Zyxel_Charlie  Zyxel Employee

@Suman_Koirala The dynamic account=Hotspot user. The User name is "billing-users", and user type is "dynamic-guest".

@Suman_Koirala Usg 60 can support maximum 1000 dynamic accounts which is suitable in your requirement.

@Zodiac13 Regarding to the VPN issue related with error message -16015, you may check the configuration and parameters on the PC(L2TP client) with following thread first. https://community.zyxel.com/en/discussion/2625/zywall110-error-number-16015-error-message-dial-a-dynamic-tunnel-has-failed-for-crypto-map/p1

@Pook The throughput will be affect when you enable the Firewall or UTM profiles. Since the firewall need to check and analyze each packet, therefore, it will consume numerous performance. Also, disable traffic statistic, and BWM since it could effect the throughput as well.(On-Premise) On the datasheet, the maximum…

@xbolshe From my lab, VPN device is truly doing the DNS query to FQDN: alpha1.rpc.cubs.zyxel.com. We will check it. However, following the setting you mentioned " configure System Name: zyxel.cso.com", then packet capture on wan interface. From my lab, the packet only appear alpha1.rpc.cubs.zyxel.com without zyxel.cso.com.…

@kelmi In my understanding, it could be TP-Link cloud is on AWS, so that there are the session communicate between TP-Link camera and IP address of AWS. The camera record the data transmission to TP-Link cloud, so client can monitor image in real-time. Since it's the UDP traffic, and the return session was initiated by…

@xbolshe Regarding to this issue, we will address this symptom, and just confirm with you that was this device managed by Orchestrator(SD-Wan)? Otherwise, can you share more information what exactly issue did you face? And for investigating further, (If device managed by Orchestrator) please help to add both account access…

@Cyber_IT We had maintenance on Orchestrator recently so the connection probably was unstable. You could check it again, and if issue still appear, please let me know:) Also, for further investigating of Nebula issue, please help to activate Zyxel support located at HELP > Support request, so I could have the privilege to…

@xbolshe Regarding to your description, in my understanding, the "alpha1.rpc.cubs.zyxel.com " was created on the PTR record, and mydomain.com created on domain name. However, the FQDN"alpha1.rpc.cubs.zyxel.com.mydomain.com" cannot be resolved?Also, I just curious that related with issue of domain name, what exactly issue…

@USG_User The current behavior is that the VPN tunnel will be terminated if VPN connectivity check failed. For an additional option when the connectivity check failed, we could evaluate that add the Primary & Secondary option for connectivity check on VPN page. This will move to idea section.

@Pook Yes, you can leave the USG Flex in DHCP mode for the WAN setting as below:

@Brian1 If the PC and Printer are in the same subnet, the traffic seems will not be managed by Firewall. To investigate further, during the issue occur, can you private message the packet which collected on the firewall's Lan?

@Albert_Kwok 如有用戶的網路位置，先到設定>BWM 點選新增>創建新物件>填選用戶IP 設定啟用及配置BWM設定，在來源欄位選取User11 控制User11的速度，可在內送和外送欄位作限制。 設定好後，要開啟BWM大開關。點選啟用BWM>點選套用。

@JackHenson You need to make sure that the accessible IP address is configured in the address object then add this policy with this address object

@GrahamWebb Can you share us the certificate which you imported via private message? We’d like to check if we can see the same error message as your.