Setting up Tailscale on the Zyxel USG Flex 500H gateway
... integrating Tailscale with the Zyxel USG Flex 500H security gateway, analyze the configuration ... both offline and through the Nebula cloud platform. Its hardware ... Tailscale account, but unlike traditional VPN networks, this is enough ... the Zyxel gateway, effectively turning it into a full‑fledged VPN ... network gateway for the entire VPN session, while maintaining routing ... through an additional router or VPN. This is convenient when ... integrating Tailscale with existing corporate VPN solutions. To do this, ...
Zyxel WBE530 review: access point with 3 radio modules
The total bandwidth of the ZyXEL WBE530 is 10.8 GBps, but it is clear that it is achieved in ideal conditions when some customers "do not enter the wire", but exchange traffic via Wi-Fi. The access point has two 2.5 Gbit/s network interfaces, PoE power supply with up to 21 watts and 3 radio modules with 6 streams (2x2 for 2.4 GHz, 2x2 for 5 GHz and 2x2 for 6 GHz bands), channel widths of 160 and 320 MHz for 5 and 6 GHz bands are supported.>
We continue to get acquainted with the ...
Setting up protection against IT attacks in the enterprise using Zyxel equipment
A typical IoT attack looks like this: the device connects to a malicious Internet resource directly or through its own VPN, downloads and installs malicious code on itself, after which it begins to be either part of a large bot farm for attacks on third-party resources and use as a resident proxy, or simply spies on your network, trying to intercept anythat data, pull information from open resources or harm in any other way. It is not difficult to protect your network from possible IoT attacks. ...
Stacking of Zyxel XGS2220 series switches: testing features
Switch stacking technology allows you to combine several physical switches into one virtual switch, combining their switching matrices and simplifying port management from a single stack web interface. One of the most popular functions of the stack is to combine ports from different switches into common lagging groups to get a fault-tolerant network that can withstand the breakdown of N-(N-1) switches. I want to draw attention to the fact that modern Zyxel combines support the connection of up ...
Setting up GeoIP blocking for web services using pfSense, HAProxy and free IPDeny databases
One of the ways to protect a web service may be to restrict access to it by IP, including GeoIP, based on the user's location. We will set up protection without using paid services, without Maxmind, without registration and SMS
Today, many organizations that transfer their services to web platforms are forced to provide an entry point to the Internet for user authentication. Even with 2-factor authentication, a web service accessible via the Internet remains vulnerable to complex attacks, the ...
Let's explore the features of Zyxel XMG1930-30HP, a switch with 2.5G/10G PoE ports and licensed L3 functions
Zyxel reasoned this way: if the L3 functionality is already determined only by the firmware, 99% choose an access switch for the sake of port density, PoE, VLAN, Multicast, and less often for static routing, then here's the base model XMG1930, which is generally L2, but slightly L3. And if your network requires advanced L3 functions, then all this is also there, just buy the appropriate license and get the core-level functionality. You can do this at any time, even when buying a device, even ...
Zyxel XGS2220-30HP - L3 Access switch for modern converged networks
This L3 layer switch has 4 x 10-Gigabit SFP+ slots, 1-Gigabit PoE+ ports for the main fleet of devices, NVR/VoIP optimized interface, support for Nebula cloud service and multi-Gigabit PoE+ ports for Wi-Fi 6 access points. That is, Zyxel has added a maximum of functions to make it the most versatile.
In the Zyxel hierarchy, the XGS2220 series refers to access switches, that is, to the lowest level that serves end devices and access points. We are used to the fact that cheap maintenance-free ...
We explore Zyxel Connect & Protect and answer the main questions: is it possible to do without a security gateway?
... access point to raise the VPN tunnel to the headquarters, ... access point to raise the VPN tunnel to the headquarters, ... includes.
What about blocking VPN?
If the user uses ... restrict access for the entire VPN tunnel. Naturally, CNP will ... the user's work via VPN, too.
Both tunneling protocols ... including OpenVPN and Wireguard) and VPN services such as NordVPN and ... enabled redirect all traffic through Nebula?
No, the access point ... answer, can Zyxel Connect and Protect replace a security gateway in small ...
Will Zyxel Nebula survive on the sovereign internet?
What will happen to your network if the Iron Curtain suddenly falls, and the Global Internet turns into something sovereign and all cross-border channels are blocked? Let's simulate this situation and tell you how to unsign the device from Nebula without Internet access.
We have reviewed the Nebula Control Center management system from Zyxel many times. This is a cloud service that allows you to configure and monitor the company's network stack via the Internet, including setting up Wi-Fi, ...
Testing smart antenna and beamforming at Zyxel Wi-Fi 6 access points
Does beamforming technology replace expensive Smart antennas with switchable diagram or adaptive array? Let's answer this question by testing various Zyxel Wi-Fi 6 access points.
How does Beamforming work in general
Beamforming technology is the most frequently used function in the new generation of intelligent antennas at Wi-Fi access points 6. The essence of Beamforming technology is that an array of antennas is used to “control” or transmit radio signals in a certain direction, and not ...
