Zyxel_Emily  Guru Member

Hi @Harry123, Connect a laptop in lan of USG FLEX 700 and give me the remote access of the laptop in private message to check the symptom directly. Thanks!

Hi @kelmi, Currently, USG FLEX supports sending logs and alers to Email in these conditions only. We suggest you send logs to a remote syslog server and check if the syslog server supports sending email when some events (unwanted connection) are triggered.

Hi @Jokke, It seems Samsung needs two DNS server in phase 2 settings. Hence, try to configure both First DNS server and Second DNS server in VPN Connetion > Configuration Payload on USG40.

Hi @enzopa @PeterUK, Could you share the settings of IPSEC VPN with SNAT with us in this discussion? Thanks!

Hi @Agor76, The fix will be merged into the next official version 5.36 and the release schedule is around Mar. 29th.

Hi @Alex_Khru, The latest firmware version of USG100-PLUS is 330AACV7ITS-WK48-r74988 which was released on 2016-12-02. 330AACV8ITS-WK41-r74145 was released on 2016-10-14 and it is not the final version. Hence, we suggest you use 330AACV7ITS-WK48-r74988.

Hi @Alex_Khru, You can download firmware 3.30(AACV.4) at this link. Follow the firmware recovery step in the release note to upload firmware to USG 100-PLUS via FTP. If the device is still not able to boot up, maybe it is hardware issue. You can consider the new model USG FLEX 200 or ATP200.

Hi @Russelljacobson, Here is the configuration guide of vitrual server for your reference. [ATP/FLEX] How to set up Virtual Server on Nebula If your ATP/USG FLEX is placed behind another router/firewall, you also need to allow corresponding service/port on that router/firewall.

Hi @MariusVoicu79, We are aware of this issue and we plan to enhance the performance of SecuReporter in late March.

Hi @MariusVoicu79, We need to check the device settings and its log on SecuReporter. Please go to Help center > Support request and turn on "Invite Zyxel support as administrator" on nebula control center. 😃

Hi @PatriciaLucas, What is the model name of your device? The LED for WAN/LAN/DMZ on USG FLEX/ATP is yellow or green. Here is the LED status for your reference.

Hi @JCE,Try to use App Patrol to block BBC iplayer. Create an application object containing these two applications. Then go to App Patrol, create a new profile with this application object and action "drop/reject", and apply this profile to security policy rule. 

Hi @MariusVoicu79,Nebula supports the feature "Remote Access VPN". The PC outside of the private network can use the IPSec VPN server or L2TP over IPSec VPN server to establish VPN tunnel to ATP200. Then all traffic from this remote PC goes through the wan IP of ATP200. 

Hi @AndreYPB,To get better throughput, try to enable Fast Forwarding on USG60W in Configuration > System > Advanced > Fast Forwarding. Fast forwarding is designed to maximize the NAT, Routing, Firewall, and VPN performance.

Hi @ifly,ZyWALL USG 100 supports up to 200 address objects. You can try to enable ADP and modify the threshold of UDP Flood in Traffic Anomaly. Since ZyWALL USG 100 is EOL and IDP license for this model is unavailable, we recommend you ATP200 or USG FLEX 200. You can use IPS to block DDoS attack or Geo IP to block suspect…