-
[ATP/FLEX] Why does the Device Disconnected message appear on the SecuReporter?
Question : Why does the Device Disconnected message appear on the SecuReporter, but click 'Got it' can notice the device is still connected. The device is still connected. Answer : The reason why the SecuReporter shows 'Disconnected' is that the device rarely sends logs to the SecuReporter due to the slow DNS resolution…
-
How do I remove the Nebula firewall from the site and re-add it?
Question: How do I remove the Nebula firewall from the site and re-add it? Answer : Please refer to below steps: STEP1. Navigate to Organization-wide > License & inventory > Actions > Choose the Nebula firewall that you want to remove> Change site assignment STEP2. Choose "Remove select device(s) from their current site."…
-
How do I check if the 10G port of the USG Flex 700H is working normally on Nebula?
Question: How do I check if the 10G port of the USG Flex 700H is working normally on Nebula? Answer: Once the 10G SFP connects to the USG Flex 700H the user can navigate to the path of Nebula: Site-wide > Monitor > Device > Firewall > Port > To check the port connectivity status, the user can navigate to the dashboard of…
-
How to Create a Guest Network on Nebula firewall?
Question: How do I create a guest network on Nebula? Answer: To create a guest network on Nebula: Navigate to Site-wide > Configure > Firewall > Interface. Enable the Guest option. Once the guest network is enabled, clients connected to this interface will only have Internet access and will be restricted from accessing…
-
Why can't I configure the H series firewall settings in the Nebula?
Question : I have a USG FLEX 200H, but I can't find the firewall entry under Configure. Answer: Currently, USG FLEX H series supports Cloud Monitoring Mode only on Nebula. After you follow the guide in the setup wizard, USG FLEX H will be registered on Nebula. You can use the following features to manage USG FLEX H on…
-
Running Firewall in Standalone Mode While Using Nebula Features
Question: I want to run the firewall in standalone mode but still benefit from Nebula features. Answer: You can deploy the device in Cloud Monitoring Mode. In this mode, you can configure the device locally while managing it through the Nebula Control Center (NCC).For more detailed information, please refer to the link…
-
Is the VPN domain nebula-66xxxxxx.d2ns-nbl.com pingable?
Question: Is the VPN domain nebula-66xxxxxx.d2ns-nbl.com pingable? Answer: The domain resolves to either the firewall's WAN interface IP or the uplink router's public IP. By default, the firewall does not allow ping (ICMP) from the Internet. To enable ping, you need to create a security policy allowing ICMP traffic.
-
How to update the firmware to Nebula firewall via FTP?
Question : How to update the firmware to the Nebula by FTP? Answer : Please prepare a PC to connect to the firewall's LAN port and obtain a DHCP IP (for example, the assigned DHCP IP is 192.168.1.33 with the default gateway IP 192.168.1.1) from the firewall. Then, open the Command Prompt and access the FTP server through…
-
Why Are We Receiving WAN Disconnection Alerts Despite Having an Internet Connection?
Question: We are getting WAN disconnection alerts from two of our sites, but our internet connection seems to be stable. What could be causing these alerts? Answer: The issue is caused by intermittent instability in the CP server, which pushes the configuration file to the devices and sometimes leads to false alert emails…
-
Why is my firewall showing offline after installation?
Question: I've installed all the new equipment today, but the firewall cannot connect to the internet. After resetting and reinstalling it about three times, the network connection works. However, the app still shows the firewall as offline and it cannot be updated. All other devices are working fine, except the firewall.…
-
Why does the NCC take a long time to search the logs?
Question: I'm trying to search logs from June 1st to June 30th, but the page isn't loading. I can only see the logs from the last 24 hours. Why is this happening? Answer: The issue you're experiencing is due to the large size of the event logs. To resolve this, try to shorten the event log search range. Instead of…
-
[ATP/FLEX] Why the firewall cannot access the Nebula in Monitor Mode again?
Scenario : The user may encounter a situation where, after removing the device (in Monitor Mode) from the org and adding it to the license & inventory again, the device still cannot be online in Monitor Mode on Nebula. What is the possible reason, and how can this be resolved?" Answer : The possible reason is that the user…
-
[ATP/FLEX]How to Give Read-Only Access to SecuReporter when device on-cloud
Q: Can a customer have read-only access to Secureporter without being a full admin on Nebula? A: The permissions between Nebula and SecurReporter are linked, meaning that if you set a user as read-only in Nebula, it will apply to Secureporter as well. If you need to proceed with this configuration, set the user's privilege…
-
[ATP/FLEX]Why Can't I Delete a User on Nebula?
Why Can't I Delete a User on Nebula? If you are unable to delete a user in your Nebula organization, it may be due to the user being created at the Organization (Org) level. To delete users created at the Org level, follow these steps: * Login to the Nebula Control Center. * Navigate to your "organization-wide >…
-
[ATP/FLEX]How to limit clients to connect an open wifi on a Nebula firewall by the mac address?
Question: How to limit clients to connect an open wifi on a Nebula firewall by the mac address? Answer: On cloud fireawll does not support MAC Auth currently. Please use on-premise as alternative
-
[Nebula]Is it possible to export NAT rules from Nebula?
Question Is it possible to export NAT rules from Nebula? Answer It is not possible to export NAT rules from Nebula. However, we can obtain the NAT configuration by accessing the device via SSH and using the CLI command "debug sdwan show firewall running-config". Assume the NAT rule is configured in Nebula. We can see the…
-
[Nebula]Why do I get ping loss in the live tool when I select the LAN interface?
Question I have a Zyxel USG Flex 200. My LAN1 has a 100% loss rate when I ping google.com from the Nebula Control Center. Why do I get ping loss in the live tool when I select the LAN interface?" Answer If you want to ping an Internet host, you need to select an external interface, such as WAN1 or WAN2. It is not possible…
-
[Nebula]Where can we check the device startup LED guide?
Question Where can we check the device startup LED guide? Answer Navigate to the Help page and scroll down to the Device LED Guide. We can see the LED behavior for all models in this table.
-
[Nebula]Where can we see the Data processing agreement of Zyxel Nebula cloud-management?
Question Where can we see the Data processing agreement of Zyxel Nebula cloud-management? Answer Navigate to the Help page and scroll down to the Data Policy. We can see the Zyxel Privacy Policy, Nebula Terms of Use, and Zyxel Nebula GDPR Data Processing Agreement.
-
[Nebula]How to check the differences between the Nebula Plus Pack and the Pro Pack?
Question How to check the differences between the Nebula Plus Pack and the Pro Pack? Answer Navigate to the Help page and scroll down to the Plus & Pro Packs feature list. We can refer to this table to check the features of the Plus and Pro Packs.