USG 40 throughput

13»

All Replies

  • tesagig
    tesagig Posts: 56  Ally Member
    First Anniversary 10 Comments Friend Collector
    thanks. Can I copy my USG40 config to the USG FLex 100?
  • mMontana
    mMontana Posts: 1,298  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Configuration should be converted, AFAIK.
    (at time of writing, a placeholder pace is deployed).


  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,039  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    The converter tool(https://convert.cloud.zyxel.com/) is maintained now, it shall be back before 9/9/2022, thanks :) .

  • tesagig
    tesagig Posts: 56  Ally Member
    First Anniversary 10 Comments Friend Collector
    edited October 2022
    Got a 100 flex and I used the converter. Work great. Except, the WAN connection. But I used wizard to sort out.

    However, I have some questions:
    1.) Do I need to enable IP/MAC binding on my ISP (xfinity) interface?
    2.) anti-malware: what is recommend, express or stream mode?
    3.) is there an easier way to select geo fencing than adding countries manually? e.g. more a checkbox menu.
  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,039  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer

    (1).You won’t enable IP/MAC binding on USG Flex100 with the ISP, we usually configure IP/MAC binding on LAN interface to bind the LAN hosts(e.q. internal web server, NAS server, etc.) to fix their internal DHCP IP addresses.

    (2). It depends on your requirement. The Express mode is a cloud query based Anti-Malware detection, the USG Flex 100 will scan files by sending each file’s hash value to a cloud database via cloud query.
    As for the Stream mode, it is signature based Anti-Malware detection, the USG Flex 100 will scan all files for viruses using its anti-malware signatures to detect known virus patterns.

    (3). Currently, we only support adding a Geo IP address object at one time on the Web-GUI. But not sure the CLIs whether would be faster for you, please refer to the below CLI:
    Router# show geo-ip country-code (To look up the country code.) 
    Router# configure terminal
    Router(config)# address-object US geography US all
    Router(config)# address-object China geography CN all
    Router(config)# address-object Germany geography DE all
    Then there are three Geo IP objects on your USG Flex 100 device. 
    The below no CLIs would remove those Geo-IP objects.
    Router(config)# no address-object Germany
    Router(config)# no address-object US
    Router(config)# no address-object China

    Besides, because those further questions are not related to the original title, so we encourage you could create a new discussion the next time, which can help other people who encounter similar questions like yours to find the answer more easily.  

Security Highlight