Licensing
Licensing
Use the Licensing screens to register your Zyxel Device and manage its service subscriptions.
• Use the Licenses screen to refresh Zyxel Device registration. Go to nebula.zyxel.com to register your Zyxel Device and activate a service, such as content filtering.
• Use the Signature Update screen to download the latest signatures for your licensed services.
Please note that you cannot use the security services and upgrade firmware if your Zyxel Device is not registered at NCC or the services do not have a license. Your Zyxel Device and network will be exposed to threats and attacks. We strongly recommend you to register your Zyxel Device and purchase a license at NCC to better protect your Zyxel Device and network.
What you Need to Know
This section introduces the topics covered in this chapter.
Subscription Services Available
See Licensing > Signature Update for the subscription services that your Zyxel Device supports. You can extend a service at NCC > Organization-wide > License & Inventory.
Signature Update
• You need a valid service registration to update the Application Patrol signatures, IPS signatures and IP Reputation signatures.
• Schedule signature updates for a day and time when your network is least busy to minimize disruption to your network.
The Zyxel Device does not have to reboot when you upload new signatures.Features Available Without a License
You can use the following Zyxel Device features without a license:
monitor | configuration | maintenance |
|---|---|---|
System Statistics | Network | Maintenance |
Network Status | VPN | |
VPN Status | Security Policy | |
Object | ||
User & Authentication | ||
System | ||
Log & Report (except SecuReporter) |
The Licenses Screen
Use this screen to display the status of your service registrations and upgrade licenses. Go to NCC to register your Zyxel Device or purchase a license.
The Licenses screen may show different services depending on the licenses you purchase or activate.
The following table describes the labels in this screen.
Label | Description |
|---|---|
Device Registration Status | This field display the Zyxel Device registration status on NCC. • Registered: Your Zyxel Device has successfully registered at NCC. • Not Registered: Your Zyxel Device is not registered at NCC. Make sure you’re connected to the Internet. Wait a few minutes then click Refresh to update the registration status. |
Refresh | Click this and wait for a few moments for the license and device registration status to update. The license and device registration status are updated automatically once every day. |
Purchase License | Click Purchase License to go to Marketplace to renew Zyxel Device licenses. |
Licenses Information | |
Service | This lists the name of services or service modules that are available on the Zyxel Device. |
Anti-Malware | This is a license for cloud database signatures to detect virus patterns in files. |
Application Patrol | This is a license to use signatures to manage the use of various applications on the network. |
Device Insight | This is a license to detect and manage client devices in the Zyxel Device local network and DMZ. |
IPS | This is a license to detect Intrusion Prevention System attacks. |
Nebula Professional Pack | This is a license that allows you to use NCC to monitor and manage groups of Zyxel Devices in organizations. See the NCC User’s Guide for more information on Nebula Plus and Professional pack licenses. |
Priority Support | This license displays if the Gold Security Pack license for this Zyxel Device has expired. It allows you to request support for Zyxel Devices in Nebula organizations that do not have a Nebula Professional Pack license (Base-Tier). |
Reputation Filter | This is a license to recognize packets coming from suspect IPv4 addresses. |
Sandboxing | This is a license to provide an isolated environment to scan traffic from the WAN that comes with unknown files or untrusted programs. |
SecuReporter | This is a license that allows SecuReporter to collect and analyze logs from your Zyxel Device in order to identify anomalies, notify you of potential internal or external threats, and report on network usage. SecuReporter retains logs for up to 1 year. |
Security Profile Sync | Security Profile Sync is a NCC template that allows you to share the same security service settings on Firewalls in different sites in the same organization. Security service settings include Content Filter, Application Patrol, URL Threat Filter, Anti-Malware, and Intrusion Detection / Prevention. |
Secure WiFi | The Secure WiFi license allows you to manage more than the default number of APs (8 at the time of writing). Remote AP allows an IPSec VPN tunnel from a supported external AP to the Zyxel Device. |
Web Filtering | This is a license to a database that can block websites by category, such as Gambling. |
Status | This field displays whether a service license is enabled at NCC (Activated) or expired (Expired). It displays the remaining grace period if your license has Expired. It displays Not Licensed if there isn’t a license to be activated for this service. |
Expiration Date | This field displays the date your service license expires or the date the grace period expires if the license has already expired. You can continue to use IPS, Application Patrol, Anti-Malware and Web Filtering during the grace period. After the grace period ends, all of these features are disabled. |
Note | This displays additional information on a license such as the number of supported APs for the Secure WiFi license. |
You will see the following screen if:
• Your Zyxel Device is not registered at NCC.
• You’re logging into the Zyxel Device using an admin account.
Scan the QR code or click Nebula under Note to register your Zyxel Device at NCC. Please note that you need to register your Zyxel Device at NCC to upgrade firmware and use security services.
The Signature Update Screen
The following table describes the labels in this screen.
label | description |
|---|---|
Feature | This field displays the name of the services available on the Zyxel Device. |
Type | This field displays the type of service engine used by the Zyxel Device. |
Current Version | This field displays the signatures version number currently used by the Zyxel Device. This number gets larger as new signatures are added. |
Release Date | This field displays the date and time the set was released. |
Last Sync | This field displays the date and time the Zyxel Device last checked for new signatures. |
Action | Click the Update icon (  )to have the Zyxel Device immediately check for new signatures. If new signatures are found, they are then downloaded to the Zyxel Device.Click the Schedule icon (  ) to have the Zyxel Device automatically check for new signatures regularly at the time and day specified. You should select a time when your network is not busy for minimal interruption. |
Signature Update
Use this screen to view the service update status.
Auto Update
The following table describes the labels in this screen.
label | description |
|---|---|
Auto Update | Enable to have the Zyxel Device automatically check for new signatures regularly at the time and day specified. You should select a time when your network is not busy for minimal interruption. |
Every N Hours | Select this option to have the Zyxel Device check for new signatures every specified (N) hour. |
Daily | Select this option to have the Zyxel Device check for new signatures every day at the specified time. The time format is the 12 hour clock. |
Weekly | Select this option to have the Zyxel Device check for new signatures once a week on the day and at the time specified. |
OK | Click this button to save your changes to the Zyxel Device. |