Network slow after firewall change

2

All Replies

  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment

    sorry,

    1. is block client access to device via wan with any service....
  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment

    but I need to keep vpn

  • Zyxel_Charlie
    Zyxel_Charlie Posts: 1,034  Zyxel Employee
    First Anniversary Friend Collector First Answer First Comment

    @IkkI_Magna

    For first question, Go to security policy, first rule wan to Zywall, service:NATT,IKE,ESP,AH, allow. Second rule,wan to Zywall, deny.

    For second and third question, since the Client and server are on the same subnet, please try to enable the "Allow Asymmetrical Route" on the policy control, then check it again.

  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment
    Dear Charlie,

    There is another question.

    After change firewall, sometimes, nslookup is Ok but fail to ping and access web by browser...how to check it?
  • Jeremylin
    Jeremylin Posts: 166  Master Member
    First Anniversary First Answer First Comment
    It seems DNS issue, did you ping IP address or Domain name?
    Check this example,
    https://businessforum.zyxel.com/discussion/4273/4g-network-slow-on-usg-60#latest
  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment
    Dear Jeremylin,

    After change router, some computer pop"select network location" sometimes.

    It is not always happened.

    Maybe per 1-2 months once...

    Not all computer, but some....
  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment

    Not Always, but sometimes pop up when user start computer
  • Jeremylin
    Jeremylin Posts: 166  Master Member
    First Anniversary First Answer First Comment
    If the pop"select network location" appear, it's probably connecting to different routers or connect new network.
    you can check this discussion
    https://superuser.com/questions/236996/why-does-set-network-location-pop-up-every-time-i-connect-with-vzaccess-manage
  • IkkI_Magna
    IkkI_Magna Posts: 14  Freshman Member
    First Anniversary First Comment
    There is one router only.

    Client->switch-> USG110 router->internet.

    There is no other router in network.
  • Jeremylin
    Jeremylin Posts: 166  Master Member
    First Anniversary First Answer First Comment
    On my environment, I did not see this popup page during connected with USG.
    you may also tick "Treat all future networks that I connect to as public, and dont as me again" to avoid the popup page.
     

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）