UniFi OS - Dream Wall 3.2.5
https://community.ui.com/releases/UniFi-OS-Dream-Wall-3-2-5/6af0c69e-31b7-4901-84e7-100607da78de
Overview
Bundled application
Improvements
- Added support for Loop Protection. **
- Added support for DNS Shield.
- Added support hostname support for IPsev Site-to-Site VPNs.
- Added support for the InnerSpace applicaiton, this replaces the MAP option in the Console Settings.
- Added fallbacks to default timezones if unsupported ones are provided during setup.
- Added DNS warnings for consoles that cannot resolve the ui.com domain.
- Added support for ND Proxy, this requires UniFi Network Application version 8.0.1 or newer.
- Subscription-free UniFi Identity (Admins tab -> 'Users') ***
- Added the console's IP address during setup on the touchscreen.
- Added max login attempts for SSH, you'll get blocked for 3 minutes if you entered the credentials incorrectly 5 times.
- Added DNS resiliency for firmware updates.
- Improved RADIUS stability.
- Improved WireGuard VPN Disconnection detection for mobile devices.
- Improved UniFi OS Backup resiliency.
- Improved meshing stability when the consoles are restarting or upgrading.
- Prevent super admins from deleting their own account.
- Consoles will no longer erase external storage during a factory reset.
- Consoles will now always store backups locally before upgrading its firmware, it will auto-recover in case there is file system corruption after a power outage.
- Updated Suricata to 6.0.12.
- Updated the console reset button count down from 10 seconds to 5 seconds.
- Updated integrated Access Point firmware to 6.6.38.
- Reduced network downtime for firmware upgrades.
- Reduced memory usage of Suspicious Acticity/Content Filtering/Ad Blocking.
** Loop Protection disables a port if there is a loop detected, disabled ports need to be manually re-enabled. It does not depend on Spanning Tree and still disables ports when neighboring devices don't support STP.
*** UniFi Identity is the new on-premise UniFi user management system. It is a lightweight, single-site, unlimited-user, subscription free option delivering user access to doors, VPN, WiFi, and EV charging — all with a simple tap on the Identity mobile app for iOS and Android. Please note that previous UID options are now named UniFi Identity Enterprise.
Bugfixes
- Fixed an issue where servers are not reachable for VPN Clients due to incorrect certificates.
- Fixed unable to start RADIUS service in rare cases.
- Fixed an issue where jumbo frames are forwarded on LAN ports when jumbo frames is disabled.
- Fixed an issue where PPPoE MSS Clamping is lost during provisions.
- Fixed Suspicious Acticity not working when enabling Jumbo Frames.
- Fixed inability to see DPI statistics when a setup has a lot of clients.
- Fixed unexpected behavior when there are multiple Traffic Rules blocking the same domain.
- Fixed unable to establish IPsec Site-to-Site VPN in rare cases.
- Fixed incorrect WAN IP on the portal after remapping the WAN ports.
- Fixed an issue with DNS servers for VPN Clients.
- Fixed an issue where the default route wasn't present when having a Static IP on the WAN interface.
- Fixed an issue where IGMP Proxy breaks after PPPoE reconnections.
- Fixed an issue where Traffic Routes didn't take effect for existing connections.
- Fixed an issue where Traffic Routes conflict with Content Filtering.
Download links
