What’s the Behavior of Nebula Upgrading Firmware?

Zyxel_Stanley

Question:
What’s the Behavior of Nebula Auto-Upgrading Firmware in Monitor Mode? Why does the Nebula system auto-upgrade firmware when my device is in Monitor Mode?

Answer:
When a Zyxel firewall is connected to Nebula—regardless of whether it is in Nebula Mode or Monitor Mode—the firmware management settings in Nebula determine how firmware updates are handled.

By default, Nebula enables Scheduled Firmware Upgrade, which automatically updates the device to the latest stable or preferred firmware version.
If you do not want your device to upgrade automatically, you can adjust the settings as follows:

Go to Site-wide > Configure > Firmware Management in the Nebula portal.

Select “Ignore upgrade” to disable automatic firmware updates.

In certain situations, Nebula may force a firmware update to fix critical vulnerabilities, even if the device is running a custom firmware version (such as DateCode Firmware or DF builds). This is done to enhance device security and maintain platform integrity.