Flex 100H V1.36 Remote VPN With 2FA Support
Freshman Member
Hi,
We have a Flex 100H FW V1.36.
We are wanting to setup remote users to have access to our network using VPN through the Flex
Do we have to buy the Secuextender client to be able to use 2FA/MFA with the connection or can you use other clients that are FOC i.e. Open VPN etc.
Many thanks for any advice.
Best Answers
-
Yes you can use Open VPN, strongSwan or MS built in client with FLEX H but when connected you must bring up the LAN Authorize Link URL Address like HTTPS://192.168.255.235:8008 or HTTPS://zyxel-router7.ddns.net:8008
1 -
Hi @JCE,
Regarding your question, please allow me to clarify that 2FA/MFA support does not depend on the SecuExtender functionality. Two-factor authentication is a firewall-side feature, and it works with several supported Remote Access VPN types, regardless of whether you use SecuExtender clients (which require a license).
Instead of purchasing the SecuExtender license, if you prefer to use other free VPN, you may choose OS-native or OpenVPN clients on the USG FLEX H series, as this series supports multiple Remote Access VPN options. This allows you to establish a secure VPN connection without needing SecuExtender.
1. IPsec VPN
IPsec Remote Access supports OS-native VPN clients (e.g., Windows, macOS/iOS, strongSwan). For reference, here is our guide for IKEv2 over IPsec configuration on FLEX H:
2. SSL VPN
Our firewalls also support using OpenVPN client to connect to the device’s SSL VPN service.
3. 2FA / MFA Support
To enable 2FA (Google Authenticator) for Remote Access IPsec VPN or SSL VPN, please refer to the following FAQ for step-by-step configuration:
Zyxel Tina
1
Guru Member
Zyxel Employee
All Replies
-
Yes you can use Open VPN, strongSwan or MS built in client with FLEX H but when connected you must bring up the LAN Authorize Link URL Address like HTTPS://192.168.255.235:8008 or HTTPS://zyxel-router7.ddns.net:8008
1 -
Hi @JCE,
Regarding your question, please allow me to clarify that 2FA/MFA support does not depend on the SecuExtender functionality. Two-factor authentication is a firewall-side feature, and it works with several supported Remote Access VPN types, regardless of whether you use SecuExtender clients (which require a license).
Instead of purchasing the SecuExtender license, if you prefer to use other free VPN, you may choose OS-native or OpenVPN clients on the USG FLEX H series, as this series supports multiple Remote Access VPN options. This allows you to establish a secure VPN connection without needing SecuExtender.
1. IPsec VPN
IPsec Remote Access supports OS-native VPN clients (e.g., Windows, macOS/iOS, strongSwan). For reference, here is our guide for IKEv2 over IPsec configuration on FLEX H:
2. SSL VPN
Our firewalls also support using OpenVPN client to connect to the device’s SSL VPN service.
3. 2FA / MFA Support
To enable 2FA (Google Authenticator) for Remote Access IPsec VPN or SSL VPN, please refer to the following FAQ for step-by-step configuration:
Zyxel Tina
1 -
Thank you both for quick answers. 👍️
0
Categories
- All Categories
- 439 Beta Program
- 2.8K Nebula
- 202 Nebula Ideas
- 126 Nebula Status and Incidents
- 6.3K Security
- 514 USG FLEX H Series
- 328 Security Ideas
- 1.7K Switch
- 84 Switch Ideas
- 1.3K Wireless
- 49 Wireless Ideas
- 6.8K Consumer Product
- 288 Service & License
- 458 News and Release
- 90 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.3K FAQ
- 34 Documents
- 85 About Community
- 97 Security Highlight
