The update file "FRITZ.Box_3490-xx.xx.image" on ftp.avm.de contains the latest FRITZ!OS (Firmware) for the FRITZ!Box 7490. **Attention:** This update file is only intended for use with FRITZ!Box 3490! Please follow the instructions at the end of this file to install the update. ``` Product: FRITZ!Box 3490 Version: FRITZ!OS 7.31 Language: English, French, German, Italian, Polish, Spanish Release date: 09/04/2023 ``` # Top functions of FRITZ!OS ------------------------------------------------------------ - Priority for working from home - Easy to enable prioritization of a computer for internet access ------------------------------------------------------------ # Additional improvements in FRITZ!OS 7.31 ## System: - **Fixed** stability and security increased # Additional improvements in FRITZ!OS 7.30 ## Internet: - **Improved** List of trusted certification authorities updated - **Improved** When internet access to storage media via FTP/FTPS is enabled, the randomly preselected port number is displayed ## USB: - **Improved** compatibility with MacOS 12.0 "Monterey" - **Improved** compatibility with several older devices (printers, scanners) # Additional improvements in FRITZ!OS 7.29 ## System: - **Improved** Increased stability ## Wi-Fi: - **Improved** Better stability ## USB: - **Fixed** No network drive connection (SMB) was possible with macOS Big Sur Version 11.3 # New functions of FRITZ!OS 7.28 ## Internet: - **NEW** Prioritization of a home network device can now be enabled on the FRITZ!Box user interface # Further Improvements of FRITZ!OS 7.27 - **Fixed** Internet access via MIC code possible again for Vodafone # Further Improvements of FRITZ!OS 7.27 ## Internet: - **Improved** Assignment to devices added to the access profile settings in the parental controls - **Improved** Device status (active/not active) is displayed in the selection of devices for port sharing - **Improved** Clearer display of port sharing overview on mobile devices - **Improved** Independent port sharing settings for a device are now permitted when the request was made over IPv6 for the IPv4 address of the device - and vice versa - **Improved** Event message when port 80 temporarily released for sharing in order to issue certificate for letsencrypt.org - **Improved** DNS over TLS (DoT) more robust - **Fixed** In certain scenarios, IP client operating mode could not be configured correctly via LAN with DHCP - **Fixed** Formatting errors occured in the configuration of IPv6 routes - **Fixed** Display corrected in the port sharing overview - **Fixed** After activating DNS over TLS (DoT) and longer run times, certain websites could no longer be resolved - **Fixed** After update of FRITZ!OS 7.03 or older, the IP address was not refreshed on MyFRITZ!Net (DynDNS) - **Fixed** Repeated dropping and reestablishment of VPN connections after automatic disconnection - **Fixed** IPv6: After the home network prefix was refreshed, invalid IPv6 addresses for guest access were not deleted - **Fixed** Changes to access profiles were sometimes rejected groundlessly with the error message "The list of blocked network applications with this ID already exists." - **Fixed** "PTR" type DNS queries were not always resolved correctly - **Fixed** IPv6: In IPv6 route advertisement (RA) with option 25 (Recursive DNS Server), sometimes bits from the "Reserved" field were set - **Fixed** After restoring factory settings, the first VPN connection configured no longer worked - **Fixed** After importing a configuration with an alternative LAN IPv4 network, the local DNS server remained in the old network after settings were adopted - **Fixed** The TR-064 parameter WANAccess was sometimes incorrect ("granted") when no WAN was available upon restart - **Fixed** "PTR" type DNS resolutions were not always possible - **Fixed** Sending of advanced support data did not trigger a push mail - **Fixed** When a saved configuration was adopted selectively, not all of the push mails originally configured were adopted - **Fixed** VPN connections via L2TP (e.g. in Windows 10) were unexpectedly slow - **Fixed** Device block had no effect in certain scenarios - **Fixed** When a FRITZ!Box was operated behind certain cable modems, brief interruptions of the internet connection occurred every 12 hours - **Fixed** In factory settings the first VPN connection could not be enabled for a single instance - **Fixed** Expanded failover protection with mobile dongles in modem mode did not work when using a non-functioning ADSL line - **Fixed** Expanded failover protection with mobile dongles and internet access via WAN/LAN 1 was not started under certain initial