VCIT  Freshman Member

Well, It is now working. The firmware did fix the issue. It just took a bit longer.

Nope, even after taking the latest firmware. I am still not able to do anything after using the ZTP.

Downloading the latest firmware V5.35(ABUI.0) I will see if that helps and post my findings.

What is funny is that I Have another client with the same IPSec L2TP and it passed just fine. it is a USG-20 I did have to block tls v1.0 with: ip http secure-server strong-cipher no ip http secure-server tlsv10 and the scan passed with no issues. 

from Zyxel support: If you have a VPN configured it is likely recognizing the 3DES and DES algorithms used on this VPN. You will either need to block IKE (port 500) from the outside or increase the strength of the algorithms. Keep in mind that L2TP uses 3DES and DES algorithms to work so you will not be able to use L2TP,…