USG/ZyWALL ZLD

Transcription

1 USG/ZyWALL ZLD

2 Agenda 01 UTM Enhancement Device activation flow License grace period Buy license link 03 Could Helper Enhancement Option to auto-update with setting schedule 02 Firmware Update Enhancement Firmware update failover Automatic firmware update from USB storage 2

3 Agenda 04 Geo IP Enhancement Auto-check and auto-update 05 Other Enhancements Hotspot management for USG110/210 and ZyWALL MyZyxel Enhancements Flexible Reseller Service Model Firmware Download Advisor 3

4 Current ZW/USG Portfolio by Range Entry Series Performance Series Advanced Series Extreme Series USG20W USG20 USG60W USG60 USG40W USG40 ZW/USG310 USG210 ZW/USG110 USG2200 USG1900 ZW/USG1100 Small Business Small / Medium Business Medium / Large Business Large Business

5 Ransomware IDP

6 Ransomware CF

7 Ransomware AV

8 Cloud Network SecuManager

9 Cloud Network Center

10 UTM Enhancement 10

11 UTM Enhancement Device activation flow to close contact with our customers License grace period to provide better support Buy license link to encourage license renewal 11

12 Device Activation Flow with Installation Setup Wizard ZLD 4.20 or earlier ZLD 4.25 Refine Register Device &Activate Service steps 12

13 New Device with ZLD 4.25 Users have to finish registration and security service activation* with Installation Setup Wizard before entering dashboard Click Next to continue *: For non-bundle device, new model can skip service activation 13

14 New Bundle Device with ZLD 4.25 Users have to finish registration and security service activation with Installation Setup Wizard before entering dashboard 14

15 New Non-Bundle Device with ZLD 4.25 Users have to finish registration with Installation Setup Wizard before entering dashboard 15

16 Existing Device with Upgraded to ZLD 4.25 Users can skip Register Device and Activate Service to enter dashboard If skip: Installation Setup Wizard goes back the old version with 4 steps Click Yes to confirm Click to skip Registration & Activation 16

17 Existing Device with Upgraded to ZLD 4.25 Users can skip Register Device and Activate Service to enter dashboard If skip: Installation Setup Wizard goes back the old version with 4 steps 17

18 Demo with New device (1/8) Welcome page Click Next to continue 18

19 Demo with New device (2/8) WAN Setting Click Next to continue 19

20 Demo with New device (3/8) WAN Setting Click Next to continue 20

21 Demo with New device (4/8) WAN Settings Click Next to continue 21

22 Demo with New device (5/8) Date and Time Settings Click Next to continue 22

23 Demo with New device (6/8) Register Device Log on to MyZyxel.com to register device and activate services Click Next to continue 23

24 Demo with New device (7/8) Activate Service Click Next to continue 24

25 Demo with New device (8/8) Wireless Settings Click to finish 25

26 Recap Device Activation Flow Quick registration via installation setup wizard Instant license activation right after registration Mandatory flow for new devices with ZLD

27 License Grace Period User-friendly to give users 15 days more to settle license purchase after standard time-based license is expired Notify users with expiration notice s Every 2 days in 1st week Every day notification in 2nd week 366 days to expire Expired license 15 days Grace period 10 days 366 days to expire New license Feb 10 th,2016 Feb 10 th,2017 Feb th,2017 Feb 19 th,

28 Grace Period Status-Web GUI Dashboard Configuration > Licensing > Registration > Service 28

29 Service Page 1. Standard time-based license expired(grace period/grace period expiration) 2. Trial time-based license validates or expired 3. Quantity based license has not reached to max. value 4. Not licensed 29

30 Scenario 1 Click Buy License link 2 Redirect to service page* Buy license *Note: Redirect to dedicated pages by device owner countries US service page Switzerland service page Others countries : global service page 30

31 Firmware Update Enhancement 02 31

32 Scenario A customer upgrades firmware from standby partition but the device fails to apply the startup configuration file Startup-config.conf New firmware fails to apply Lastgood.conf System-default.conf Upgrade firmware from Standby partition 32

33 Scenario Customer upgrades firmware from standby partition but the device fails to apply the startup configuration file Startup-config.conf Lastgood.conf System-default.conf Try to apply Upgrade firmware from Standby partition 33

34 Firmware Update Failover Enhancement ZyWALL/USG tries to remain the current configuration Do not change the customer s network settings Startup-config.conf New firmware fails to apply Lastgood.conf System-default.conf USG/ZyWALL reboots to previous firmware USG/ZyWALL: Writes the error log Applies the startup configuration file* Upgrade firmware from Standby partition *The startup configuration is compatible with previous firmware in this scenario 34

35 Firmware Update Failed-Actions ZyWALL/USG shows firmware upgrade failure Web GUI Device log Console messages ZyWALL/USG saves current startup-config.conf to bad-startconfig.conf 35

