Zyxel has just released a warning about problems with his firewalls after an update that has caused errors. It is very important to always have the latest versions, but it is true that, sometimes, after an update, we can experience problems. Sometimes, these problems derive in safety risks, while, in other cases, these are operation failures.
In this case, it is an erroneous security update, which is causing important failures in several of its firewalls. It is causing the device to enter a continuous starting loop. This also includes problems when logging in, as it appears in the notice launched by Zyxel.
Zyxel problems after an update
As indicated by Zyxel, the problem has appeared after an update, launched to improve cybersecurity functions. This is generating very varied problems, such as a waiting time of the excessive device or session closure when this should not happen.
In addition, errors are also appearing to log in at ATP/USG Flex through the web GUI, a high CPU use, messages of registration failures, in memory or difficulty entering commands in the console. All this makes those Firewalls work properly.
It affects the USG Flex Ya ATP Series Firewalls models. They are the ones that use ZLD firmware versions. As indicated, other Firewalls models are not affected, such as the Nebula or the USG Flex H series.
Specifically, this firmware update was launched between January 24 and January 25. Therefore, if you have a model like those we have mentioned, and you have installed the update corresponding to those days, you are probably experiencing problems with the device.
To do
On the part of Zyxel, they have indicated that it is convenient for administrators to make changes to recover the full functioning of their firewalls. It is necessary to have physical access to the Firewall and connect to the console through a serial cable RS232. The administrators have to perform some steps, such as creating a configuration backup, downloading a special firmware and connecting through the website and thus be able to restore the configuration file.
To check that you are not affected, from Zyxel they indicate that you have to go to configuration, enter the license section, signature update and check that the version is 1.0.0.20250102.0 or 1.0.0.20241205.0. In addition, if you use Nebula or the USG Flex H series, as we have mentioned, as well as not having active safety licenses on the device, you would not be affected either.
You can go to Zyxel websitewhere they have taken all the necessary steps to solve the problem. There you will find everything you should do, in case you are affected by this problem.
As always, keeping network devices at full functioning is important. If you use a domestic firewall, it is equally essential to have it updated and solve possible problems that may exist with the configuration or with safety.
