UniFi OS - Enterprise Fortress Gateway 4.0.16

https://community.ui.com/releases/UniFi…ff-89eeb8e75568

Overview

This is the initial release for the Enterprise Fortress Gateway supporting both NeXT AI Inspection and Enhanced Threat Updates.

NeXT AI Inspection

NeXT AI Inspection utilizes SSL/TLS decryption to intercept encrypted traffic and analyze its contents for security monitoring or filtering purposes.

• Analyze encrypted traffic
• View, track and block queries typed by clients into search engines and ChatGPT
• See the NeXT AI Inspection Help Center article for more information.

Enhanced Threat Updates

Per-site subscription available for Intrusion Prevention (IDS/IPS) on the EFG.

• Greatly extend the size of UniFi's threat signature database.
• Available in the United States and Canada. International coming soon.
• See the Intrusion Prevention Help Center article for more information.

Bundled application

• UniFi Network 8.3.32

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.0.18

https://community.ui.com/releases/UniFi…e4-7a0e064f661c

Overview

UniFi OS 4.0.18 includes the improvements and bugfixes listed below.

Bundled application

• UniFi Network 8.3.32

Improvements

• Improved Remote Access connection resiliency.
• Improved username validation when creating a UI Account through the setup wizard.
• Improved compatibility with some 3rd party SFP modules.
• Improved device stability.
• Removed GitHub from Microsoft exclusion in NeXT AI Inspection.

Bugfixes

• Fixed an issue where the DHCP auto-scale didn't work in rare cases.
• Fixed gateway configuration issues in rare cases.
• Fixed an issue where the Primary Gateway could get stuck in the Getting Ready state.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.0.20

https://community.ui.com/releases/UniFi…ba-183688a5a7d7

Overview

UniFi OS 4.0.20 includes the improvements and bugfixes listed below.

Bundled application

• UniFi Network 8.3.32

Improvements

• Improved the DHCP Server response time on large setups.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.0.21

https://community.ui.com/releases/UniFi…f3-14b9e7576c04

Overview

UniFi OS 4.0.21 includes the improvement listed below.

Bundled application

• UniFi Network 8.3.32

Improvements

• Improved system stability.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.1.9

https://community.ui.com/releases/UniFi…c3-0d311d34251d

Overview

UniFi OS 4.1.9 adds support for Directory Integration, Custom Certificates, BGP, NetFlow, and Packet Captures.

Directory Integration

Allows Identity users to be synced from third-party directories such as Microsoft Entra and LDAP.

• Integrate with Microsoft Entra, Active Directory, Google Secure LDAP, LDAP, or JumpCloud LDAP.
• See the Integration Help Center article for more information.

Custom Certificates

Upload and use a custom TLS certificate for UniFi OS web management access.

Custom certificate support for the Hotspot Portal is planned for a future release.

Border Gateway Protocol

Sets up BGP neighbors with other gateways and distributes routing information.

• Configure BGP by uploading a configuration text file in FRR format.
• See the BGP Help Center article for more information.

Bundled application

• UniFi Network 8.5.6

Improvements

• Added support for NetFlow. Learn more
• Added support for Packet Captures. Learn more
• Added support for sending Intrusion Prevention, Ad Blocking, and NeXT AI Flows to Activity Logging SIEM servers (Syslog).
• Added support for sending Country Restriction events to Activity Logging SIEM servers (Syslog).
• Support for Network Application System Logs will be available in a future Network Application release.
• Added System Log events for unexpected shutdowns.
• Added disk warnings to the Updates tab in Control Plane.
• Added support for custom SMTP servers for notifications.
• Added support for IPv6 Traffic Identification.
• Added support for IPv6 DNS shield.
• Added support for showing IP addresses for Admin Changes in System Logs for remote connections.
• Improved WAN resiliency when changing from DHCP to PPPoE.
• Improved the device's system description for SNMP.
• Improved the setup user experience.
• Improved Shadow Mode resiliency and setup experience.
• Improved efficiency for configuration changes.
• Improved Remote Access and backup restore resiliency.
• Improved setup resiliency when NTP servers are unavailable.
• Improved system stability.
• Improved DNS Shield resiliency.
• Improved WAN resiliency when RAs are not available in the DHCPv6 environment.
• Improved Shadow Mode.
• Updated Traffic Identification signatures.
• Renamed UniFi OS Settings to UniFi OS Control Plane, previously only visible via Site Manager.