conditions present at the time of activation - **Fixed** Online Monitor for mobile communications did not always show data when "Advanced failover protection" was enabled ## DSL: ## Wireless: - **Improved** Reworked "Wi-Fi / Wi-Fi Channel" page - **Improved** Improved auto channel function after detection of interference sources (5-GHz band) - **Improved** Improved messages on Wi-Fi under "System / Event Log" - **Improved** Detection of multiple parallel WPS activations improved - **Improved** New message under "System / Event Log" when the maximum number of wireless repeaters is exceeded - **Improved** Naming of Wi-Fi guest access (SSID, preassigned) depends on selected language - **Change** In "Mesh Repeater" operating mode, only Wi-Fi networks with visible names are shown for selection of the Mesh Master - **Fixed** Erroneous display of bandwidth in connections with HUAWEI P30 corrected - **Fixed** After radar detection with reduced power mode (Green AP), initialization problems occurred in combination with 160 MHz bandwidth (VHT160) - **Fixed** After a FRITZ!OS update, the "Wi-Fi / Wi-Fi Channel" page did not show any Wi-Fi channels, and in some circumstances, no Wi-Fi networks in the environment - **Fixed** Activation of WPS immediately after the Mesh Master was started frequently led to non-DBDC uplinks to Mesh Repeaters - **Fixed** Incorrect message under "System / Event Log" for WPS during DFS wait time - **Fixed** WPS for the Wi-Fi Guest Access did not work reliably with non-encrypted Wi-Fi - **Fixed** Vulnerabilities in the processing of incoming fragmented frames and aggregated MPDUs (A-MPDU) fixed ("Fragatttack") ## Mesh: - **Improved** Improved indications about adoption of settings enabled for a FRITZ!Box as Mesh Repeater - **Fixed** Incorrect formatting in the mobile view of the "Mesh Settings" page on a FRITZ!Box in "Mesh Repeater" mode - **Fixed** Settings for Wi-Fi schedule could not be changed under some circumstances, if the setting "FRITZ!Box as a Mesh Repeater" was used - **Fixed** For a FRITZ!Box configured as Mesh Master, but not as router (DHCP server), name and IP address of the router could not be changed - **Fixed** Display of Wi-Fi channel bandwidth in the user interface on the Mesh Master was sometimes different on the Mesh Repeater ## Home Network: - **Improved** Faster display of network connections in very large networks - **Improved** When leaving the device details a message concerning changed device names is displayed only if the name was actually changed - **Change** When an individual name is set for the FRITZ!Box, the name of the working group for home network sharing ("USB/Storage") remains unchanged - **Fixed** The section for blocking devices was displayed in the device details of guest devices even though this function is reserved for home network devices - **Fixed** Changed IP settings of the FRITZ!Box were not offered for printing - **Fixed** Time synchronization (NTP) was instable in certain scenarios ## USB: - **Improved** In fritz.nas, multiple files can be selected using the shift key - **Fixed** Home network sharing of a network drive (SMB) was not visible under Network in Windows Explorer - **Fixed** Data transmission via network drive function (SMB) failed with the Windows error message "STATUS_NO_MEMORY" - **Fixed** Online storage was not always reconnected after automatic DSL disconnection ## System: - **Improved** Configuration wizard can be interrupted and resumed - **Improved** Various usability improvements in the First Configuration wizard - **Improved** Status overview page within the first configuration - **Improved** Security query when leaving a page without saving changed settings - **Improved** Saving and restoring settings now includes telephony data from the internal storage of the FRITZ!Box (ring tones, telephone book pictures, voice messages) - **Improved** After support data have been sent to AVM, a second dispatch can be started immediately without any wait time - **Improved** A password can be made visible during entry (eye icon) in the user interface - **Improved** Corrected details in the "Diagnostics / Function" for Mesh and USB - **Change** Offer to switch to "Level III: Notify me about new versions of FRITZ!OS and install new versions automatically (recommended)" is now offered after updating only when "Level II: Notify me about new versions of FRITZ!OS and install necessary updates automatically" was previously configured - **Change** The option to log in to a FRITZ!Box (user interface) without a password, which was not recommended, is no longer supported *1 - **Change** If "only with the FRITZ!Box password" was