USG FLEX H Series [Firewall] - Device Insight

Device Insight can be employed to gather status updates and basic information about clients connected to the Zyxel Device via internal interfaces, IPSec VPN, or Astra clients, regardless of whether the Zyxel Client software is installed. The clients displayed may include those connected through the following means:

• Internal Interfaces
• IPSec VPN
• Astra Clients (with or without VPN Zyxel Client software)

Device Insight collects client information including:

• Hostname
• IP address and MAC address
• Operating system
• Category, such as mobile phones or computers
• Connected interface

Note: To collect clients’ information using Device Insight, the clients must be in the same IP subnet in the LAN/VLAN/DMZ networks behind the Zyxel Device. Information from clients that are in different IP subnets in the LAN/VLAN/DMZ networks might not be collected correctly as traffic must pass through another router or a layer-3 switch to the Zyxel Device.

• Open WebGUI of your Firewall

Go to System > Advanced

• Activate "Device Insight"
• Apply changes 

Once the Device Insight feature is enabled, you can now check the device which are connected to the USG FLEX H Series Firewall. 

Go to WebGUI > Network Status > Device Insight

Here you can take some actions to block/unblock the access of the device(s) to the network or provide feedback about a categorization detected for the device. The actions are explained as follows:

• Edit 

Double-click an entry or select it and click Edit to modify the entry’s settings in the Description field.

• Remove Device

Select an entry and click Remove to remove a client from the table that’s no longer connected to your network. For example, guest A visited your company over a month ago. Guest A used his cellphone to connect to your Zyxel Device networks. His cellphone was identified and shown in the Device Insight table. Guest A has left for over a month and you’re sure he will not return in the near future. You can use the Remove button to remove his device from this table. Guest A’s device will be identified and shown in the table again if he connects to your Zyxel Device networks in the future. Please note that clients that are blocked cannot be removed. Make sure to unblock clients before you remove them.

• Add to "Block List"

Select an entry and click Add to block list to stop the selected client from connecting to the Zyxel Device.

• Remove from "Block List"

Select an entry and click Remove from block list to allow the selected client to connect to the Zyxel Device.

• Feedback

Select an entry and click Feedback to report on a client that is wrongly identified regarding its Category, Operating System or Type

• Status

Online - The connection between the client and the Zyxel Device is up. Offline - The connection between the client and the Zyxel Device is down. Block - The client is blocked from the connection to the Zyxel Device.