Bugfixes

• Fixed incorrect packet loss reporting when WAN2 is not used.
• Fixed Hotspot Portal redirection issues.
• Fixed NeXT AI Inspection issues with GoDaddy.
• Fixed log spam due to multipath routes.
• Fixed the inability to download backups when Remote Access is disabled.
• Fixed an issue where users with UniFi OS permissions couldn't see System Logs.
• Fixed a DNS server issue that could result in delayed DHCP responses.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.1.13

https://community.ui.com/releases/UniFi…e2-09157c47242d

Overview

UniFi OS 4.1.13 adds support for Directory Integration, Custom Certificates, BGP, NetFlow, and Packet Captures.

Directory Integration

Allows Identity users to be synced from third-party directories such as Microsoft Entra and LDAP.

• Integrate with Microsoft Entra, Active Directory, Google Secure LDAP, LDAP, or JumpCloud LDAP.
• See the Integration Help Center article for more information.

Custom Certificates

Upload and use a custom TLS certificate for UniFi OS web management access.

Custom certificate support for the Hotspot Portal is planned for a future release.

Border Gateway Protocol

Sets up BGP neighbors with other gateways and distributes routing information.

• Configure BGP by uploading a configuration text file in FRR format.
• See the BGP Help Center article for more information.

Bundled application

• UniFi Network 8.5.6

Improvements

• Added support for NetFlow. Learn more
• Added support for Packet Captures. Learn more
• Added support for sending Intrusion Prevention, Ad Blocking, and NeXT AI Flows to Activity Logging SIEM servers (Syslog).
• Added support for sending Country Restriction events to Activity Logging SIEM servers (Syslog).
• Support for Network Application System Logs will be available in a future Network Application release.
• Added System Log events for unexpected shutdowns.
• Added disk warnings to the Updates tab in Control Plane.
• Added support for custom SMTP servers for notifications.
• Added support for IPv6 Traffic Identification.
• Added support for IPv6 DNS shield.
• Added support for showing IP addresses for Admin Changes in System Logs for remote connections.
• Improved WAN resiliency when changing from DHCP to PPPoE.
• Improved the device's system description for SNMP.
• Improved the setup user experience.
• Improved Shadow Mode resiliency and setup experience.
• Improved efficiency for configuration changes.
• Improved Remote Access and backup restore resiliency.
• Improved setup resiliency when NTP servers are unavailable.
• Improved system stability.
• Improved DNS Shield resiliency.
• Improved WAN resiliency when RAs are not available in the DHCPv6 environment.
• Improved Shadow Mode.
• Updated Traffic Identification signatures.
• Renamed UniFi OS Settings to UniFi OS Control Plane, previously only visible via Site Manager.

Bugfixes

• Fixed incorrect packet loss reporting when WAN2 is not used.
• Fixed Hotspot Portal redirection issues.
• Fixed NeXT AI Inspection issues with GoDaddy.
• Fixed log spam due to multipath routes.
• Fixed the inability to download backups when Remote Access is disabled.
• Fixed an issue where users with UniFi OS permissions couldn't see System Logs.
• Fixed a DNS server issue that could result in delayed DHCP responses.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.2.12

https://community.ui.com/releases/UniFi-OS-Enterprise-Fortress-Gateway-4-2-12/8f82b262-7873-4c8f-8461-8b5895817147

Overview

UniFi OS 4.2.12 adds support for Advanced mDNS options and includes the improvements and fixes listed below.

Bundled application

• UniFi Network 9.0.114

Improvements

• Added the ability to generate specific support files.
• Added support for configuring different release channels per application.
• Added support for Hotspot Portal Certificates.
• Required Network Application 9.1 or newer.
• Added advanced options for mDNS.
• Required Network Application 9.1 or newer.
• Added support for SIEM Server integration.
• Improved WireGuard VPN stability.
• Improved BGP resiliency.
• Improved SFP speed detection.
• Improved the backup and restore user experience.
• Improved System Logs.
• Improved static WAN failover resiliency.
• Improved DHCPv6 WAN stability.
• Improved DS-Lite compatibility.
• Improved the Shadow Mode resiliency and user experience.
• Improved device stability.
• Improved NeXT AI.
• Improved Traffic Flows.

