- Last Active
Hi Jerry,First time we used both WANs and thought we've mistakenly arranged BWM. But since a couple of days we are using single WAN only and WAN2 is not longer connected. But the download bandwith drops when accessing from the intern…Thanks Can,We've got different Security Policies in place to control not only the outgoing traffic to the internet, but also the traffic between different USG interfaces, for example from LAN2 to LAN1. If we set the "next hop" for LA…Thanks Peter. We are always shying away from creating permanent routing rules. But maybe we should give it a try.In that case, do we have to use ROUTING > POLICY ROUTE with option enabled: "IPv4 Policy Routes to overwrite Direct R…Hi Can,Thanks for clarification.But users (or service subscibers) should have an opportunity to enable or disable such notifications for the single services.Like us, when owning two USG devices,…Now, after several days, the notification has stopped. Don't now why? We didn't make anything else. Seems, the notification service needs some time to discover and implement changed user settings.
Over the weekend just received 3 expiration warnings again. This is annoying.Just checked the warn settings. For all connected services of the switched-off USG the HIDE checkbox is activated. But it seems this caused nothing. …Unfortunately we receive the warning message again this night. The only difference - now the subject is written in german anguage while the content is still in english. in Daily myZyxel notifications about expired services Comment by USG_User March 5Was a little bit difficult to find, but finally I found it indeed. Thanks for the hint. Will see whether it stops the notification.
The provided links to eicar.org seem to be http links but will be redirected to https pages each. And once encrypted, the download will pass the firewall.I was not able to reconstruct the EICAR download. The problem is that the website is https encrypted and that's why our USG is not able to "look inside" the encrypted packets. And the http download is presently not available with eicar.org.
We've solved the problem in the following way:Due to the fact that an uploaded startup-config.conf will be immediately applied, but the errors let the update process always fail, we have firstly rename the startup-config into e.g. "s…How did you test the EICAR test virus? Do you know that you have to pass to another USG zone that the rules are being applied? For example copying the test virus from one coputer to another in your LAN2 caused to nothing because traffic within your …First and despite of any A/V scans, you should not create a rule which is allowing anything on first position of your rule set. Any traffic match this rule and can pass the firewall! You should create different single rules, e.g. for website ac…