[USG] Firmware v4.4.28 now available

by Ubiquiti Employee ‎09-05-2018 05:02 AM - edited ‎09-14-2018 10:26 PM (84,960 Views)

Note: Those on 5.8.x or 5.9.x controller versions should upgrade to 5.8.29, 5.9.26, or newer if available at the time you're reading this, before upgrading. This will ensure you're not impacted by bugs which could cause a problem on next provision of devices (which will happen on USG post-upgrade). 


If you have scheduled speed tests enabled, be warned there are a couple problems that can cause. It may disconnect USG from the controller, or may cause a continual re-adoption. There is a fix for that in this thread (opt into beta at account.ubnt.com first if you haven't already) which is going through final testing at the time of this writing. 


Changes since 4.4.26 release (last version posted to controllers) as follows. 


  • USG local web UI changes
    • Added VLAN tagging capability on WAN. 5.9.17 and newer controller versions required to pull this into the controller configuration the same as all other WAN config parameters.
    • Populate PPPoE username and password from saved config where they exist. Those fields were previously empty where configured, leading people to wrongly think it lost the config. 
    • Added DHCP leases and ARP cache display to Main page. Primary reason is to help find cloud key's IP when setting up a new network and not using the discovery tool, but could be helpful in a variety of other circumstances.
  • PPPoE allowed character restrictions in usernames relaxed to allow some characters previously forbidden. 
  • Guest control authenticated status reporting fixed where hardware offload disabled. This was the cause of non-stop guest deauthentication with offload disabled in all previous versions.
  • Security improvement to protect against CERT VU 598349, problems with automatic DNS registration and autodiscovery.
  • USG3 and USG Pro updated kernel to 3.10.107 (same as USG-XG has been using for a while).
    • Greatly improves achievable throughput with IDS/IPS enabled
    • Most USG3 users could always hit 1 Gbps throughput with hardware offload enabled, but this is confirmed to fix edge cases where those speeds were not achievable with offload enabled.
    • Significant VPN performance improvements in some cases
  •  USG Pro specific changes
    • Automatic bootloader upgrade added. All USG Pros will have their bootloader upgraded after booting this version, including those who used the previous bootloader upgrade. This only applies to USG Pro, not the other models. 
    • Bundled updated u-boot version with fix for USG Pro crashing issues some have experienced. This is functionally no different from the previously released version, but all USG Pros will have the upgrade installed regardless, as this version includes a version string the OS can read to better determine the installed version. 
    • Manual reboot is required post-upgrade to apply the bootloader upgrade. To avoid any possibility for a never-ending reboot loop, there is no automatic reboot at the end of the bootloader upgrade. There is no requirement to immediately reboot it after upgrade, however doing so is recommended as the changes do not become active until another reboot. Upon logging into USG via SSH or serial console after a bootloader update, you will see a prompt that the bootloader has been upgraded and a reboot is required to apply. That message will no longer appear after the second reboot. 
  • USG-XG-8 specific changes
    • LCM firmware update with several improvements
    • Improvements in stats and interface status displayed on the screen. The most commonly reported issue this resolves is correcting the interface disabled or disconnected status. 
    • Added auto-detection of speed (SFP or SFP+) for eth1 and eth8 when in default state. Known UBNT modules are set to 1000 or 10000 accordingly for SFP or SFP+. DACs and unknown modules have their speed switched back and forth until they obtain link. 
    • Added back end for reporting interface speed configuration to the controller, for import to retain settings upon adoption from default state. Controller support not yet publicly released.



  • USG
    • md5:  e5248a6a8602bab8df435291a14dd82e
    • sha256:  6e3d767056939e27beb9a0329b046edf7bcf308fda8221ce097e192935fd71f1
  • USG Pro
    • md5:  a7619d63984e683f1204baf1c563bdf1
    • sha256:  98e024e869512a5340f5dd65ec1416703f4f40cae2ff0f96a789b85e40727502
  • USG-XG-8
    • md5:  0c4d9985094fef0cd1e204f029b9493e
    • sha256:  ff6ddfe73b5ef7f37741720811d00f3d95aee6684bf90547113d704bb44f4693