frerealexis  Freshman Member

THank you Emily, but I cannot install the certificate to 40 PCs on my network. Why is it necessary to have a certificate en EACH PC ? why can't the firewall detect the virus before sending it to the PC ?

When I try http to this site : http://www.eicar.org/download/eicar.com.txt, I first get the warning message generated by the UTM PROFILE filtering. But I can still continue and download sucessfully And when I try the https it comes directly I cannot continue testing. For me the USG210 does not block virus.

I do have SSL on the USG210 but it is not activated. blocking UDP 443 does help (the videos are not visible) but the website youtube remains accessible.

To illustrate my case : the first logs (in the orange rectangle) show that the utm filter is blocking youtube when I enter youtube directly in the url bar. The last logs (in green rectangle) show connexions to google and from there I can click on a link to youtube and I have access but no logs specifically mention youtube,…

No, rebooting did not solve the issue...

I cannot install a certifcat on 40 computers on our network. There should be no need to. In the past the UTM profile worked : no need to use IDP. I will reboot the zyxel hoping this will solve the issue...

Hi Emily, you do not understand : I want to FORBID youtube. I have placed youtube.com and in the commun blacklist and in the custom "forbidden wet sites" AND "blocked URL keywords" of this profile, as you can see below Of course I have checked "enable custom service" and I have checked "check commun trusted/forbidden…

concerning the HTTP links : the firewall does not stop them. concerning HTTPS : yes, SSl is activated but when I update the certificat, I runs and then I get this message : SSL Certificate version 1.1.064 on device is latest. (success) at Mon Nov 18 08:45:43 2019. So I can't get the latest version. Concerning HTTPS : I…

My device is A0:E4:CB:84:38:01 ; serial number S152L21560739

Finally, it seems that the problem comes from FQDN groups for which I created security rules. After disactivating these rules, the message ERROR ZYXEL SERVICE IS TERMINATED does not appear and CPU is back to normal.

I have disactivated all authentification rules and the USG sees to be back to normal.

I sent the information to Emily's email

ok, I sent you my personnal email in my previous message.

YES, on FW 4.35. And rebooting doesn't solve anything. In fact the reboot does not work. After rebooting I had to unplug the device. And this morning, I have once again the same message.

I'm having the same type of problems with USG210 running on FW4.35.