VPN 100

Dpj

I have an question about the VPN 100 support. Is this device end of life. When i look at the status, i can see on the status page from zyxel, the end of vulnerability support is 30-09-2023. But the latest firmware is from february 2024. Is this device EOL or not?

For example when i look for the zywall 110 (which i know its EOL), on the status page the vulnerability support is till 31-12-2022, and the RMA is till 2027. The RMA for the VPN100 is till 2025.

Especially because of the firmware update of february im not sure about the status.

yours dennis

Zyxel_Kay

Hi @Dpj

The VPN100 firmware update (5.37(ABFV.2)) from February 2024 was released to address specific critical CVEs, even though the end of vulnerability support date for this device was September 30, 2023. After this date, Zyxel typically does not release security fixes or vulnerability updates. However, we do make exceptions for widespread critical vulnerabilities, which is why this firmware update was issued.

As of now, the VPN100's end of support date is set for March 31, 2025. This means while general security patches have ended, any essential maintenance updates for critical vulnerabilities may still be provided.

Please also note that the "End of RMA & Tech Support" date may vary depending on the region. For global (except US and Taiwan) EOL information, you can check this page: https://webservice.zyxel.com/end-of-life .

Hope this clarifies things!

PeterUK

Yes is EOL I did wish Zyxel support it for as long as the FLEX models

Dpj

but why still firmware update then in 2024? do you know that?

PeterUK

Due to vulnerabilities and Exposures they did one more patch for them models

electsystech

https://community.zyxel.com/en/discussion/comment/71534#Comment_71534

So are they going to issue another patch for the last vulnerabilities?

PeterUK

https://community.zyxel.com/en/discussion/comment/71535#Comment_71535

Not likely 😒

Zyxel_Kay

Hi @Dpj

The VPN100 firmware update (5.37(ABFV.2)) from February 2024 was released to address specific critical CVEs, even though the end of vulnerability support date for this device was September 30, 2023. After this date, Zyxel typically does not release security fixes or vulnerability updates. However, we do make exceptions for widespread critical vulnerabilities, which is why this firmware update was issued.

As of now, the VPN100's end of support date is set for March 31, 2025. This means while general security patches have ended, any essential maintenance updates for critical vulnerabilities may still be provided.

Please also note that the "End of RMA & Tech Support" date may vary depending on the region. For global (except US and Taiwan) EOL information, you can check this page: https://webservice.zyxel.com/end-of-life .

Hope this clarifies things!