Mario  Ally Member

Hi @Zyxel_Vic I understand the request from Peter21. We are migrating from USG to ATP, now we have many obsolet devices in the portal. Please work on a fix for this.Mario

@Zyxel_Stanley wow, great news! I hope we see it soon, I'm waiting since 2010 for this function :#

@jonatan @Zyxel_Richard Remote AP works great, but I had also create a Lan1 to Lan1 rule to get it running.

Thank you fro your feedback.The article from zyxel.eu looks great, but at least the adding of the services wasn't working as described in the gui: I had to do this manualy.

@CoreSG I just needet to update a spare USG60 from 4.35 to 4.64. Did a direct update, and it worked.

Thank you for the summary of the current situation. Unfortunately, we still have no information about the origin of the problem. In my opinion, a bruteforce attack on the accounts is very unlikely, as the firewalls have a default lockout policy. Therefore, an exploit /auth. bypass is probably more likely. In this case,…

@USG_User thanks for the feedback. I know this is possible, but all users need to change this.During homeoffice, this generates a lot of trouble till all user connect to the new port. And somtimes other prots then 80/443 are blocked. Cause Zyxel suggest only to seperate HTTPS and SSL VPN, but don't make a recomendation…

 @Zyxel_Stanley is it safe to setup SSL VPN port to 443 and webinterface to another port?In this case the SSL VPN Users don't need a new address to connect.

Hi CoreSGPlease check ftp://ftp.zyxel.com/USG20-VPN/firmware/ you find 4.35ftp://ftp.zyxel.com/USG20-VPN/firmware/435ABAQ2ITS-WK08-r92067.zip Maybe an upgrade from 4.35 to 4.60 is possible...

Yes, you can group multiple GEO Objects to a group, but you can't mix Host/Subnet and GEO in one group. You have also the option to add IP / Ranges / Subnet to a Country, if the Zyxel Database hasn't the corect information. Let me know if this works for you.

Thanks for sharing. Was the "User Lockout Settings" enabled?If yes, I don't think this was bruteforce to get access.

@bind fully agree with you, this is the important question! until now, we don't have this information. lets ask @mMontana, he had attacked devices. Did you have strong passwords on your device and a lockout policy for bad logons?

New Firmware for ATP is out. According to release note:[...][ENHANCEMENT] To strengthen security access under Covid19 pandemic, given GeoIP feature by default on all devices. Thanks for this Zyxel!! Sti

@Zyxel_Vic you wirte: Enabel 2FA will definately help secure the networki agree, that 2FA is alway a good choice, but does it help in the current situation? according the mail, it's a bypass oft the auth, then a creation of a new user - this one dosn't have 2FA enabled...can 2FA avoid this?