Rounding out the 2 plus feature set are its Logging and other features. Logging is better than you normally get, with informative entries, source and destination IP addresses and notes. Port scans and other activity that are deemed attacks are entered in red with an "Attack" note. The log viewer can sort entries in ascending or descending time/date order with a click, as well as limit display to specific log categories.
Logs can be emailed immediate, on a schedule, manually refreshed and cleared. Figure 22 shows that the log mailer supports SMTP authentication, but doesn't have a test button to let you easily check whether the 2 plus' emailer is going to work with your ISP's SMTP server.
Figure 22: Log Settings screen (click image to enlarge)
Logging to a syslog server is supported and Zyxel throws in a copy of its Vantage Report application (Windows only) so that you can slice and dice logs to your heart's content. The array of checkboxes at the bottom of Figure 21 provides control over what appears in the log and what is immediately sent in an email alert.
Not shown in the screenshot are the Log Consolidation controls that include an Active checkbox (checked by default) and period (1 to 600 seconds, default 10). According to the online help, this feature "merges logs with identical messages into one log". But I think that what really happens is that repeated log entries are merged, since I found some port scan attack entries that said "ports scan UDP (Repeated: 2)" in my log.
The Maintenance menu bats cleanup and holds the admin idle timeout value (0 to disable), password, date/time setup (including NTP server and time zone settings), firmware upload, configuration backup / restore / reset to factory defaults and restart. But oddly buried in the Device Mode tab is the ability to change the 2 Plus from its default router mode to being a bridge. This allows you to use its firewall and content management features between network segments without having to deal with a NAT router. The bridge mode supports 802.1w Rapid Spanning Tree Protocol to break network loops and prevent broadcast storms.