36 Web GUI Firmware upgrade failure status on Dashboard 36

37 Device Log Monitor > Log > View Log 37

38 Console Error Message...ZyWALL system is configured successfully with startup-config.conf Previous firmware upgrade failed - ERROR: ap-group-profile default lan-provision model wac6103d- i lan1 activate pvid 1 Got LINK_CHANGE Port [1] Copper is up --> Group [1] is up Welcome to USG110 Username: 38

39 Bad Configuration File Maintenance > File Manager >Configuration File User can download the bad startup-config for supports to clarify the problem 39

40 Firmware Update Enhancement Firmware Update Failover Automatic USB FW Upgrade 40

41 Automatic USB FW Upgrade Why need to enhance this? Automatic USB FW upgrade procedures Automatic USB FW upgrade notices USB FW upgrade logs USB FW upgrade limitations CLI commands 41

42 Why Needs to Enhance This? GUI access is not required to eliminate FW upgrade effort Benefit for multiple devices upgrades Check Model ID and FW Version Partition 1 Partition 2 Running Standby 42

43 Why Needs to Enhance This? GUI access is not required to eliminate FW upgrade effort Benefit for multiple devices upgrade Partition 1 Partition 2 Running Standby Automatically upgrades then reboot 43

44 Automatic USB FW Upgrade Procedures 1 Put firmware on USB 2 Plug the USB into device 3 Device checks running partition Model ID FW version 4 Device upgrade standby partition then reboot Directory : \[ProductName_dir]\firmware Copy to RAM Write the logs Twinkle SYS LED Router> firmware verifying... Product model id is compatible!! This product's model id is E110 The kernel image supports the following product model id: E110 firmware updating... Please Wait about 5 minutes!! Do not poweroff or reset, system will reboot automatically after finished updating. Blinking SYS LED Status Steady Steady Steady 44

45 USB FW Upgrade Logs Product model ID is compatible and the firmware version is different with the running firmware Web GUI and View Log page Console message Router> firmware verifying... Product model id is compatible!! This product's model id is E110 The kernel image supports the following product model id: E110 firmware updating... Please Wait about 5 minutes!! Do not poweroff or reset, system will reboot automatically after finished updating. 45

46 USB FW Upgrade Logs Product model ID is not compatible View Log page Console message Router> firmware verifying... Product model id is not compatible!! This product's model id is E110 The ZLD-current image supports the following product model id : E10D USB update-firmware fail: File damaged. file name: 425AAKY0b1s2.bin 46

47 USB FW Upgrade Logs Product model ID is compatible but same firmware version View Log page Console message Router> firmware verifying... USB update-firmware fail: Same firmware version. file name: 425AAPI0b1s2.bin 47

48 USB FW Upgrade Limitations Device only checks the firmware under the specific folder: \[ProductName_dir]\firmware Not support multiple firmware files in the folder If there are multiple firmware files in the folder, device only checks the first one in order 48

49 CLI Commands Show enable/disable status of the function Router# show usb-storage update-firmware status Router> show usb-storage update-firmware status USB Storge update-firmware status: enable Router> Enable the function Router(config)# no usb-storage update-firmware disable Disable the function Router(config)# usb-storage update-firmware disable 49

50 Could Helper Enhancement 03 50

51 Why Needs To Enhance This? ZLD 4.20: upgrade firmware manually local file cloud service ZLD 4.25: auto upgrade firmware from the Cloud by schedules schedule cloud service 51

52 Firmware Auto Update Introduction Firmware Upgrade license required Firmware Auto Update feature is optional User can turn on/off the feature schedule running partition 1 Check whether the Cloud firmware version is newer than running firmware version Yes standby partition 2 Upgrade firmware to standby partition* * Will NOT upgrade if the Cloud firmware version is the same with backup firmware 52

53 GUI of Firmware Auto Update Firmware Management page Maintenance > File Manager > Firmware Management 53

54 Geo IP Enhancement 04 54

55 Geo IP Auto-Check & Update Enhancement In ZLD V4.25, Geo IP supports auto-check and auto-update features Automatically check for the latest database every 24 hours Auto Update feature is optional Auto Update feature is disabled by default Content Filter license required 55

56 Web GUI of Geo IP Configuration > Object > Address/Geo IP > Geo IP 56

57 Log of Geo IP Auto-Check & Update Monitor > Log > View Log 57

58 Other Enhancements 07 58

59 Hotspot Management Service Hotspot Management Service now supports for USG110/210 and ZyWALL 110 in ZLD 4.25 ZLD 4.25 USG20(W) -VPN USG40(W) USG60(W) USG110 USG210 USG310 USG1100 USG1900 ZyWALL110 ZyWALL310 ZyWALL1100 Hotspot Management No No No Yes* Yes* Yes Yes Yes Yes* Yes Yes Concurrent devices (Default/Max) N/A N/A N/A 200 / / / / / / / /1500 *: With firmware ZLD 4.25 or later 59

