Zyxel_Emily  Zyxel Employee

Hi @bbp, In the datasheet, VPN throughput 1200Mbps are UDP throughput based on a combination of 64 byte, 512 byte, and 1424 byte packet sizes. (Using IXIA) If you run the VPN throughput by downloading a ZIP file using HTTP (It is TCP, not UDP), the result 119.5 Mbps is measured with 1 session only.

Hi @Micz82, To solve the issue, please follow the instructions. Check if USG FLEX 500H is upgraded to 1.20(ABZH.2). On console or SSH, try to enter the following commands and check if the window "Some changes were made" still pops up every time when you access the page "Remote Access VPN". usgflex500h> edit running…

Hi @bbp, Here are the official test report for your reference. SSL VPN (OpenVPN) throughput Using HTTP protocol to get 700M ZIP file from a server. SSL VPN (AES) throughput on USG FLEX 200H with firmware 1.20 is around 131.2 Mbps. (Security policy, Security services, BWM, DOS, Session control are disabled.) Remote access…

Hi @Gru_Ma, The device becomes unreachable if you upgrade USG FLEX H directly from factory default version to 1.20 or later firmware version directly. That's why the official firmware is unavailable on myZyxel.com. Is the firmware version of your USG FLEX H 1.10 or 1.10 based date firmware? If so, I will send the version…

Hi @p4_greg & @mMontana, We still suggest all devices follow the wizard to register to myZyxel.com. I'll send the command to you in private message. Thanks!

Hi @Scott_Gorman @GiangiSkan, You can use DNS Content Filter to block social networking. In Security Service > Content Filter > DNS Content Filter, click the profile BPP and select "Social Networking". Apply the DNS Content Filter profile "BPP" to both security policy rules. From LAN1 to any From LAN1 to ZyWALL The website…

Hi @mMontana, I sent the command to you in private message. Please check the message and enter the command on the device.

Hi @kaika313, As PeterUK said, you need to use IPSec_SSL_VPN_7.7.40.019 (Windows) to establish SSL VPN to USG FLEX H.

Hi @kaika313, Here are the commands to disable "Authenticate Client Certificates". usgflex200h> edit running usgflex200h running config# vrf main http-server secure-server auth-client false usgflex200h running config# commit usgflex200h running config# copy running startup Overwrite startup configuration? [y/N] y

Hi @Alfr, Thanks for your suggestion. We moved this request to idea section for future evaluation.

Hi @SAI_Mike, CPU Web GUI: The value doesn't contain fast path traffic. SMNP "sysCPUUsage": The value contains both fast-path traffic and other traffic (ex. calculate the statistics, GUI data processing...). Note: You can use OID (.1.3.6.1.4.1.890.1.15.3.2.21) to monitor CPU usage for fast-path traffic. Session Web GUI:…

Hi @NexusGR, You can find the Product Icon in Zyxel download library.

Hi @JJ9231, Here is the official test report for your reference. You can disable security policy and all security services to check the throughput again. Using HTTP protocol to get 700M ZIP file from a server. SSL VPN (AES) throughput on USG FLEX 500H with firmware 1.20 is around 239.5 Mbps. (Security policy, Security…

Hi @PeterUK & @Mk88_it, I just run the test of Problem 1. If the above rules on Flex are disabled on reboot the rules are disabled as expected but when you enable them the rules don't work then you reboot then they work. I just run the test with the follwing steps. Internet----(10.214.48.46)USG60W----(DHCP:…

Hi @PeterUK & @Mk88_it, Thanks for reporting this issue, We will run some tests to check the symptom and update the result to you later.