osake_li_09

@Gabriele session timeout udp-connect 120 means the timeout for UDP sessions to connect or deliver and for ICMP sessions. You may want to verify with the phone manufacturer/provider to see how often the phone checks registration and then increase UDP session timeout. And 10 access blocks every minute, I also don't it would…

There are other options without using paid Zyxel SecuExtender IPSec VPN client. Use Windows build-in L2TP VPN or SecuExtender SSL VPN client(Windows version) which not request a paid license.

I think it could be browser cache or content filter cache. You may use an incognito browser, and clear TCP sessions, CF cache before tests.Router#debug conntrack flush //clear TCP sessionsRouter(config)#content filter cf-queue flush //clear Content filter cache

Have you set up the connectivity check on your cellular interface? or any WAN trunk settings?I think it could be considered connected even quota runs out. If you have connectivity check settings, it would be considered disconnection when the quota runs out. you can give it a try.

Hi @NoE,Once the bridge WAN is set up, the main WAN stopped to access the internet? The main WAN should not be added to the bridge member I think, you may check on your routing policy setting also.

@kyssling, yes, I inactive all the RDP items and remaining item are all actived, then I perform TeamViewer over VPN.

@kyssling, yes, I have a VPN scenario that connects to USG110 through IPsec VPN, and enables the IDP profile which inactive RDP service. It works.

@kyssling, you may try inactive RDP service in the IDP profile. RDP over VPN is feasible.

When you upload firmware .bin file via FTP, did you disable the Windows defender firewall or another firewall software? You may disable it and try again.