1.37 uOS - impossible to edit NAT name

GiuseppeR · January 25

Hello everyone,

when you set a rule for a NAT:

You cannot edit its name:

You cannot copy it either, only rewrite it.

Is it possible to remove this limitation?

Zyxel_Barry · January 25

Hi @GiuseppeR,

Thank you for reaching out to the Zyxel Community regarding the NAT rule naming limitations on your USG FLEX H series device.

Based on the current design of the Zyxel USG FLEX H series and Nebula Control Center, the name of an object, including NAT rules, cannot be modified once it has been created. If you need to change the name of a NAT rule, the current process requires you to delete the existing rule and create a new one with the desired name.

We understand this may be an inconvenience, and we appreciate your feedback on this limitation.

To further investigate and assist you, please provide the following information:

Device Model: (e.g., USG FLEX 100H)
Firmware Version: You mentioned 1.37 uOS, please confirm the exact version.
Network Topology Map: A simple diagram showing how your USG FLEX H series is connected to your network.
Nebula Organization and Site Name: This will allow us to access your device's configuration if you enable Zyxel Support Access.

To enable Zyxel Support Access:

Navigate to Help > Support Request in your Nebula console.
Enabling this feature authorizes the Zyxel support team to directly view your cloud environment configuration, which can significantly shorten troubleshooting time.

Zyxel_Melen · January 27

Hi @GiuseppeR

Just like Barry mentioned, it can't be modified after created since it is an object is the system. May you share the reason you want to edit it?

GiuseppeR · January 27

Hi @Zyxel_Melen

for example you create a rule "New_Server" for opening a port TCP 12345.

Some time after that you receive another request for opening another port on the same server, so it could be useful to rename first rule "New_Server_TCP12345" and write a second rule as "New_Server_UDP98765"

Nowadays to have those 2 rules, you have to recreate the first one from zero.

It is not efficient.

If it is impossible by design, I don't know your source code, at least having a Copy command should save some time: you could copy the first rule renaming it before saving to firewall and you could add the second rule.

Lucas_Wilson · 3:03PM

https://community.zyxel.com/en/discussion/comment/83171#Comment_83171

Hi @Zyxel_Melen,

I would also like to request this feature.

I’ve noticed that within Security Policy settings, rule names cannot be edited directly. However, the “Copy to” function allows a rule to be duplicated under a different name. As @GiuseppeR mentioned , if directly editing rule names is not possible — and this applies not only to NAT rules but to all rule types on the USG Flex H Series, including Site-to-Site VPNs — could a similar “Copy” function be implemented across other areas of the UI?

For example, I recently had a situation where a client’s branch office firewall was relocated to new premises. The Site-to-Site VPN name needed to then be updated from “LocationA_To_HQ” to “LocationB_To_HQ.” Since renaming was not possible, the configuration had to be rebuilt entirely, including Phase 1 and Phase 2 settings, PSK, and other VPN parameters.

I feel as though a more streamlined approach is surely possible here?

1.37 uOS - impossible to edit NAT name

All Replies

Categories

Security Help Center