FrankIversen  Ally Member

the mismatch is one thing. but the ability to transwer a switch from a tenant we do not control is not good at all. that is a big securityhole.

we have also created a more detailed ticket on partnersupport@zyxel.se with #158081 Please check the information we have provided there. Thanks.

@Nebula_Chris No, there are very few settings on our clients firewall these days. Primary just a couple vlan, a new NAts and a few site to site tunnels. In that case, in "worst case", is a replacement from NSG200 to NSG50 a solution in a disaster recovery if we only have a NSG50 at our hands? Anything else beside the…

We are doing the same exervice at a customer later this week. This is a supported configuration? with a secondary wan which should failover? how is the failover policy? will it kick to wan2 only if we miss the link on the wan1 interface or is there a ping policy on the wan1 interface?

We need to force this behavior centrally.There is situation at customer site, f.ex when they are using external people to connect to their servers. They do not want the person who connects to the vpn to be able to use full tunnelig since they have a lot of polices which depens on the wan-adress. If people outside the…

This is also a deal breaker for us. We must be able to force split tunneling.

Come on, Azure MFA is far better :)

@Nebula_Chris Which mfa will be used? azuread mfa?

Schedulded/Periodic restart of ap, switch, gateway should be an option. #featurerequest

agh.. so we can not use nebula equipment at remote location where we want this security i guess..

does a nsg-50 firewall support this? we need to be able to secure on mac-addresses at same end-station where there is no people located on daily basis.

Any news regarding MFA on the client vpn for nsg50 or nsg100s?

so if we use Smart mesh (what we of course would due when we want to use wireless client mode for the lan port), this will work?

why remove important and basic functionality when upgrading our accesspoint…...

was hoping for schedule. We really need to be able to connect to Azure with ikeV2 and route based VPN asap