set up for logging in to the user interface, a FRITZ!Box user with the name "fritz" and a random four-digit number together with the FRITZ!Box password will be created automatically. To log in to the user interface in the home network, entering the FRITZ!Box password is still sufficient. *2 - **Fixed** FRITZ!Box users could not be sorted in the overview - **Fixed** Access profiles with blocked applications in parental controls were not available when settings were restored - **Fixed** Number of messages in "System / Event Log" was too restricted in some areas - **Fixed** Display of installation date for the last update was incorrect in certain scenarios ## Mobile Communications: - **Improved** New "Compatibility mode for mobile broadband dongles" option for generic integration of variants of known mobile broadband dongles - **Improved** Country-specific list of mobile network providers when FRITZ!Box used with a USB mobile network dongle - **Improved** Optimized details for "Advanced failover protection" setting - **Improved** Mobile network provider "Magenta Mobil" added for Austria - **Improved** Support for Huawei E3372h-320 USB mobile network dongle *1. The home network login mode without a password, which is not recommended, is no longer supported. For the initial access to the user interface after the FRITZ!OS update, the user needs to assign a FRITZ!Box password (additional confirmation required) *2. Automatic generation of a user according to the naming structure fritz and a random four-digit number if login before the update took place only with the FRITZ!Box password. Important information for developers of apps that would like to register with FRITZ!Box can be found at avm.de/service/schnittstellen # Additional improvements in FRITZ!OS 07.12 ## DSL: - **Improved** Certain information adapted on DSL pages - **Improved** 35b interoperability to certain Broadcom remote sites improved ## Internet: - **Fixed** Sporadic change of shared ports in rare cases - **Improved** Increased stability ## WLAN: - **Fixed** Time display for scan of wireless environment (5-GHz band) corrected ## Mesh: - **Fixed** Mesh WiFi steering for devices on the wireless guest access improved - **Improved** Stablity ## DECT/FRITZ!FON: - **Fixed** PIN query came despite disabled PIN ## Home network: - **Fixed** Powerline information of a FRITZ!Powerline device connected with the FRITZ!Box via LAN were missing in the "Device Details" area ## System: - **Improved** Stability - **Improved** Browser compatibility optimized for saving table renderings locally - **Fixed** Push Service could not be disabled - **Fixed** Push Service for saving settings deleted the sender settings - **Fixed** During assignment of VPN rights for the current user, under certain circumstances this user's other rights were removed - **Fixed** Update in progress on FRITZ!Repeaters was displayed for too long in the "Mesh Overview" ------------------------------------------------------------ --- # New Features in FRITZ!OS 7.01 ##Internet: - **NEW** register for regular status updates for your FRITZ!Box (MyFRITZ! report) - **NEW** MyFRITZ! internet access to the FRITZ!Box without a warning from the browser (SSL certificate from Let's Encrypt) ##Home network: - **NEW** User interface with new Home Network -> "Mesh" menu for all settings concerning Mesh - **NEW** Mesh Home Network Overview also shows telephone and Smart Home connections complete with topology and connection quality - **NEW** In the ex works settings, a second FRITZ!Box connected via Ethernet becomes a Mesh repeater at the push of a button (WPS) - **NEW** Switch for IP client or router operation in the network settings area - **NEW** Switch for the function of the FRITZ!Box in the home network (Mesh operating mode) as Mesh Master or Mesh Repeater in the Home Network>Mesh>Mesh Settings and WLAN areas - **NEW** Mesh events added to the event messages - **NEW** The settings for push services, auto updates and AVM services are applied to the entire Mesh WiFi More information on the new features for Mesh is presented at "New features for Mesh" More information on configuration and using Mesh is presented at en.avm.de/mesh-faq ##Wireless: - ** NEW** With a "FRITZ! Hotspot it's easier than ever to give guests WiFi access in public places such as bars, restaurants, doctor's practices etc. For details, see Wireless / Guest Access. - **NEW** Improved wireless security through support of activated Protected Management Frames (PMF) ------------------------------------------------------------ With each FRITZ!OS update, AVM also updates its security functions. Therefore we recommend