electsystech  Ally Member

I'd say if you trust Zyxel enough to use their firewall, you should trust there config utility. You could always convert it than change the VPN PSK afterword. Or you can just setup the new router manually. I usually pull a backup from the old router and then copy and paste the config file one section at a time into the new…

Yes, you can use the startup-config file from the old router to the new one and your firewall rules and credentials will come across.

Is that a Flex 50? A USG 50 is a first gen router that was end of life years ago. Can you give more details? Is the bot attack on the wan interface?

You can get a Public ip with starlink on their business plan. I believe the price of the business plan with public ip is $140/mo in the USA.

So are they going to issue another patch for the last vulnerabilities?

You'll need to setup a DNS content policy as well.

The PCI company submitted it as a false flag.

We found 2 routers, a USG Flex 50 and a VPN 100 that had 2 new SSL VPN security policies added. Both were on 5.37 firmware. I disabled them here. The other router we restored from backup and we'll update this one after hours tonight. There are no other users logged into the router. Is this the same issue or is it a new one?

We setup a DNS content filter policy from Lan to Zywall, source, Ips of chromebooks and that seems to have solved it.

I'm quite certain there's no vpn on the chromebooks.

You need to install the datecode firmware patch from here. Hopefully, it goes from datecode to production very soon.

Do you have a zyxel poe switch that supports Ethernet Neighbor ? Looks like that's the only way to do it. https://support.zyxel.eu/hc/en-us/articles/4423468211090-Access-Points-NWA-WAX-Reset-Button-and-Device-Reset#01H7FKP1YAWZ9BB6KWFMXJQSMP Otherwise, just contact Zyxel support, I expect they'll need the serial number and…

You need to install the latest datecode firmware from here.

Yes, see the discussion here. This has to do with an update for Chrome and Edge, Edge must not have updated or it wouldn't work either. There's a datecode patch for it for the newer routers. Unfortunately, Zyxel hasn't released an update for the USG series except for the Flex 50 since they are EOL. So you'll need to…

The link for the GS1900-24HPv2 https://download.zyxel.com/GS1900-24HPv2/firmware/GS1900-24HPv2_2.70(ABTP.3)C0.zip