-
How to use the CLI to check if the security policy is enabled or disabled on the USG Flex H model?
Question : In this FAQ: How to use CLI to enable and disable security policy? And this FAQ will guide you on how to use the CLI to check if the security policy is enabled or disabled on the USG Flex H model. Answer : Please use the CLI "show config vrf main secure-policy enabled" to check the result. usgflex200h> show…
-
How to Restrict VPN Access by AD Group
Question: How is it possible to use group from the AD server to restrict VPN access? Answer: * Log in to the NCC portal. * Navigate to 'Site-wide > Configure > Firewall > Firewall settings', then adding external user group * Create a new secure policy by specifying the group that needs VPN access.
-
How to creat bulk addresses object by CLI
You may have requirement to import the bulk addresses as block list Question: How to creat bulk address object by CLI ? Answer: 1)Open a textbook, and edit to the following content object address-object address {Object Name} type cider {Address with Subnet} For example: object address-object address Attack1 type cidr…
-
Why can't I edit the interface name on the USG Flex H models in the Web-GUI? How can I resolve this?
Question : Why can't I edit the interface name on the USG Flex H models in the Web-GUI? How can I resolve this? Answer : The H series model doesn't support users changing the interface name directly in the Web-GUI due to firmware platform design limitations. The only way to do this is by removing the interface and creating…
-
Why Can't I Set an Unnumbered IP Address on USG FLEX500?
Question: I want to set an unnumbered IP address on the WAN interface of my USG FLEX500. How can I do this? Answer: It does not support unnumbered IP at current design.
-
How to Set Up Log Alerts for IP Reputation?
Question: How can I receive alerts for IP reputation logs via email? Answer: To receive email alerts only when there is a blocked IP reputation event, you will need to use an external syslog server. Here are the steps to set this up: * Set the firewall to send event logs to an external syslog server: * Access the…
-
How to Add a Second IP to an Interface on Zyxel Devices via CLI?
Question: Is it possible to add a second IP to the same port on Zyxel devices? Answer: While adding a second IP to the same port is not currently supported in the Zyxel web GUI, you can achieve this through the Command Line Interface (CLI). Here is how you can do it: * Open the CLI on your Zyxel device. * Run the following…
-
How can I change the negotiation speed via CLI on a Nebula-managed firewall?
Question: Is there a way to change negotiation speed via CLI on a firewall managed by Nebula? Or can it only be done in monitoring mode? Answer: Yes, you can change the negotiation speed using the Command Line Interface (CLI) on a Nebula-managed firewall. Here's how you can do it: * Start by accessing the CLI. * To view…
-
How to resolve RDP session disconnections on FLEX/ATP?
How can I resolve constant RDP session disconnections on Zyxel USG Flex 100? If your RDP sessions are constantly disconnecting when using a Zyxel USG Flex 100 firewall but work fine when connected directly to a modem or a wireless hotspot, the issue could be related to the ICSA protection mechanism on the firewall. To…
-
How to check the vlan interface status via the CLI on ATP and USG Flex models?
Question : The user may need to use CLI commands to check vlan interface information for troubleshooting or maintenance purposes. This article will guide you on how to execute it. Answer : The user can use the CLI command "show interface all" to list the current firewall's interfaces first, as shown below: If the user…
-
How to disable and enable the ethernet port via CLI commands on USG Flex H models?
Scenario : The user may need to use CLI commands to disable and enable the ethernet port for troubleshooting or maintenance purposes. This article will guide you on how to execute it. Answer : Please refer to the following CLI commands to disable and enable the ethernet port ge3 of the USG Flex 700H. Disable the ge3 port:…
-
[ATP/FLEX]How often will the Nebula firewall upload the CPU temperature information?
Question : How often will the Nebula firewall upload the CPU temperature information? Answer : Currently, the Nebula firewall uploads the CPU temperature information hourly. The user can navigate to the Event Log page to check the hourly CPU temperature information, as shown below:
-
How to show the system logs by CLI?
Question: How to show the system logs by CLI in H series? Answer: usgflex500h> show log The diaginfo also have this output message
-
How to find the crash logs by CLI
Question: How to find the crash logs by CLI in H series ? Answer: usgflex500h> cmd debug system disklog filter last The diaginfo also have this output message
-
How to show CPU usage with H series by CLI
Question: How to show CPU usage with H series by CLI Answer: usgflex500h> show cpu status usgflex500h> show cpu ps
-
How to show memory usage with H series by CLI
Question: How to show memory usage with H series by CLI Answer: usgflex500h> show mem status usgflex500h> show mem ps
-
How to show process usage with H series by CLI
Question: How to show process usage with H series by CLI Answer: usgflex500h running config# cmd debug system ps
-
How to configure the UDP session timeout value on USG Flex H series models?
Scenario : Users may wish to configure the UDP session timeout value on USG Flex H series models for specific purposes such as VoIP-related traffic. This article will guide you on how to configure it. Answer : Please navigate to System > Advanced > System Parameters > UDP Timeout to adjust your desired value. Once you…
-
How to change the WAN interface from static IP to DHCP in the serial console?
Question How to change the WAN interface from static IP to DHCP in the serial console? Answer Refer to the CLI below to modify the firewall WAN interface from static IP to DHCP IP: usgflex100h> edit running usgflex100h running config# vrf main interface ethernet ge1 usgflex100h running ethernet ge1# del ipv4 address…
-
How to reset the configuration to system default in debug mode in the H series?
Question I am unable to log in to the device via the serial console, and pressing the reset button is not working. How can I reset the configuration to system default in debug mode in the H series? Answer Press any key to enter debug mode when the device is rebooting. Type atkz -b. Type atgo to continue. Press Ctrl + D to…