performing the update for all devices. ------------------------------------------------------------ # Additional improvements in FRITZ!OS 7.01 ## Powerline: - **IMPROVED** Option for checking and, if necessary, remedying detected interference from powerline to VDLS ## DSL - **BUG FIX** DSL-Datarate could was shown differently in various parts of the user interface ## Internet - **IMPROVED** Display of internet connections on the Overview page also includes WAN connections - **IMPROVED** Simplified display for internet connections on the Overview page under Connections - **IMPROVED** Function for removing the FRITZ!Box from the MyFRITZ! account (myfritz.net) - **IMPROVED** Optimizations for data throughput - **IMPROVED** Optimizations for DNS resolution - **Improved** Optimized registration with MyFRITZ! (myfritz.net) also possible without enabling MyFRITZ! internet access, under Internet > MyFRITZ! Account - *IMPROVED** SHA-2 support for VPN connections - **IMPROVED** Filter for port 25 (unsecured mail sending) also effective for the Guest Access (Wireless LAN/LAN) - **CHANGE** Connections to 1&1 lines also with Internet Protocol version 6 (IPv6 and IPv4 Dual Stack) - **CHANGE** Connections to Vodafone lines also with Internet Protocol version 6 (IPv6 and IPv4 Dual Stack) - **CHANGE** Type of internet connection "existing connection via wireless LAN" also supports non-encrypted wireless LAN - **CHANGE** Parental controls no longer differentiate between Windows users - **CHANGE** Devices blocked for internet use in the parental controls can be reached via VPN - **CHANGE** Internet service provider "GMX" removed - **CHANGE** FRITZ!Box devices in IP client mode (as for connection to existing network) can be registered with myfritz.net - **CHANGE** Certificate signed by letsencrypt.org (for MyFRITZ! addresses) - **BUG FIX** "Default user already exists" message when configuring parental controls - **BUG FIX** Possible circumvention of time limits defined in parental controls - **BUG FIX** Circumvention of parental controls for certain blocked websites - **BUG FIX** The LAN ports were switched for VPN LAN-LAN linkup - **BUG FIX** Improved VPN interoperability - **BUG FIX** VPN user connections not displayed in the home network overview - **BUG FIX** MyFRITZ! FTP links corrected - **BUG FIX** MyFRITZ! access or device with MyFRITZ! access could not be deleted under certain circumstances - **BUG FIX** Error while entering an already assigned IP address for a new device for port sharing - **BUG FIX** No IPv4 port sharing for devices with IPv6 interface ID during IPv4 internet connection without IPv6 - **BUG FIX** IPv6 NAS sharing link could not be used - **BUG FIX** Google DynDNS service not supported - **BUG FIX** Static IP address with /31 network mask not possible - **BUG FIX** MyFRITZ!-Page would allow to change the user email-adress, even with no user registered - **BUG FIX** in some configurations a VPN-config file could not be imported ##Home network: - **BUG FIX** Possible error message (Error code 1) when IP address entered manually in the Device Details - **CHANGE** Connection Statistics area for the powerline network moved from the Network Device Details to the Contents>FRITZ!Box Support area ##Wireless: - **IMPROVED** DFS wait times in the 5-GHz band optimized - **IMPROVED** Band steering for wireless clients that support the 802.11v/k standards - **IMPROVED** Display of wireless standards 802.11k and 802.11v as "Signal Properties" (for band steering) - **IMPROVED** Display of frequency bands on Wireless LAN / Radio Channel page in the "Other radio networks in your vicinity" list - **IMPROVED** Improved changing of SSID in Wireless Assistant during first configuration - **BuG FIX** Selection of DFS channels in the 5 GHz band possible again in repeater mode - **BUG FIX** Display of interference sources on Wireless LAN / Radio Channel page in the "Use of the Wireless LAN Channels" list - **BUG FIX** The entire network environment of the base station is displayed in repeater mode ##Security: - **CHANGE** The "Login without password (not recommended) option in the FRITZ!Box user interface now requires pressing a button on the FRITZ!Box ##Diagnostics: - **IMPROVED** Function diagnostics shows insufficient memory for saving faxes and voice messages when USB storage is full - **CHANGE** Display of port for Diagnostics & Maintenance ##System: - **NEW** Additional confirmation for certain changes can now be performed using the Google Authenticator - **IMPROVED** Redesigned Auto Update page - **IMPROVED** Event protocol on the Mesh Master also contains all events on the other FRITZ! devices