Firmware Updates Zyxel V5.40 for ATP and USG FLEX Series

In May 2025, Zyxel released firmware version V5.40 for the ATP and USG FLEX product lines. These updates focus on improving system performance, security, and usability. The table below summarises key enhancements for each model.

🔔 Note: The following table offers a general overview. For complete details, please refer to the corresponding Release Notes linked in the last column.

The firmware files themselves can be downloaded from the Zyxel Download Library on each product’s page. Visit the Zyxel Download Center, select your device model, and navigate to the firmware section to access the latest updates.

Zyxel Firmware V5.40 – Key Updates and Enhancements

The latest firmware update for Zyxel's ATP and USG FLEX series, version 5.40, introduces critical enhancements and new features designed to improve security, user experience, and functionality.

Security Best Practices

  • New guided, step-by-step setup process consolidates security reminders.
  • Integrated single-flow reminders for configuration completeness.
  • Specific prompts include Two-Factor Authentication (2FA), regular admin password updates, policy control activation, web interface security checks, and license expiration warnings.

Two-Factor Authentication (2FA)

  • Mandatory for admin-type accounts.
  • Setup via Google Authenticator directly through the guided interface.

Password Change Requirement

  • Password change prompted for admin accounts unchanged over 60 days.
  • Immediate application and verification via interface.

Security Policy Control

  • Detection and activation prompts for policy control if inactive.
  • Quick activation through guided prompts.

Web Interface Security Checks

  • Prompts users to restrict access by IP addresses or geolocation.
  • Immediate implementation of restrictions via guided setup.

Security License Warnings

  • Notifications appear if security licenses expire, directing users to marketplace for renewal.
  • Option to bypass specific reminders marked as "Skipped" with subsequent greyed-out notifications.

Abnormal TCP Traffic Log

  • Improved logging system identifies abnormal TCP/UDP traffic, specifically ports set to zero, indicating possible security threats.
  • By default, logs categorized as Debug to prevent user overload.
  • Enhanced debugging features available for troubleshooting.

Removing Diffie-Hellman Ephemeral (DHE) Key Exchange

  • Removed from SSL VPN, SSH, FTPS, and HTTPS services due to inefficiency and vulnerability concerns.
  • Commands available for SSH, FTPS, and HTTPS to re-add DHE if necessary, while SSL VPN supports modern secure key exchanges only.

WiFi 7 AP Integration

  • Supports new WiFi 7 access points (WBE530, WBE510D, WBE630S).

ZLD Mesh Capability

  • ZyMesh not supported in WiFi 7 APs; notifications and reminders incorporated for clarity.
  • Mesh functionality in WiFi 7 series available exclusively with the new USG FLEX H series firewalls.

APC Operation Mode for WiFi 7 AP

  • Removed Root AP and Repeater AP options from WiFi 7 APs to streamline operations.
  • Alerts on limited mesh functionality displayed for user clarity.

Wireless Health Enhancement

  • Station monitoring interval reduced from 3 minutes to 1 minute to proactively manage poor signal quality by reassigning stations to nearer APs.

These comprehensive updates aim to strengthen network security, improve user interaction, and ensure robust performance across Zyxel's firewall and AP management solutions.

 

Firmware Enhancements Table

Model Firmware Version Key Improvements Release Notes
ATP100 V5.40(ABPS.0)C0 - IPSec & SSL VPN stability- Web filtering updates- GUI and AP controller improvements Link
ATP100W V5.40(ABRW.0)C0 - Wireless performance boost- IDS/IPS improvements- Better session management Link
ATP200 V5.40(ABFW.0)C0 - Authentication enhancements- Updated content filtering- General performance tuning Link
ATP500 V5.40(ABFU.0)C0 - VPN improvements- Better threat detection- UI optimization Link
ATP700 V5.40(ABTJ.0)C0 - System performance boost- Anti-malware engine updates- Traffic management enhancements Link
ATP800 V5.40(ABIQ.0)C0 - Strengthened security features- User management improvements- Enhanced throughput Link
USG FLEX 50 V5.40(ABAQ.0)C0 - VPN stability- Web filtering enhancements- UI refinements Link
USG FLEX 50AX V5.40(ACGB.0)C0 - Wireless & VPN improvements- Content filtering updates- Admin console optimization Link
USG FLEX 100 V5.40(ABUH.0)C0 - System performance boost- Threat protection updates- Better user handling Link
USG FLEX 100W V5.40(ABWC.0)C0 - Improved wireless support- Security enhancement- Management efficiency Link
USG FLEX 100AX V5.40(ACFN.0)C0 - Improved throughput- Better threat detection- Enhanced interface Link
USG FLEX 200 V5.40(ABUI.0)C0 - Security layer updates- Better QoS- Traffic optimization Link
USG FLEX 500 V5.40(ABUJ.0)C0 - Improved VPN management- Enhanced IDS/IPS- Simplified admin interface Link
USG FLEX 700 V5.40(ABWD.0)C0 - Faster processing- Better malware detection- Advanced traffic control Link

Release Notes Links

You can access all release notes from the Zyxel Download Library or directly from the links above.

Let me know if you'd like this exported as a Word, HTML or Markdown file for publishing.

Articles in this section

Was this article helpful?
0 out of 0 found this helpful
Share