• Added support for Ad Blocking and Content Filtering with Policy-Based Routing.
• Improved system stability.
• Improved compatibility with ISPs that require periodic ARP requests on the WAN.
• Improved DHCP resiliency for clients that do not fully comply with the RFC.
• Improved WireGuard connectivity resiliency.
• Improved SFP connectivity.
• Improved traffic classification accuracy.
• Improved Cloudflare DDNS support and reliability.
• Improved block page generation efficiency.
• Improved Encrypted DNS stability.
• Improved flow reporting accuracy and stability.
• Improved Smart Queue performance on the UXG-Enterprise.
• Improved NeXT AI stability.
• Improved NeXT AI compatibility when SNAT is enabled.
• Improved VRRP resiliency to reduce unnecessary failovers.
• Improved device stability.
• Improved WAN failover resiliency.
• Improved IPS/IDS memory usage.
• Improved DNS caching and logging.
• Updated Suricata to version 8.0.6.
• Requires Network Application 10.5.48 or newer.
• Reduced unnecessary reverse DNS lookups for SLAAC and DHCPv4 clients without hostnames.
• [UXG-Enterprise] Improved SSL Inspection resiliency.

Bugfixes

• Fixed the security issues mentioned in Security Advisory Bulletin 069.
• Fixed an issue where remote mDNS hosts could not be discovered.
• Fixed an issue where IPS/IDS rule updates could fail, resulting in no IPS/IDS rules being applied.
• Fixed an issue where DNS queries could fail over IPv6 when Content Filtering was enabled.
• Fixed an issue where obtaining a WAN IP could fail when receiving a malformed DHCP Option 3.
• Fixed an issue where IPsec traffic could be lost.
• Fixed an issue where QoS configuration was not restored after a PPP interface reconnected.
• Fixed an issue where custom NTP settings could be overridden after a reboot.
• Fixed inaccurate WAN status reporting in multi-WAN deployments.
• Fixed an issue where a LAG could fail after a reboot.
• Fixed WireGuard routing to ensure traffic correctly falls back to the WAN when the tunnel goes down, and the Kill Switch is disabled.
• Fixed IDS/IPS crashes in deployments with a large number of configured static IP addresses.
• Fixed a DNS storm that could occur when multiple OpenVPN tunnels were configured.
• Fixed a DHCP lease synchronization issue between primary and shadow devices in HA deployments.
• Fixed WAN status reporting so latency and jitter are correctly marked as down when a monitored target becomes unreachable.
• Fixed a hub-and-spoke routing issue where spokes on the hub's LAN could not establish return connectivity to the hub.
• Fixed an issue where block pages could fail when SSL Inspection and Content Filtering were both enabled.
• Fixed a multi-WAN issue where IPsec tunnels on a failed WAN could remain active and blackhole traffic.
• Fixed missing IPv6 static routes on dynamically created interfaces.
• Fixed incorrect DHCP pool usage reporting.
• Fixed an issue where IPsec could stop functioning when a backup VRRP node became active.
• Fixed DHCP Option 81 handling to restore automatic Windows client registration in Active Directory DNS.
• Fixed a traffic leak affecting NeXT AI when used with Policy-Based Routing.

UniFi Gateways 5.0.16 includes the improvements and bugfixes below.

Improvements

• Improved system stability.
• Improved DHCP resiliency for clients that do not comply with the RFC.

UniFi Gateways 5.0.12 includes the improvements and bugfixes below.

Improvements

• Improved Speed Test stability.
• Improved system stability.
• Improved connection resiliency for wired clients.
• Improved WAN throughput reporting when having more than 2 WAN interfaces.
• Updated the Traffic Identification signatures.

Bugfixes

• Fixed an issue where enabling QoS prevented access to certain websites.
• Fixed an issue where SD-WAN Spokes didn't reconnect to Hubs in rare cases when experiencing internet outages on the Hub.
• Fixed an issue where DNS could leak over VPN connections.
• Fixed an issue with weekday-based schedules.
• Fixed an issue where Policy-Based Routing rules were ignored for VPN Client Traffic, causing traffic to route via the wrong WAN interface.
• Fixed an issue where IPv6 addresses didn't show up for WAN interfaces.
• Fixed an STP-related network loop issue in Shadow Mode when using dual LAN switch deployments.
• Fixed an issue where a corrupted WireGuard remote peer address was not restored in SD-WAN Mesh deployments.
• Fixed a WireGuard site-to-site connection issue when using a specific WAN listen address.
• Fixed an OpenVPN connection resiliency issue that could cause reconnection failures during renegotiation.
• Fixed incorrect SFP voltage readings from SFP modules.

