USG500H - SSL VPN connection impossible

kaika313 · January 28

Hello,

I need to set up the SSL VPN through port TCP 10443 but cannot make it work.

This is our configuration:

USG FLEX 500H FLEX V1.31(ABZH.0)

ISP ROUTER 192.168.1.1 (public static IP address, integrated firewall switched off, map forwarding active for some ports including 10443 TCP pointing to firewall, any other mapped port is working properly) —> USG 500 192.168.1.3

I've enabled SSL as shown here

I can see the two SSL polices active but anytime I try to connect (I use OPEN VPN) default DROP rule is triggered. Here's an example:

What am I missing?

Thank you for your help

K

kaika313 · February 4

Hi @Zyxel_Melen,

yes I do. But then I found a post here within the community that reminds me to also add SSLVPN custom port I choose to the Default_Allow_WAN_To_ZyWALL service group. As soon as I did this, SSL VPN start to work. Thank you

Kari

kaika313 · January 28

https://community.zyxel.com/en/discussion/comment/74406#Comment_74406

@Bernard295Clark Thank you for this very useful AI generated comment…🙄

Zyxel_Melen · February 3

Hi @kaika313,

What are your security policy settings? Do you have these two policies?

kaika313 · February 4

Hi @Zyxel_Melen,

yes I do. But then I found a post here within the community that reminds me to also add SSLVPN custom port I choose to the Default_Allow_WAN_To_ZyWALL service group. As soon as I did this, SSL VPN start to work. Thank you

Kari

USG500H - SSL VPN connection impossible

Accepted Solution

All Replies

Categories

Security Help Center