Bugfixes

• Fixed rare gateway configuration errors.
• Fixed an issue where Policy-Based Routing could stop working in rare cases.
• Fixed an issue where you could receive false-positive DHCP exhaustion alerts.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.3.6

https://community.ui.com/releases/UniFi-OS-Enterprise-Fortress-Gateway-4-3-6/c4c8cf14-6398-4686-9ba4-acbfc2a2c2f8

Overview

UniFi OS 4.3.6 includes Alarm Manager for Network, Cloudflare Content Filtering and improvements and bugfixes listed below.

Bundled application

• UniFi Network 9.2.87

Improvements

• Added support for CNAME DNS Records.
• Requires UniFi Network Application 9.3 or newer.
• Added support for Alarm Manager.
• Requires UniFi Network Application 9.3 or newer.
• Added support for Enhanced Content Filtering with CyberSecure.
• Requires UniFi Network Application 9.3 or newer.
• Requires an active CyberSecure subscription for granular content categories powered by Cloudflare.
• Added the ability to create a new user account while performing the ownership transfer.
• Improved the Analytics and Data Sharing user experience.
• Added the ability to completely turn off data sharing.
• Improved Flows data accuracy.
• Improved Hostname resolution.
• Improved Incoming Interface listing for Threats.
• Improved the Shadow Console resiliency.
• Improved DDNS resiliency when a non-primary WAN is used.
• Improved the Admins and Users management user experience.
• Improved Remote Access connection resiliency.
• Improved backup and restore resiliency, including better feedback when a restore fails.
• Improved storage health reporting.
• Improved port LED behavior for Shadow Mode.
• Improved Link Aggregation resiliency for ECS MC-LAG configurations.
• Updated Traffic Identification signatures.

Bugfixes

• Fixed an issue where the Release channel could change unexpectedly.
• Fixed an issue where transfer ownership could fail in rare cases.
• Fixed an issue where local users didn't receive email notifications using a custom SMTP server.
• Fixed an issue where you couldn't configure SNMP Location and Contact separately; both were required.
• Fixed an issue where users would be required to re-login every hour locally.
• Fixed an issue where the "Plug in Internet Cable" could be shown in rare cases.
• Fixed routing issues when the same subnets are configured on multiple IPsec VPNs.

Download links

Enterprise Fortress Gateway

UniFi OS - Enterprise Fortress Gateway 4.4.6

https://community.ui.com/releases/UniFi-OS-Enterprise-Fortress-Gateway-4-4-6/580be870-86f7-4d0f-a639-957a9212f40d

Overview

UniFi OS 4.4.6 includes the improvements and bugfixes listed below.

Bundled application

• UniFi Network 9.4.19

Improvements

• Added a Block Page for Content Filtering and Ad-Blocking.
• Requires UniFi Network 9.4.11 or newer.
• Added IPv6 support for the Direct Connect feature.
• Improved DNS monitoring resiliency for WAN SLA.
• Improved single TCP connection throughput.
• Improved the Intrusion Prevention service stability under high load.
• Improved Alarm Manager.
• Improved IPsec VPN connection stability.
• Improved Remote Access connection resiliency.
• Improved storage mounting resiliency.
• Improved the setup experience for Shadow Mode.
• Improved the Shadow Mode failover time.
• Prevent transferring ownership while the device is hosting Identity Hub.

Bugfixes

• Fixed an issue where you could experience excessive logging related to MAC address scanning.
• Fixed the Traffic Activity display for clients.
• Fixed a gateway configuration issue when applying IPv6 NAT.
• Fixed false-positive alerts claiming that the DHCP pool is running out of addresses.
• Fixed an issue where Static Routes were missing after removing Shadow consoles.
• Fixed an issue where local account users did not receive email notifications.
• Fixed an issue where static routes were missing after switching the WAN type from dynamic to static.
• Fixed an issue where DDNS didn't function correctly when using dual PPPoE WAN connections.
• Fixed an issue where content filtering didn't apply to specific traffic flows.
• Fixed an issue where changing port settings could result in a gateway configuration error.
• Fixed an issue with WireGuard VPN server when using non-primary WAN interfaces.
• Fixed an issue where RADIUS authentication could fail when using anonymous identity.
• Fixed an issue where the FEC configuration on the SFP28 ports didn't take effect.

Download links

Enterprise Fortress Gateway