UniFi Gateways 4.4.6 includes the improvements and bugfixes listed below.

Improvements

• Added a Block Page for Content Filtering and Ad-Blocking.
• Requires UniFi Network 9.4.11 or newer.
• Improved DNS monitoring resiliency for WAN SLA.
• Improved IPsec VPN connection stability.
• Improved the Shadow Mode failover time.

Bugfixes

• Fixed an issue where static routes were missing after switching the WAN type from dynamic to static.
• Fixed an issue where DDNS didn't function correctly when using dual PPPoE WAN connections.
• Fixed an issue where content filtering didn't apply to specific traffic flows.
• Fixed false-positive alerts claiming that the DHCP pool is running out of addresses.
• Fixed an issue where Static Routes were missing after removing Shadow consoles.
• Fixed the Traffic Activity display for clients.
• Fixed an issue where RADIUS authentication could fail when using an anonymous identity.
• Fixed a gateway configuration issue when applying IPv6 NAT.
• [UXG-Enterprise] Fixed an issue where the FEC configuration on the SFP28 ports didn't take effect.

UniFi Gateways 4.3.3 includes the bugfix listed below.

Bugfixes

• Fixed an issue where the device enters a non-working state when upgrading from 3.1.15.

UniFi Gateways 4.3.2 includes the improvement listed below.

Improvements

• Improved Bluetooth connection stability.

UniFi Gateways 4.3.1 includes the improvements and bugfixes listed below.

Improvements

• Added support for CNAME DNS Records.
• Requires UniFi Network Application 9.3 or newer.
• Added support for Cloudflare Content Filtering.
• Requires UniFi Network Application 9.3 or newer.
• Requires CyberSecure subscription for expanded categories.
• Improved Flows data accuracy.
• Improved Hostname resolution.
• Improved Incoming Interface listing for Threats.
• Improved the Shadow Console resiliency.
• Improved DDNS resiliency when a non-primary WAN is used.
• Improved WAN failover latency.
• Improved DHCPv6 WAN stability.
• Improved Network Stability.
• Improved system stability.
• Improved compatibility for DS-Lite.
• Improved logging resiliency.
• Improved WireGuard VPN resiliency.
• Improved BGP resiliency.
• Improved configuration changes resiliency.
• Improved SFP compatibility support.
• Improved IPsec VPN connection stability.
• Updated Traffic Identification signatures.

Bugfixes

• Fixed rare gateway configuration issues.
• Fixed an issue where Policy-Based Routing could stop working in rare cases.
• Fixed an issue where you could receive false-positive DHCP exhaustion alerts.
• [UXG-Fiber] Fixed the inability to set port 5 to 5GbE.
• Fixed routing issues when the same subnets are configured on multiple IPsec VPNs.

UniFi Gateways 4.1.13 includes the improvements and bugfixes listed below.

Improvements

• Improved PPPoE stability for certain ISPs.
• Improved the setup user experience.
• Improved configuration resiliency.

Bugfixes

• [UXG-Lite] Fixed an issue where the WAN LED is always on.
• Fixed unexpected DHCP exhausted events when using DHCP relay.
• Fixed rare gateway configuration issues.

UniFi Gateways 4.1.10 adds support for BGP, NetFlow, and Packet Captures.

Border Gateway Protocol

Sets up BGP neighbors with other gateways and distributes routing information.

• Configure BGP by uploading a configuration text file in FRR format.
• See the BGP Help Center article for more information.

Improvements

• Added support for IPv6 Traffic Identification.
• Added support for sending country restriction events to remote syslog servers.
• Support for Network Application System Logs will be available in a future Network Application release.
• Improved the device's system description for SNMP.
• Improved DNS Shield resiliency.
• Improved system stability.
• Improved WAN failover stability under high load.
• Improved efficiency for configuration changes.
• Improved the setup experience.
• Improved content filtering resiliency.
• Improved logging resiliency.
• Improved DS-Lite compatibility.
• Improved DNS resolving resiliency when using Encrypted DNS.
• Improved WAN health check resiliency when using local DNS servers.
• Updated Traffic Identification signatures.
• [UXG-Enterprise] Added support for BGP.
• [UXG-Max] Improved performance.
• [UXG-Pro] Improved Ethernet LED flashing behavior.
• [UXG-Pro/Max/Enterprise] Added support for NetFlow. Learn more
• [UXG-Pro/Max/Enterprise] Added support for Packet Captures. Learn more

Bugfixes

• Fixed incorrect FAN and Temperature reporting via SNMP.
• Fixed log spam due to multipath routes.
• Fixed an issue where SNMP didn't respond to IPv6 requests.
• Fixed a DNS server issue that could result in delayed DHCP responses.
• Fixed an issue where “Remote client networks“ routes for the WireGuard VPN server get removed randomly.
• [UXG-Lite/Pro] Fixed an issue where Policy-Based Routing could stop working after a reboot.
• [UXG-Lite] Fixed an issue where Gateway Configuration issues could appear in rare cases.

