Zyxel_Jeff  Zyxel Employee

Hi @USG_User Yes, the IPSec SecuExtender still be supported in the future. Please refer to this article. Thanks. [2024 Sept Notification] SecuExtender SSL VPN macOS and Windows Clients: EOL and Upgrade Options

Hi @Marcointegrated Since the VPN100 is also EOL, you could consider using L2TP as an alternative solution. Additionally, you may upgrade the VPN100 to the USG Flex H models, which support the SecuExtender Zero Trust IPSec/SSL VPN Client. Thanks.

Hi @Marcointegrated Thank you for your update. May we know which firewall model you are using? Also, is it in Nebula mode or on-premise mode? Thanks.

Dear all, Since the SecuExtender SSL VPN macOS version is EOL, please refer to this article for upgrade options. Thank you! [2024 Sept Notification] SecuExtender SSL VPN macOS and Windows Clients: EOL and Upgrade Options

Hello @RSaull Currently, we don't have plans to support Mac OS 15 for the SecuExtender VPN client. When Mac OS 15 is released, you may consider using the native VPN client as a workaround solution.

Hi @NoCoZFR Additionally, since your USG Flex 700H is behind NAT, the USG Flex 700H's ge2 interface will get a private IP, and the CN domain name of the generated certificate will also be the private IP. Therefore, please follow below steps to set up the remote VPN: 1. Navigate to System > Certificate to generate a…

Hello @NoCoZFR To exclude any script installation issues, simply double-click the .bat file after downloading it to your Windows PC. This will automatically install it on your PC. Then, attempt to establish the remote VPN connection to verify if it works. If you still have a problem, please let us know. Thanks.

OK, noted it. Thanks.

Hi @RSaull The current SecuExtender VPN client is version 1.2.6, and its last supported Mac OS should be Mac OS 14 Sonoma. Its EOL date is 2024-09-01. Please refer to this link. Thanks.

Hi @Killerjem Welcome to the Zyxel community. May we know if you have applied the Content Filter profile on the security policy from LAN to WAN direction? Please refer to this video to set up the Content Filter, thanks.

Hello @Nicola Per our discussion, please collect the following information for us during the issue occurrence: (1) Packet files on the USG Flex 100 and the PC sides. (2) Enter the CLI command 'show logging entries'. Thanks.

Hello @Nicola_Santalucia Please provide the remote Web-GUI and collect the packet file while this problem is occurring for us. Thanks. We will send a private message to you later. Thanks.

Please refer to below FAQ articles: How to check the NAT rule using CLI for USG Flex H series models? How to remove the NAT rule using CLI for USG Flex H series models?

Hello @JPElectron Please use the CLI "show config vrf main virtual-server rule" to check the current virtual-server rule, as shown below, the rule is named NAT. usgflex100h> show config vrf main virtual-server rule rule NAT enabled true interface ge1 source-ip any original-ip address 10.214.48.38 map-to address…

Hello @Pippo May we know if the lost management APs belong to the remote AP or are they management APs under the USG Flex 700? Thanks.