USG60W to USG Flex 100W configuration conversion

Options
2»

All Replies

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited February 2023
    Options

    The configuration loaded. With several hiccups.

    WLAN passphrases needed to be rewritten.
    All security services were enabled.
    Port remapping needed tweaking (I received an USGFlex100W with SFP cage).
    Email security tells me this

    image.png

    Currently i cannot access to AntiMalware section. Keeps me into “loading”.

    So.. I'd wont go this route the next time.

  • zyman2008
    zyman2008 Posts: 199  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    I think you need add these CLI to setup the default profile for AntiMalware and Email Security.

    configure terminal
    anti-virus default_profile
    infected-action destroy
    log
    exit
    anti-spam profile 1
    profile-name default_profile
    exit

    security-service ips activate
    security-service anti-virus activate
    security-service anti-botnet-url activate
    security-service content-filter activate
    security-service app-patrol activate

    write
    exit

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    I don't want to activate any service.

    The “not activate service" version should be written by me?
    Also: i cannot deliver email messages via port 465.

  • zyman2008
    zyman2008 Posts: 199  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    I don't want to activate any service.

    Then just add the default profile is need.

    configure terminal
    anti-virus default_profile
    infected-action destroy
    log
    exit
    anti-spam profile 1
    profile-name default_profile
    exit

    write

    exit

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Thanks for sharing anyway.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    And now I am furious, disappointed, in my opinion frauded and in completely disbelief of what appened.

    Following images come from USGFlex 100 and USG Flex 100W. Different devices, which share only one small thing: both configurations came from the converter. One edited as suggested, one purely converted ad applied from USG40.

    USG Flex 100.PNG
    USG Flex 100W.PNG

    I never agreed in any phase of the installation for the trial activation

    Was asked while registering the device.No services were enabled.
    Was asked four times, one for every first access to the device (is considered “first access” the second reboot with the updated firmware, when you're asked if you want on premises or Nebula mode… dude, I told you the freaking first time) and one after registration.

    Was not asked while converting configuration and moreover both configuation never had services enabled, so the source was “clean” even for the first trial.

    But now, during sunday, which usually is not my job day, than Zyxel decided to burnout the trial due to the customers if the committed the crime to convert configuration and already been Zyxel customers. Because you don't need to convert configuration for the first device.

    This lead to two sad scenarios. One in my opinion unprofessional, one in my opinion completely stupid.

    Scenario 1: now both customers won't be that prone to buy subscritpion from Zyxel, because the 30 day trial that I might provide them for know that Zyxel devices could do more are burnt. Unprofessional and not that wise for long term marketing.
    Scenario 2: if for some reason I could not find and disable any configuration related to unsubscribed services and trial… and the customer, one month after would find the network locked due to the stupid broken device installed with is now not doing what it's meant to… Maybe the device would be thrown away or sold out from the company, and no more Zyxel devices allowed to buy.

    In my personal opinion, conversion is not a good idea unless you're already paying subscriptions to Zyxel.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited March 2023 Answer ✓
    Options

    Error

  • Zyxel_Kevin
    Zyxel_Kevin Posts: 755  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @mMontana ,

    We encourage users activate these features from the first beginning. Since Feb.1, 2023, all the USG FLEX non-bundled default licenses would be activated automatically once device registration.

    We apologize for not announcing this information to users and we will work to improve the entires process in the future.

    We'd like to know if you have had any bad experience in following statement, so that we can improve in the future.

    “Was asked while registering the device.No services were enabled.
    Was asked four times, one for every first access to the device (is considered “first access” the second reboot with the updated firmware, when you're asked if you want on premises or Nebula mode… dude, I told you the freaking first time) and one after registration.”

    Thank you

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    @Zyxel_Kevin I'd like to remember zyxel that the device are buyed, not on loan. So the control of the devices should be of the owner, not the producer.

    Enabling services and trials without consent I think don't fit the term “encourage”. And again, this nice behavior provided by zyxel service is reserved to already customers only, not new one.
    Don't harm your customers, only few companies can do that and thrive.

  • mMontana
    mMontana Posts: 1,300  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Answer ✓
    Options

    Another nice update.

    Today I received a "it's time to renew" email. Following unwanted trial activation of services I did not asked for and were not enable from the source conversion.

    I checked up also the other email for the other converted configuration (from USG40 to USG Flex 100) and guess what? Same "nice reminder" for something I did not asked for.

    Don't be anti-customer, Zyxel, it will blow back to you.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）