Flex H, a rant

ESupport
ESupport Posts: 22  Freshman Member
First Comment Friend Collector Third Anniversary
in USG FLEX H Series

Hi,

we sell Zyxeldevices for nearly 20 years now and through the announcement of the new "H"-Series (H stands for speed, you know?) i have the pleasure of setting up my first Flex 100H and what a journey it is:

First the Box had the IP 192.168.168.1, strange but ok. I tried to register it to the Zyxel Portal but couln't, it needed a nebula-Site even if i choose to use it soley on prem.

Now the fun started:

I tried to rename the geX-Ports, no, can't do that. I tried to configure a virtual Interface, no, can't do that. I tried to use multiple SSL-VPN "Servers" so that different users can connect to different networks, no, can't do that. I tried to rename a Policy because of a typo, no, can't do that. I tried to setup the automatic sending of the config-file as an encrpyted zip, no, can't do that. I tried to activate the automatic Geo-IP-Update, no, can't do that. I tried duplicating my policies, i tried to use L2TP for full-tunnel-VPN on my iphone, i tried double-clicking any entries, i tried to use the GUI on anything smaller that Full-HD…. you get what i am saying.

Sorry Zyxel, this uOS is not only rushed, it lacks features that were present in the old USG-days. i HOPE the features are mostly coming back. I know that classic SSL-VPN (SecuExtenderSSL) is defacto dead, i know L2TP is dead and that the Configfile has a complete different style, i can live with that but don't release the "next Generation in Zywall security" and let us be beta-testers.

And btw. I sincerely wish that the Designteam working on the GUI all step on a lego!

Best Answers

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,377  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary
    edited March 5 Answer ✓

    Hi @ESupport
    Your feedback regarding the user interface and the challenges with the GUI have also been noted. We understand the importance of a user-friendly interface, and I will personally ensure your comments are passed on to our team. In response to feedback like yours, we have made significant improvements to the user interface in version 1.20. These enhancements are designed to address many of the issues you've highlighted and to provide a more intuitive and efficient user experience.

«1

All Replies

  • PhilippeB
    PhilippeB Posts: 18  Freshman Member
    First Comment Friend Collector

    It's hard to understand why Zyxel has released the H series firewall despite the fact that the product is far away from being ready and useful. It lacks too many features and is quite unstable. We are runnig a 200H in a test environment only.

    By the way, does your model updates its signatures? Ours does not.

    image.png
    image.png

  • mMontana
    mMontana Posts: 1,389  Guru Member
    50 Answers 1000 Comments Friend Collector Fifth Anniversary

    Thanks @ESupport. This keep telling me "too soon for H series devices, yet".

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,377  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary
    edited March 5 Answer ✓

    Hi @ESupport
    Your feedback regarding the user interface and the challenges with the GUI have also been noted. We understand the importance of a user-friendly interface, and I will personally ensure your comments are passed on to our team. In response to feedback like yours, we have made significant improvements to the user interface in version 1.20. These enhancements are designed to address many of the issues you've highlighted and to provide a more intuitive and efficient user experience.

  • ESupport
    ESupport Posts: 22  Freshman Member
    First Comment Friend Collector Third Anniversary
    https://community.zyxel.com/en/discussion/comment/62682#Comment_62682

    Hi PhilippeB,

    first the box kept updating just fine but was not stable at all. I factory resetted it and it was a little better but it didn't update, like yours. I had a Teamviewersession with Zyxel and they got me a WKS-Firmware because on top of not updating, the box died after a few days (i think 2 or 3 days) with a memory-bug. You couldn't access it through the GUI (after logon only the turning rings kept spinning in a loop) and it was not possible to get anything done through ssh. It wouldn't show you the running config. With the new firmware that went away for a few hours and the updates were loaded but the box wasn't stable. I kept getting ping-timouts throughout (pinging 1.1.1.1 or something) and it was impossible to use. If you power-cycle it, it worked for some time and then got the same problems. After an hour of searching with the zyxel-tech through teamviewer i decided to return the box to my distributor and i hope i get my money back. I know use the old USG60 and everything works stable as it did before.

    Ps. The tech told me that some features will take up to a year to implement and some features of course won't get added.

    @zyxel. I know this is a new product and as the tech told me, i shouldn't compare it to the other Firewalls but than don't name it "flex x". I thought i get all the features from the regular flex but with some much needed hardware-boost. At this stage i will stay away from the h-series at least for another year and monitor the firmware-development. A firewall is such an important part of every business-network, this has to be rock-stable and i think most users are not keen on tinkering around.

  • valerio_vanni
    valerio_vanni Posts: 92  Ally Member
    First Answer First Comment Friend Collector Second Anniversary

    I read here that H version doesn't support FQDN objects:

    https://community.zyxel.com/en/discussion/19572/no-fqdn-address-objects-on-usg-flex-200h

    Really? Such a basic function? Does it drop back to pre-USG (Zywall2 etc)?

    It seems a beta release, not a production one.

    From "new version of X", one expects at least functions of X. Enhancements could be delayed, not basic functions.

  • PeterUK
    PeterUK Posts: 3,391  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited October 29

    In V1.30 their is some support for FQDN (miss in BWM rules) but too many added may cause lockup

  • ticsystems
    ticsystems Posts: 69  ZCNE Certified
    First Comment Friend Collector Nebula Gratitude Fifth Anniversary
    edited October 30

    If the flex 200h and 100h seem unstable to you, the 700H are a disaster... Having to disable UTM services to avoid blocking. The CPU is constantly at 100%.... Random reboots....The GUI constantly crashes and cannot be configured.... The GUI I have 3 and in no case is it a production Firewall. Not even with 1.30 is it functional.

  • Mk88_it
    Mk88_it Posts: 20  Freshman Member
    First Comment Friend Collector Second Anniversary

    Guys, you don't have idea about the 500h ….. We have bought it from begin and…..1 year of random reboots, crashes, GUI errors, routing not working etc etc…. a REAL DISASTER. It seems a PRE BETA product! We have only one question: who, when and how zyxel have tested it?!

  • GiuseppeR
    GiuseppeR Posts: 287  Master Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Engineer Level 1 - Nebula First Comment Friend Collector

    Hello guys. Being here for a coffee and read you.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）