Home

Forums

Stories

Knowledge Base

Business Community > All Threads > Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

< All Threads

Solution Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Solution Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

SolutionOmada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

Fae

2022-01-19 08:50:15 - last edited 2023-08-04 07:00:59

Posts: 3613

Helpful: 1358

Solutions: 474

Stories: 0

Registered: 2020-06-30

Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

2022-01-19 08:50:15 - last edited 2023-08-04 07:00:59

Tags: #Highlighted Thread #Official

Update as of Jan 30th 2023

TP-Link has released official firmware to fix the Full Stealth issue mentioned in this thread.

For ER605 v1/v1.6, ER7206 v1/v1.6, please upgrade to official firmware 1.2.1 or above.

For ER605 v2/v2.6, please upgrade to official firmware 2.1.1 or above.

Attention

Please make sure the "Block TCP Scan with RST" is disabled (you can find it at Firewall > Attack Defense) to get full stealth results.

As the official firmware has been released to fix the issue, this thread will be locked to stop updating.

Any further issues or concerns, please feel free to Start a New Thread from HERE.

To get better assistance, you may check Tips For Efficiently Reporting an Issue In The Community.

Updated on July 29, 2022:

Add the Beta firmware for ER605 V2.

~~ER605_v2_2.0.2_Build 20220727 (Beta)~~

Note: Please be sure you have read the Beta Test Agreement before proceeding!

This Article Applies to:

ER605(UN)_V1_1.1.1_Build 20210723 and earlier firmware

ER7206(UN)_V1_1.1.1_Build 20210723 and earlier firmware

Issue Description/Phenomenon:

From time to time, we received feedback that Omada Gateway cannot pass GRC Shields UP test, when using the ShieldsUp Website (grc dot com) to scan the ports, some ports are showing "Closed" instead of "Stealth" as expected.

Available Solutions:

The R&D team has made a Beta firmware to optimize the issue above. After upgrading to the Beta firmware, Omada Gateway will discard and not reply to inbound TCP SYN attempts to the WAN port, which should comply with Shield!up requirements.

~~Welcome to download the Beta firmware below, and verify it does resolve your concern effectively.~~

~~ER605(UN)_v1_1.1.1_Build 20220117 (Beta)~~

~~ER7206(UN)_v1_1.1.1_Build 20220117 (Beta)~~

~~Note: Please be sure you have read the Beta Test Agreement before proceeding!~~

For ER605 v1/v1.6, ER7206 v1/v1.6, please upgrade to official firmware 1.2.1 or above.

For ER605 v2/v2.6, please upgrade to official firmware 2.1.1 or above.

Attention

Please make sure the "Block TCP Scan with RST" is disabled (you can find it at Firewall > Attack Defense) to get full stealth results.

Feedback:

If this was helpful, welcome to give us Kudos by clicking the upward triangle below.

If there is anything unclear in this solution post, please feel free to comment below.

Thank you in advance for your valued feedback!

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*

43 Reply

mackworth

LV3

2022-02-14 14:35:35

Posts: 136

Helpful: 36

Solutions: 5

Stories: 0

Registered: 2020-06-23

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-02-14 14:35:35

@Fae is that already scheduled or is the date unknown?

#12

Fae

2022-02-15 01:23:27

Posts: 3613

Helpful: 1358

Solutions: 474

Stories: 0

Registered: 2020-06-30

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-02-15 01:23:27

Dear @mackworth,

mackworth wrote

@Fae is that already scheduled or is the date unknown?

Next firmware will include the change of this Beta firmware, but the release date is unknown yet.

I'll update this post once the new firmware is available, welcome to subscribe.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*

#13

Zzeonblue

LV1

2022-03-14 05:13:13

Posts: 1

Helpful: 1

Solutions: 0

Stories: 0

Registered: 2022-03-14

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-03-14 05:13:13

Outstanding support. The beta version resolved our second most concern about the ER605 PERFECTLY! Our second issue is the ER605 in standalone mode trying to find a controller on it's service port and we have not tested 1.2 and will wait to see what the next release brings, but this is great news and a huge step forward. Thank you Z

#14

dev_null

LV1

2022-04-10 02:36:29 - last edited 2022-04-10 02:46:27

Posts: 16

Helpful: 8

Solutions: 0

Stories: 0

Registered: 2020-07-21

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-04-10 02:36:29 - last edited 2022-04-10 02:46:27

@Fae I just recently got my ER605 and also found the newest iofficial firmware did not stealth all of my ports. Thank you for providing this beta release. GRC reports all 1055 ports are stealthed. Performing an external nmap scan against my public IP reports full stealth.Looking forward to it being included in the official release! For reference I am self hosting the Omada controller in a container using podman, works fantastically well and without issue! No problems upgrading via Omada controller. Cannot thank you enough fBor this.

#15

mackworth

LV3

2022-05-16 12:55:33

Posts: 136

Helpful: 36

Solutions: 5

Stories: 0

Registered: 2020-06-23

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-05-16 12:55:33

@Fae Any update on when this will be integrated into 1.2+ firmware versions?

#16

Fae

2022-05-17 01:15:37

Posts: 3613

Helpful: 1358

Solutions: 474

Stories: 0

Registered: 2020-06-30

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-05-17 01:15:37

Dear @mackworth,

mackworth wrote

@Fae Any update on when this will be integrated into 1.2+ firmware versions?

Sorry that I haven't been informed of the time for the next firmware update yet.

I'll keep an eye on the new firmware and update this post once a new firmware is available.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*

#17

Fae

2022-07-29 10:52:58 - last edited 2023-01-30 10:56:52

Posts: 3613

Helpful: 1358

Solutions: 474

Stories: 0

Registered: 2020-06-30

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-07-29 10:52:58 - last edited 2023-01-30 10:56:52

Hi there,

I've updated this topic, please check the main content to get the beta firmware for ER605 V2.

[Solution] Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

Updated on July 29, 2022:

Add the Beta firmware for ER605 V2.

Thank you for your attention!

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*

#18

gruntfuttock

LV1

2022-07-29 11:39:03

Posts: 4

Helpful: 0

Solutions: 0

Stories: 0

Registered: 2022-06-05

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-07-29 11:39:03

@Fae - thanks - I can confirm that the new firmware has done the trick!

I note that the status page of the ER605 V2 now has "Confidential Only For Test" written on it; I guess this is just because it's beta.

It's working though, so thanks very much to you and the dev team!

Mark

#19

Adoril

LV2

2022-07-29 12:22:26

Posts: 29

Helpful: 6

Solutions: 0

Stories: 0

Registered: 2021-01-18

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-07-29 12:22:26

Thanks!

I can also confirm using the new beta firmware that i now get full stealth ports according to GRC. (R605 V1 running in standalone mode).

#20

Fae

2022-08-01 01:43:11

Posts: 3613

Helpful: 1358

Solutions: 474

Stories: 0

Registered: 2020-06-30

Re:Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test.

2022-08-01 01:43:11

Dear @gruntfuttock, @Adoril,

I've updated the Beta firmware for ER605 v2, which has also fixed the DHCP Reservation issue mentioned in this post.

>> Omada EAP Firmware Trial Available Here << *Try filtering posts on each forum by Label of [Early Access]*

#21

Solution Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

Solution Omada Gateway Cannot Get Full Stealth On The GRC ShieldsUp Test. [Case Closed]

Update as of Jan 30th 2023

Attention

Attention

Information

Voters 3

Tags