UniFi Gateways 4.1.8 adds support for BGP, NetFlow, and Packet Captures.

Border Gateway Protocol

Sets up BGP neighbors with other gateways and distributes routing information.

• Configure BGP by uploading a configuration text file in FRR format.
• See the BGP Help Center article for more information.

Improvements

• Added support for IPv6 Traffic Identification.
• Added support for sending country restriction events to remote syslog servers.
• Support for Network Application System Logs will be available in a future Network Application release.
• Improved the device's system description for SNMP.
• Improved DNS Shield resiliency.
• Improved system stability.
• Improved WAN failover stability under high load.
• Improved efficiency for configuration changes.
• Improved the setup experience.
• Improved content filtering resiliency.
• Improved WAN health check resiliency when using local DNS servers.
• Updated Traffic Identification signatures.
• [UXG-Enterprise] Added support for BGP.
• [UXG-Max] Improved performance.
• [UXG-Pro] Improved Ethernet LED flashing behavior.
• [UXG-Pro/Max/Enterprise] Added support for NetFlow. Learn more
• [UXG-Pro/Max/Enterprise] Added support for Packet Captures. Learn more

Bugfixes

• Fixed incorrect FAN and Temperature reporting via SNMP.
• Fixed log spam due to multipath routes.
• Fixed an issue where SNMP didn't respond to IPv6 requests.
• Fixed a DNS server issue that could result in delayed DHCP responses.
• Fixed an issue where “Remote client networks“ routes for the WireGuard VPN server get removed randomly.

UniFi Gateways 4.0.20 includes the improvements and bugfix listed below.

Improvements

• Improved the DHCP Server response time on large setups.
• Improved device stability.

Bugfixes

• Fixed an issue where routes for remote VPN clients could disappear.

This is the initial release for the UXG-Enterprise.

UniFi Gateways 4.0.17 includes the improvement and bugfixes listed below.

Improvements

• Improved device stability.

Bugfixes

• Fixed an issue that could cause dnsmasq to keep restarting.
• Fixed PPPoE connectivity stability issues in rare cases.
• Fixed RADIUS issues when usernames included a space.
• Fixed remote logging issues in rare cases.
• Fixed several gateway configuration issues.
• Fixed an issue with handling DHCPv6.

UniFi Gateways 4.0.6 adds support for SNMP and includes the improvements and bugfixes listed below.

Improvements

• Added support for SNMP.
• Improved the stability of WireGuard VPN when using FQDN as the server address.
• Improved the reliability of issuing static lease IP.
• Improved the efficiency of initializing Intrusion Prevention.
• Improved speed test accuracy.
• Improved SFP link stability after reboots/upgrades.
• Improved accuracy of DHCP lease information.
• Improved memory allocation for Traffic Identification.
• Improved the avoidance of IP conflict in certain scenarios.
• Improved PPPoE stability.
• [UXG Lite] Improved WireGuard VPN/OpenVPN throughput.
• Increased concurrent DNS queries for Ad Blocking and Content Filtering.
• Updated Traffic Identification signatures.

Bugfixes

• Fixed a potential default route missing issue.
• Fixed firewall rule creation issue when multiple ports are specified.
• Fixed the issue where the Internet MAC address couldn’t be set back to the default one.
• Fixed missing Traffic Identification statistics in larger deployments.
• Fixed YouTube history disappearing when Ad Blocking is enabled.
• Fixed an issue where MAC override doesn't work for some MAC addresses.
• Fixed a rare case where PPPoE throughput is lower without using Smart Queues 0 and 0.
• Fixed IPv6 address missing on LAN interface.
• Fixed multiple gateway configuration issues.
• Fixed an issue where the Fallback option for Policy-Based Routes was not working.
• Fixed Intrusion Prevention issues after reloading the service.
• [UXG-Lite] Fixed an issue where the device could drop offline in rare cases.
• [UXG-Lite] Fixed the issue that the session disconnects unexpectedly due to smaller TCP timeout settings.
• [UXG-Lite] Fixed DS-Lite connection issue.
• [UXG-Max] Fixed latency issues.

UniFi Gateways 3.2.17 includes the improvements and bugfixes listed below.

