


    (3) You can enter new password in SMTP notification setting.


All Replies

  • mMontana
    mMontana Posts: 1,506
    Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Switch 50 Answers 1000 Comments
    image  Guru Member
    edited July 2021 Answer ✓
    Options
    With the state of the world under constant cyberattacks, is there a better solution?
    Use another email provider. Unless you can convince google to act like a common SMTPs email provider without making you feel dumb.

    Otherwise, you can enable 2FA with google authentication.
    This will add a feature to create, for non OAUTH2 compliant software, some "monoservice" passwords that you can create, delete but not modify or retrieve.


  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,482
    100 Answers 1000 Comments Friend Collector Ninth Anniversary
    image  Zyxel Employee
    Answer ✓
    Options

    Hi @inchica  

    The authentication policy is defined by Google.

    If you doesn’t like to allow Less Secure App, then you can enable 2FA setting what @ mMontana suggested.

    (1) Enable 2FA on your Google account.


    (2) And then add App passwords for your ZyWALL.

    It will generate 16 character new password for your ZyWALL.


    (3) You can enter new password in SMTP notification setting.


  • inchica
    inchica Posts: 10
    First Comment Friend Collector First Anniversary
    image  Freshman Member
    Options
    @mMontana and @Zyxel_Stanley

    Thank you for the suggestions!  I will configure Google per your recommendations.

    I also remembered that we can connect a USB Drive to the firewall and collect logs that way, too.  

    Thank you for all your help!