Whats New in Spark Firewall R82.00.10

For more information, see the R82.00.10 homepage.

Security

  • New R82 Features

    • QUIC inspection - Deep packet inspection of QUIC traffic (UDP/443) to maintain visibility even when apps shift away from TLS over TCP.

    • DNS security - Block malicious domains and prevents data exfiltration via DNS tunneling and other abuses.

    • HTTPS inspection enhancements / bypass under load - Smarter SSL inspection with adaptive bypass to protect critical flows when appliances hit resource thresholds.

    • Zero Phishing - Real-time page scoring to stop credential harvesting and spoofed login pages before users submit data.

    • IoC feeds - Allow you to configure a stream of malicious indicators (IPs, domain, file hashes) used to detect and block threats.

    • Network feeds - Real-time integration of external threat intelligence (IPs, domains, file hashes) for automatic detection and blocking. (EA)

    • Quantum encryption - Quantum-safe cryptography using PQC algorithms (e.g. Kyber, Dilithium) to resist future quantum attacks.

Networking

  • WiFi Band Steering - Steers clients via probe/association control to 2.4/5/6 GHz based on RSSI, capability, and airtime load. Available on 2530 / 2550 / 2560 / 2570 models.

  • BGP grouping - Multiple BGP peers with identical routing policies into a single peer group to simplify configuration and improve efficiency.

  • Cluster L2 - Locally Managed Spark appliances configured with bridge can be deployed as a cluster.

  • DHCP cluster enhancement - One DHCP server is active at a time and shares the lease information.

  • Allow cloned MAC on LAN-Bond.

  • SD-WAN Enhancements

    • CGNAT Cluster - Support for SD-WAN VPN peers behind CGNAT without DAIP configuration (must use Smart-1 Cloud if the Management Server must connect to the SD-WAN Gateway through a CGNAT interface)

    • Route Based Overlay with ECMP - Support SD-WAN Overlay to operation on top of Route-based VPN. In ECMP mode, SD-WAN selects both the best peer, and the best path to reach the peer.

  • IPv6 Enhancements

    • IPv6 Flexiport support

    • IPv6 static route probing

    • Multiple IPv6 Internet connections

    • IPv6 GRE (6 in 4, 6 in 6, and 4 in 6)

New Hardware

  • Support for the new 2590 high performance 1U appliance with 4x10GB SFP + 8x1GB SFP ports - now in EA

  • Support for the new 2550 WIFI 7 5G appliance – now in EA, GA is planned during Q1 2026

  • Support for the new 2570 WIFI 7 5G appliance – now in EA, now in EA, GA is planned during Q1 2026