Zulgrib  Freshman Member

We can't run ike on port 443

I understand it is a certificate issue, this is why I insisted on adding the cert to the system store. Yes there is a popup asking me to verify if the certificate is correct; the certificate shown is the one expected, so I click on «yes».

Hello @Zyxel_Judy , This is the workaround i'm currently using, but the shaping needs to be done as soon as possible in some cases —- before it arrives at the gateway. It is also not manageable to create 400VLANs considering USG Flex 700 specification state a maximum of 128 VLAN interfaces. Giving access to common employee…

For example, doing a traceroute from a Zyxel AP and a competitor AP at the same physical distance with the same device targeting the same destination IP, I had a difference in latency of 1ms between the APs in a perfect scenario with no other users and isolation from third party waves. In crowded area, this difference…

When a request comes from a specific IP, the USG should reply with the same IP by default. To control how your server exit from your network to internet when the session initiator is your server, it's up to your policy route to manage that. It means internet traffic arriving on the cellular WAN should exit by there too,…

Can you attach a screenshot of the page where the option is missing? Wasn't able to replicate on my test unit here, exactly an USG Flex 200 too.

By any chance, do you do latency testings too?

Hello @Zyxel_Judy #230701293 is created successfully!

Hello, Sorry for the delay, it was when the administrator was created but unverified. (and are still unverified to this day for the affected) Thank you @Zyxel_Melen for confirming I was right trusting Zyxel for long-term partnership. It is highly appreciated Zyxel worked toward resolving it in such short amount of time…

Maybe a "pause license" we could use on AP that were offline for more than a Zyxel defined time, where the license would start it's consumption as soon as it is seen by Nebula again? It would be very appreciable for spare units. Meanwhile, a valid workaround is to explain the situation to your channel representative and…

@Zyxel_Judy & @Pook I manage most Zyxel device "by hand" and not over Nebula, My experience with slow AP configuration update comes with tests using wax620d-6e exclusively. At boot they are slow to resync with the service (as seen with the LED color codes and appearing offline in Nebula). Being slow to link back after a…

This feature would be useful to have better view on the topology.

Hello, I sent it by email by trying to guess your address to be able to actually transfer it as is. I also had news from the regional Zyxel team today by phone and they mentioned Zyxel TW is actually investigating it. Thank you. This is very important for the customers.

Hello Pook. Sending advertising to personal email addresses that didn't explicitly opted in to them in an enlightened way is illegal per GDPR and local laws. When an org owner or MSP invite a new user and said new user receive ads before the account is created, it is a breach because the receiving end didn't opt-in in any…

If the certificate hash changes all the time you cannot verify in a reliable way if there's a mitm attack. The correct way is to create your PKI.