Carlsap  ZCNE Certified

Thanks for the explanations

It turned out like this: When I rechecked the settings for Lan to Wan I saw that the content filter profile was turned off for this Flex700. When I turned it on with BPP I got this warning message: Which confused me. What does it mean? I clicked on OK but saw nothing further about where to apply dns content filter. Now the…

Youtube is on the allowed list and streaming websites are not blocked. Any suggestions of where to look further in the Flex700

We have the same problem here on a flex700 device. Can we disable the SSL check feature?

Thank you for the update. To open (whitelist) the address undiscriminately would be a very big and expensive mistake. Potentially you open up for the bad guys and invite them in to your network.

I understand. The blocking function of IP reputation is active only when traffic is towards the malicious ip address. Thats why I see "forwarded" in every second line of the log, and there is a blocked when there is a valid response created on the machine behind the NAT. This raises another question: How can we report…

What is the resolution in this case?

Well, all this info I can see in the atp200 console. I was hoping for some magic to actually monitor status of the APs performance and stability.

Thanks for the explanation Emily. Best regards from Arild

As far as I recall the ADP profile is default from Zyxel and should not be altered since its a security feature built in the Zyxel USG device. But as time progresses there is always something that changes in behaviour, In this case it seems to be the Iphones. Why the ADP feature trigger on this is beyond my knowledge, but…

Thank you for the suggestion, but I made a mistake in the question. I ment one external adress is to be reached through the WAN2 and outbound DNS queries must be allowed as well. All other outbound traffic should be routed trough the WAN1.

My mistake, I had to ping test from endpoint to endpoint. The switch itself does not reply to jumbopackets. Ran successfull ping test between two windows machines with this syntax: ping -f -l 8972 [IP address] Conclusion: The XGS2210 Switch supports jumbo frames on IPv4. Regards from Carlsap =)

Tried to run ping test from telnet session of xgs2210 switch to direct connected laptop with jumboframe enabled. command used: ping 192.168.1.100 size 1472 is ok ping 192.168.1.100 size 1500 is not ok Tried local loopback ping using xgs2210 local ip adress: ping 192.168.1.41 size 1472 is ok ping 192.168.1.41 size 1500 is…

Once again. Thank you Zyxel_Ryan for assisting. I also found some reference to MTU size in the Userguide version 4.5 called Path MTU Table. But appearantly it only cover the IPv6. Is there a plan to include the IPv4 in this MTU table view? Or does XGS2210 only support 9k in IPv6? Regards from Carlsap

Thank you Zyxel_Ryan Is there any documentation you can supply on this matter? I probably need to share this information to the HPE simplivity deployment team. Carlsap