Troubleshooting Tips
To find suggestions to solve problems you might encounter with NCC and Nebula Devices, go to
Troubleshooting for more information.
Firewall Information
Click Help > Support tools > Firewall information to view information required for firewall rules to allow management traffic between NCC and Nebula Devices on your sites. Click Export to export the information to a CSV or XML file.
The
Firewall Information page for a Security Gateway will show its FQDN (fully qualified domain name) and service ports. The FQDN is the complete domain name of Nebula Cloud Management on the Internet.
The following table shows the sample information required for firewall rules at the time of writing.
Sample Information Required for Firewall Rules
service | fqdn | ip address | port | protocol |
---|
Nebula Cloud Management (NETCONF) | d.nebula.zyxel.com | 34.247.112.130, 52.210.12.1, 52.48.115.44, 54.73.103.137, 63.32.141.172, 63.35.107.114 | 4335 / 6667 | TCP |
Nebula Cloud Management | s.nebula.zyxel.com | Dynamic | 443 | TCP |
Network Time Protocol | *.pool.ntp.org | Dynamic | 123 | UDP |
Nebula Cloud Management (Zero Touch Provisioning) | d-a.nebula.zyxel.com | Dynamic | 443 | TCP |
Nebula Cloud Management (Configure related service for USG FLEX series) | d-cp.nebula.zyxel.com | 34.254.181.105, 52.212.114.133 | 4335 | TCP |
Nebula Cloud Management (Monitor related service for USG FLEX series) | d-mp.nebula.zyxel.com | 52.18.204.70, 54.220.154.85, 63.34.155.16 | 443 | TCP |
Data Policy
Click Help > Support tools > Data Policy to view and download NCC GDPR data policy, privacy policy, and terms of use.