Troubleshooting Tips
To find suggestions to solve problems you might encounter with NCC and Nebula Devices, go to Troubleshooting for more information.
Firewall Information
Click Help > Support tools > Firewall information to view information required for firewall rules to allow management traffic between NCC and Nebula Devices on your sites. Click Export to export the information to a CSV or XML file.
*The Firewall Information page for a Security Gateway will show its FQDN (fully qualified domain name) and service ports. The FQDN is the complete domain name of Nebula Cloud Management on the Internet.
The following table shows the sample information required for firewall rules at the time of writing.
Sample Information Required for Firewall Rules 
service
fqdn
ip address
port
protocol
Nebula Cloud Management (NETCONF)
d.nebula.zyxel.com
34.247.112.130, 52.210.12.1, 52.48.115.44, 54.73.103.137, 63.32.141.172, 63.35.107.114
4335 / 6667
TCP
Nebula Cloud Management
s.nebula.zyxel.com
Dynamic
443
TCP
Network Time Protocol
*.pool.ntp.org
Dynamic
123
UDP
Nebula Cloud Management (Zero Touch Provisioning)
d-a.nebula.zyxel.com
Dynamic
443
TCP
Nebula Cloud Management (Configure related service for USG FLEX series)
d-cp.nebula.zyxel.com
34.254.181.105, 52.212.114.133
4335
TCP
Nebula Cloud Management (Monitor related service for USG FLEX series)
d-mp.nebula.zyxel.com
52.18.204.70, 54.220.154.85, 63.34.155.16
443
TCP
Data Policy
Click Help > Support tools > Data Policy to view and download NCC GDPR data policy, privacy policy, and terms of use.
Help > Support tools > Data Policy