in the Mesh WiFi - **IMPROVED** Push service sends mail after the update with additional information on the version and update progress - **IMPROVED** Push service change notice now also includes information on the registration of a new DECT device - **IMPROVED** Push service change notice on new devices in the home network now also includes information on new Mesh repeaters - **IMPROVED** "New FRITZ!OS" push service mail now also includes planned time of for auto updates - **IMPROVED** Optimized time synchronization (NTP) after internet dial-in - **IMPROVED** Consent to "Diagnostics and Maintenance" does not include permission for software updates - **IMPROVED** Simplified display for configuration of wireless LAN, LAN and WAN in the Interfaces area of the Overview menu - **IMPROVED** Redesigned push services overview - **CHANGE** For security reasons, the preconfigured user "ftpuser" can no longer be granted access from the internet - **CHANGE** For FRITZ!Box users who are granted access from the Internet, the password must be different from the user name - **CHANGE** The security of new password assignments must be rated at least "medium" or they will be rejected. - **CHANGE** Additional confirmation for creating VPN connections ##USB: - *IMPROVED** Message notifying about possible detriment to FRITZ!Box functions when contents deleted from the FRITZ! folder - **BUG FIX** System folders no longer indexed for the FRITZ! media server USB/UMTS: - **BUG FIX** Internet via mobile network not offered for all detected 3G dongles during first configuration --- ##New features for Mesh ------------------------------------------------------------- General information on Mesh is presented at en.avm.de/mesh-networking. ------------------------------------------------------------- **Enabling the Mesh Function** To check whether a FRITZ! product is enabled for Mesh, see the Mesh Overview of the FRITZ!Box (the Mesh Master) under "fritz.box -> Home Network -> Mesh". Here the products in the Mesh are designated with a corresponding "Mesh active" symbol. A FRITZ!WLAN Repeater or FRITZ!Powerline Adapter with FRITZ!OS 6.90 or higher installed can be enabled for Mesh in various ways: - If the product has the ex works settings configured and is being connected with the FRITZ!Box for the first time, it will be automatically enabled for Mesh. - If the product is already connected, but not enabled for Mesh, it is added to the Mesh by pressing a button on the product to be integrated and a button on the FRITZ!Box. On the FRITZ!Box, use the button that initiates WPS (depending on the model, press the "Connect" or "WPS" button briefly, or the "WLAN/WPS button for 6 seconds) Detailed instructions, additional information and the answers to frequently asked questions about Mesh are presented at en.avm.de/mesh-faq. ------------------------------------------------------------- **Telephony Mesh and Smart Home Mesh** With FRITZ!OS 7.0, telephony and Smart Home are also compatible with the Mesh. The connections of cordless telephones and Smart Home products are displayed in the FRITZ!Box Mesh Overview. You can use a second FRITZ!Box as Mesh repeater, and use telephones registered with the second FRITZ!Box with the numbers assigned in the first FRITZ!Box, the "Mesh Master". ------------------------------------------------------------- **Configuring a second FRITZ!Box as a Mesh repeater with the press of a button** Requirements: - Your existing FRITZ!Box supports Mesh (FRITZ!OS 6.90 or higher). This box is the Mesh Master. - The FRITZ!Box to be deployed as a Mesh repeater has been updated to FRITZ!OS 7.0 and you have restored its settings ex works. This box is to become the Mesh repeater. Here's how: - Connect the LAN1 port of the Mesh repeater with the Master using a LAN cable - Initiate the Connect function on both boxes (7590: press the "Connect" button briefly; 7490: press and hold down the WLAN/WPS button for 6 seconds) After the connection procedure is concluded, the second FRITZ!Box is ready for operation as a Mesh repeater. (It operates in "IP client" mode and, as a Mesh repeater, adopts the wireless LAN settings and other important settings from the FRITZ!Box). Please note that this function can be used only if the second FRITZ!Box is permanently connected with the first box by LAN cable. Instructions for configuring a FRITZ!Box connected via wireless LAN as a Mesh repeater are presented at en.avm.de/mesh-faq ------------------------------------------------------------ **Transmit the telephone numbers of a Mesh Master to another FRITZ!Box in the home network** Once you have added an additional FRITZ!Box