60 MyZyxel Enhancement 60

61 Agenda 01 Flexible Reseller Service Model 02 Firmware Download Advisor 61

62 Flexible Reseller Service Model 01 62

63 Flexible Reseller Service Model Improve reseller value Allow a reseller to request agency permission by End-customer approve the reseller s request s to allow the agency permission New Flow End-Customer 1. Request of Authorization Reseller 2. Confirm the request 63

64 Agency Permission Management-Reseller (1/2) Resellers request the permission from customers to authorize them to be their resellers Agency Permission Management > Request Agency Permission 1 Fill the customer s address and submit 2 Notification from the reseller to the customer 64

65 Agency Permission Management-Reseller (2/2) Once the customer confirms the notification from the reseller, the reseller will be granted to manage the customer s device 65

66 Agency Permission Management-Customer (1/2) Once receiving the notification from the reseller, a permission form will be displayed Adjust permission for my account and reseller Specify the device 66

67 Agency Permission Management-Customer (2/2) Submit the permission to have the detailed page displayed Click to edit the permission for my account and reseller 67

68 Firmware Download Advisor 02 68

69 Cloud Helper Firmware Upgrade Path Scenario : Click Download FW from global website MZC Login Page Device Management 69

70 Firmware Version Based Advice Device Management 1 Click to get the latest FWs list Pop-up window Prerequisite version Current version Latest version 2 Click to specific FW to download 70

71 UAG ZLD

72 Agenda 01 APC 1.97 Enhancement 02 Social Login Service Facebook Wi-Fi 72

73 APC 1.97 Enhancement 01 73

74 AP Controller Version 1.97 UAG series support AP Controller (APC) version 1.97 since ZLD 4.18 APC 1.97 support 2 additional AP models: NWA5123-AC & WAC6103D-I Series NWA5120 Series NWA5000 Series NWA3000-N Series WAC6500 Series Unified Access Point Managed Access Point Unified Pro Access Point Unified Pro Access Point Model NWA5121-NI NWA5121-N NWA5123-NI NWA5301-NJ NWA5123-AC* NWA5160N NWA5560-N NWA5550-N NWA3160-N NWA3560-N NWA3550-N WAC6503D-S WAC6502D-S WAC6502D-E WAC6553D-E WAC6103D-I* *: With firmware ZLD 4.18 or later 74

75 Social Login Service 02 75

76 Social Login Service Why needs Social login Service? Benefits of 3rd Party Social Login 76

77 Why Needs Social Login Service? Guest Wi-Fi marketing and analytics Guest Wi-Fi software Purple Wifi Socifi Facebook Wi-Fi 77

78 Facebook Wi-Fi Device registration is required Redirect to Facebook page 2 Check in to continue browsing 1 Access network via HTTP 78

79 Facebook Wi-Fi Configuration (1/3) Configuration > Web Authentication > Facebook Wi-Fi Facebook Wi-Fi page Click to enable Facebook Wi-Fi Click to bind your Facebook page Reset Facebook page binding 79

80 Facebook Wi-Fi Configuration (2/3) Facebook Wi-Fi Configuration page Select the Facebook Page associated with your business's location The customer will be able to access your Wi-Fi by clicking on Skip check-in link or entering a code Length of time your customer will have Wi-Fi for after they checked in Your own Terms of Service 80

81 Facebook Page Facebook Wi-Fi support local business or place pages 81

82 Bypass Mode You can choose whether customers can use a Wi-Fi code that you give to them or click on a link to skip checking in Click to skip check-in Click to use Wi-Fi code Facebook check-in page 82

83 Terms of Service You have the option to add your own Terms of Service content. Your own Terms of Service Facebook check-in page 83

84 Facebook Wi-Fi Configuration (3/3) Configuration > Web Authentication > General > Web Authentication Policy Summary Edit authentication policy 84

85 Logs of Facebook Wi-Fi Monitor > Log > View Log 85

86 Facebook Wi-Fi Notices Facebook Wi-Fi checks http protocol only Facebook Wi-Fi does not support multiple Facebook pages 86

87 Hands-on Goal Using Facebook Wi-Fi to advertise your Facebook page Device UAG4100 x1, Laptop x1 Firmware ZLD 4.18 Redirect to Facebook page Access network via HTTP 87

88 Configuration Steps (1/4) Step 1 : Create your own Facebook page 88

89 Configuration Steps (2/4) Step 2 : Configure Facebook Wi-Fi on UAG4100 Configuration > Web Authentication > Facebook Wi-Fi 89

90 Configuration Steps (3/4) Step 3 : Configure SSID Profile on UAG4100 Configuration > Object > AP Profile > SSID > SSID List 90

91 Configuration Steps (4/4) Step 4 : Configure Authentication Policy on UAG4100 Configuration > Web Authentication > General > Web Authentication Policy Summary 91

92 Results Join Zyxel_Free_Wifi and access website 1 Access Zyxel.com website 2 Click to Check-in 3 Click to Continue Browsing 92

93 93