Improvements

• Improved the setup experience.
• Improved stability when using Traffic Identification.

Bugfixes

• Fixed high CPU usage issue due to dnsmasq.
• Fixed an issue with Guest Firewall rules.

UniFi Gateways 3.2.15 adds support for DNS Shield and improves stability.

DNS Shield

DNS Shield ensures privacy and security of DNS traffic by encrypting it using DNS over HTTPS (DoH).

Improvements

• Added DNS Shield. Required Network Application 7.5+ or newer.
• Added hostname support for IPsec Site-to-Site VPNs. Required Network Application 7.5+ or newer.
• Improved RADIUS stability.
• Improved WireGuard VPN disconnection detection for mobile devices.
• Improved SFP connection compatibility with modules that do not have a proper EEPROM.
• [UXG-Lite] Improved upload throughput when connected to certain GPON services.
• Updated Suricata to 6.0.12.
• Reduced memory usage of Suspicious Activity, Content Filtering, and Ad Blocking.

Bugfixes

• Fixed an issue where the IPv6 address is lost after interface changes until the next RA.
• Fixed unable to start RADIUS service in rare cases.
• Fixed an issue with DNS servers for VPN Client. This applies to the VPN Client feature, not adding clients to VPN Servers.
• Fixed an issue where servers are not reachable for VPN Client due to incorrect certificates. This applies to the VPN Client feature, not adding clients to VPN Servers.
• Fixed an issue where the default route wasn't present when using a static IP on the WAN port.
• Fixed an issue where IGMP Proxy breaks after PPPoE reconnections.
• Fixed an issue where Policy-Based Routes (Traffic Routes) didn't take effect for existing connections.
• Fixed an issue where Policy-Based Routes (Traffic Routes) conflicted with Content Filtering.
• Fixed inability to see DPI statistics for setups with large amounts of clients.
• Fixed unexpected behavior when there are multiple Traffic Rules blocking the same domain.
• Fixed unable to establish IPsec Site-to-Site VPN in rare cases.
• Fixed an issue where Jumbo Frames are forwarded on LAN ports when Jumbo Frames are disabled.
• Fixed an issue where PPPoE MSS Clamping is lost during provisions.
• Fixed Suspicious Activity not working when enabling Jumbo Frames.
• Fixed IPsec Site-to-Site not working issue after migrating USG to UXG.
• Fixed LAN IP address being lost when changing Single Network settings.
• Fixed an issue with establishing a Site-to-Site VPN while Ad Blocking is enabled.
• Fixed unable to establish SSH session while using ui/ui as credentials.
• Fixed RADIUS validation failure when a password ends with a backslash.
• Fixed a gateway configuration error when enabling Country Restrictions.
• [UXG-Pro] Fixed showing "Plug in cable" on the touchscreen when using PPPoE.
• [UXG-Pro] Fixed missing LAN IP on the touchscreen on the setup screen.

UniFi NeXt-Generation Gateways 3.1.16 adds support for IGMP Proxy on the UXG-Lite.

Improvements

• [UXG-Lite] Added IGMP Proxy support.

Bugfixes

• Fixed an issue where traffic is not routed through the VPN interface if a Traffic Route is configured.
• [UXG-Lite] Fixed Hairpin NAT not working properly.

Introducing the Gateway Lite: A powerful and ultra-compact independent gateway with our next-generation suite of advanced routing, VPN and security features.

• Full gigabit IPS/IDS* routing for up to 10x the performance compared to the original Security Gateway (USG)
• (1) GbE WAN port
• (1) GbE LAN port
• USB-C powered
• Compact footprint, perfect for desktop placement
• Managed with a Cloud Key, UniFi Network Server, or Official UniFi Hosting

*Also known as Suspicious Activity in UniFi Network.

Now available on the UI Store.

UniFi NeXt-Generation Gateways 3.1.15 includes the improvement and bug fixes listed below.

Improvements

• Improved setup flow.

Bugfixes

• Fixed an issue with configuring DNS Settings.
• Fixed an issue where local access to the internal network is impossible through Teleport/L2TP VPN Connections.

UniFi Next-Generation Gateway Pro 3.1.11 includes the improvements and bugfixes listed below.

Improvements

• Improved setup flow.
• Improved stability.

Bugfixes

• Fixed high CPU usage caused by Traffic Identification.
• Fixed routing table issue when both WANs are configured with the same subnet.
• Fixed an issue where MSS Clamping was not applied to the gateway's outgoing traffic.
• Fixed issue where QoS on WAN1 affects WAN2 traffic.
• Fixed unable to upgrade from 1.13 to 3.1.