Where is all the documentation for SecuExtender?

Zyxel_USG_User · May 13

I bit the bullet and bought licenses for MacOS and Win11.

I use the StrongSwan for Android and the Win11 clients and settings created by the Zyxel firewall wizard, and they work automatically just fine.

Now, I need to know where to look after what on the firewall, in order to configure the SecuExtender VPN client.

Where is all the documentation for it?

PeterUK · May 13

does this help?

How to Setup Zyxel Nebula Remote Access SecuExtender VPN Client on Windows

Zyxel_USG_User · May 13

Thanks, somewhat :) as I do not use Nebula. But I got some ideas to try first.

PeterUK · May 13

maybe this is better

(1) VPN - Configure IKEv2 VPN with Certificate using SecuExtender IPSec VPN Client – Zyxel Support Campus EMEA

Zyxel_USG_User · May 13

Thanks again…. so, the IPSec works fine still from Android and StrongSwan, and it works fine with the native Windows IPSec VPN - but only from trusted networks.

This is why I bought SecuExtender, to have another dedicated executable to let through instead of allowing native standard windoze .dll's etc to communicate via untrusted networks instead of being blocked of doing so in untrusted networks.

Now, I just seem not to be able to download the provisioning from the firewall which has been already configured and functioned with IPSec, to the SecuExtender client app.

How can I create and download this .tgb file directly from my USG firewall?

Zyxel_USG_User · May 13

Question: when I am on my local network, can I request the configuration via the VPN Configuration Server Wizard?

Zyxel_USG_User · May 14

Where on the firewall can I get the Firewall ID and the Client ID? or, what needs to be entered there?

Zyxel_James · May 15

You can use "get from server" to directly download the script to your SecuExtender.

Please refer to this aritcle:

https://community.zyxel.com/en/discussion/27420/how-can-i-establish-an-ssl-vpn-connection-with-the-usg-flex-h-models-using-secuextender

Zyxel_USG_User · May 15

Thanks for the reply.

I have an USG-20W-PN, no series H. As I cannot connect remotely from Win11, because I do not have the configuration for the SecuExtender client (duh), will try to download the config when in LAN.

Zyxel_James · May 15

USGFLEX/ATP standalone mode also work with this feature.
please make sure this option is enabled.

Zyxel_USG_User · May 15

Do the above instructions work also for USG-20W VPN series?

Do both SSL VPN and IPSec VPN work with SecuExtender latest versions and USG-20W-VPN as well?

Do both work for MacOS and WIn11 clients?

Lots of questions :)

Where is all the documentation for SecuExtender?

All Replies

Categories

Security Help Center