weite  Freshman Member

Ok, tell me how can I add a VTI? I see the VTI under interface → network → advanced settings but there is no add button. Is there a other way to add them? I'm confused.

I configured it in version 1.21 and there was also the problem. Yes, the problem only occurs when I enable the UTM service. I'll see what I can do to give you access.

1 year and still no change. It was already promised for May and October, but unfortunately nothing. Is there any new information here? What tells the roadmap?

This is short to answer. All websites are loading extremely slowly and break down.

We like to upgrade our other old firewalls and now need policy routing. Is there a publication date of the new fimrware version?

That's a problem, but I will survive it. I hope that it will added soon. Thanks for the fast answer!

At the moment I use ECDSA-RSA-1024. I had testet the RSA 1024, but there was no difference.

nice to hear and thanks!

Thanks for you reply. I saw this in the menu and hoped that I can monitor this over SNMP. But unfortunately there is no such option.I use zabbix to Monitor everything in our company and this were a realy nice thing. One possibility would be to read the IP from the website.

Thanks for the fast answer. I installed the 4.60P1 and all is well. It can be so easy. =) Many Thanks!!!

Thanks for your answers. I contacted the support and that told me that I must install the certificates on each USG, there is no way to use the CA.

Yes. We are currently using the IPSEC client with certificates that we import into the usg. I've written that we create the certificates over the Active Directory. Sorry that's not corrrect. We use our Certification Authority. So, the question is. Is it possible to authenticate direct on the CA? At the moment we must…

It is a full connect to the Server but will discarded from the DNSBL. A lot of connections per second from different ip addresses. When it's not possible to block this than it's so.The DNSBL works. Thanks for your answer!