tesagig  Freshman Member

or was there some Zyxel outage?

Is there any way to configure apps vs. ports in the Flex?e.g. I can enable "wahtsapp"vs. looking for ports and configure?

I found only port out 5222 to be logged as blocked. I opened it.I believe that whatsapp must have used 443 in the past as indicated in article link above (which was open for outbound)

the reason for me looking was slow web surfing. speedtest was ok. After fixing the geo fence web surfing speed is back to normal. Looks like my IP came into the crosshair.... I have a couple of questions:1.) any harm to disable SSH?2.) What exactly is "authentication server" under system?3.) Can I lock login to local…


 my geo fences are #1 and #2 rule. However, embarrassed to report that I just found out that the GEO block "to Zywall" was set to allow.... So, my fault.

I am more and more baffled by this. I am getting failed SSH logins from Iran 34.100.181.71 (which is part of Asia). I blocked all Asia. Why is the security policy not trump SSH logins?

So, are you saying Zyxel doesn't have 61.177.173.48 in the China DB? Where in the menu can I lock down login? Frankly, I can lock it down to local network access only fro SSH and WEB

I have the GEO policies already at prio 1 and 2 (on top)

I do have two security policies:1.) any to Zywall2.) any to any(excluding zywall) both deny with a IP4 source group that includes "Asia"no log SO, I wonder why I still saw the log entry?

thanks for confirming. I have ip/mac binding on internal network as I have some static IP's

thanks. I don't have any service that need to connect to USG, other than when I travel; e.g. for security video. Maybe VPN soon. So, my thinking was to lock down problem countries that I don't travel to. e.g. Most of Asia, Russia, ....

Got a 100 flex and I used the converter. Work great. Except, the WAN connection. But I used wizard to sort out. However, I have some questions: 1.) Do I need to enable IP/MAC binding on my ISP (xfinity) interface?2.) anti-malware: what is recommend, express or stream mode?3.) is there an easier way to select geo fencing…

thanks. Can I copy my USG40 config to the USG FLex 100?

thanks for sharing this. So, I am limited with the USG40 to a 100Mbps subscription +/-. What device would allow 300Mps?

What is the expected throughput for a USG40 with app features on (virus, IDP,..)?I had 100Mbs service and measured on avg 104Mbps. Upgrades to 300Mbs and getting avg 111Mbs