In May 2025, Zyxel released firmware version V5.40 for the ATP and USG FLEX product lines. These updates focus on improving system performance, security, and usability. The table below summarises key enhancements for each model.
🔔 Note: The following table offers a general overview. For complete details, please refer to the corresponding Release Notes linked in the last column.
The firmware files themselves can be downloaded from the Zyxel Download Library on each product’s page. Visit the Zyxel Download Center, select your device model, and navigate to the firmware section to access the latest updates.
Zyxel Firmware V5.40 – Key Updates and Enhancements
The latest firmware update for Zyxel's ATP and USG FLEX series, version 5.40, introduces critical enhancements and new features designed to improve security, user experience, and functionality.
Security Best Practices
|
Two-Factor Authentication (2FA)
- Mandatory for admin-type accounts.
- Setup via Google Authenticator directly through the guided interface.
Password Change Requirement
- Password change prompted for admin accounts unchanged over 60 days.
- Immediate application and verification via interface.
Security Policy Control
- Detection and activation prompts for policy control if inactive.
- Quick activation through guided prompts.
Web Interface Security Checks
- Prompts users to restrict access by IP addresses or geolocation.
- Immediate implementation of restrictions via guided setup.
Security License Warnings
- Notifications appear if security licenses expire, directing users to marketplace for renewal.
- Option to bypass specific reminders marked as "Skipped" with subsequent greyed-out notifications.
Abnormal TCP Traffic Log
- Improved logging system identifies abnormal TCP/UDP traffic, specifically ports set to zero, indicating possible security threats.
- By default, logs categorized as Debug to prevent user overload.
- Enhanced debugging features available for troubleshooting.
Removing Diffie-Hellman Ephemeral (DHE) Key Exchange
- Removed from SSL VPN, SSH, FTPS, and HTTPS services due to inefficiency and vulnerability concerns.
- Commands available for SSH, FTPS, and HTTPS to re-add DHE if necessary, while SSL VPN supports modern secure key exchanges only.
WiFi 7 AP Integration
- Supports new WiFi 7 access points (WBE530, WBE510D, WBE630S).
ZLD Mesh Capability
- ZyMesh not supported in WiFi 7 APs; notifications and reminders incorporated for clarity.
- Mesh functionality in WiFi 7 series available exclusively with the new USG FLEX H series firewalls.
APC Operation Mode for WiFi 7 AP
- Removed Root AP and Repeater AP options from WiFi 7 APs to streamline operations.
- Alerts on limited mesh functionality displayed for user clarity.
Wireless Health Enhancement
- Station monitoring interval reduced from 3 minutes to 1 minute to proactively manage poor signal quality by reassigning stations to nearer APs.
These comprehensive updates aim to strengthen network security, improve user interaction, and ensure robust performance across Zyxel's firewall and AP management solutions.
Firmware Enhancements Table
Model | Firmware Version | Key Improvements | Release Notes |
---|---|---|---|
ATP100 | V5.40(ABPS.0)C0 | - IPSec & SSL VPN stability- Web filtering updates- GUI and AP controller improvements | Link |
ATP100W | V5.40(ABRW.0)C0 | - Wireless performance boost- IDS/IPS improvements- Better session management | Link |
ATP200 | V5.40(ABFW.0)C0 | - Authentication enhancements- Updated content filtering- General performance tuning | Link |
ATP500 | V5.40(ABFU.0)C0 | - VPN improvements- Better threat detection- UI optimization | Link |
ATP700 | V5.40(ABTJ.0)C0 | - System performance boost- Anti-malware engine updates- Traffic management enhancements | Link |
ATP800 | V5.40(ABIQ.0)C0 | - Strengthened security features- User management improvements- Enhanced throughput | Link |
USG FLEX 50 | V5.40(ABAQ.0)C0 | - VPN stability- Web filtering enhancements- UI refinements | Link |
USG FLEX 50AX | V5.40(ACGB.0)C0 | - Wireless & VPN improvements- Content filtering updates- Admin console optimization | Link |
USG FLEX 100 | V5.40(ABUH.0)C0 | - System performance boost- Threat protection updates- Better user handling | Link |
USG FLEX 100W | V5.40(ABWC.0)C0 | - Improved wireless support- Security enhancement- Management efficiency | Link |
USG FLEX 100AX | V5.40(ACFN.0)C0 | - Improved throughput- Better threat detection- Enhanced interface | Link |
USG FLEX 200 | V5.40(ABUI.0)C0 | - Security layer updates- Better QoS- Traffic optimization | Link |
USG FLEX 500 | V5.40(ABUJ.0)C0 | - Improved VPN management- Enhanced IDS/IPS- Simplified admin interface | Link |
USG FLEX 700 | V5.40(ABWD.0)C0 | - Faster processing- Better malware detection- Advanced traffic control | Link |
Release Notes Links
You can access all release notes from the Zyxel Download Library or directly from the links above.
Let me know if you'd like this exported as a Word, HTML or Markdown file for publishing.