to the Mesh, you can configure it so that all telephone numbers are available on each FRITZ!Box. If your FRITZ!Box is connected with a landline, you can use the telephones connected to the second FRITZ!Box to make calls over the internet as well as on the landline. If the latest FRITZ!OS 7.0 is installed on both FRITZ!Boxes, the telephone numbers are transferred automatically in the Mesh once the "Telephony in the Mesh" option is enabled. If the new FRITZ!Box is already part of the Mesh, or if you have already set up telephone numbers there, these telephone numbers must be deleted and one of the two FRITZ!Boxes must be restarted. Then the new FRITZ!Box must be enabled for "Telephony in the Mesh". To do so proceed as follows: - Click on "Home Network" in the user interface of the Mesh Master. - Click on "Mesh" in the "Home Network" menu. - Click on the "Mesh Settings" tab. - In the "Use Telephony in the Mesh" section, click on the "Enable" link next to the Mesh repeater in question and then confirm this operation on the Mesh Master as well, if prompted to do so. The telephone numbers are now distributed in the Mesh and can be assigned to your telephones and other terminal equipment for telephony (for instance, answering machines) on the FRITZ!Box. Note: Telephony Mesh is not the same thing as DECT repeating, which requires the support of special hardware on the FRITZ!Box deployed as the Mesh Master. If you would like to use DECT repeating, you can purchase the FRITZ!DECT Repeater 100 from an electronics retailer. ------------------------------------------------------------ **Display of 802.11k and 802.11v support on wireless devices** FRITZ!OS now displays wireless devices that support the wireless standards 802.11k and 802.11v directly in the user interface. Both standards are already widespread for wireless devices and are important prerequisites for the further development of Mesh WiFi for the fastest, lowest-interference, and most convenient control of wireless devices in Mesh environments To find out whether your wireless devices offer support for the 11k and/or 11v standards, see the "Properties" under the Wireless / Radio Network menu, or use the "Edit" function to display the properties of each wireless device. ------------------------------------------------------------ ------------------------------------------------------------ ##Additional Innovations in FRITZ!OS 7.0 ------------------------------------------------------------ **What's new for the FRITZ! Hotspot** The new FRITZ!OS 7.0 vmakes setting up and using the FRITZ! Hotspot even easier. It's now even easier for users to choose whether the wireless guest access should be provided as an open hotspot, or encrypted as a private hotspot. If an open hotspot is chosen, the guests do not need to enter a security key. Caf\E9s, doctor's offices and small businesses, as well as all FRITZ!Box users, can provide their customers and visitors an easy-to-use internet access that complies with the current legal regulations. Whether it's private or public hotspot, guests cannot access the home network, but surf using a second wireless LAN provided by the FRITZ!Box. Secure and Complete Control The operator of the hotspot can decide which applications can be used in the guest network and which are prohibited. Daily email messages notify the operator of the hotspot about which devices were registered in the radio network and when. Another advantage is the option to reserve bandwidth. This options allows you to specify how much of the data rate is reserved for their own wireless LAN and how much is available to their guests. Individual & Convenient The Welcome page of the FRITZ! Hotspot offers additional convenience. Caf\E9s or businesses can greet their guests with a short welcome text, photo or logo. If desired, the guests can also be requested to consent to the terms of use for the hotspot. The hotspot is also available in locations where FRITZ!WLAN Repeaters or powerline devices supporting WiFi provide for better coverage. ------------------------------------------------------------ ------------------------------------------------------------ **Increased speed when using USB storage media with NTFS data systems** If you're using USB sticks or flash drives on your FRITZ!Box that are formatted with the data system NTFS, you can benefit from increased speed during transmission. You don't have to do anything - just continue to use the existing USB storage media as before. To check what data system is used, go to Home Network -> USB Storage Media in the FRITZ!Box user interface. ------------------------------------------------------------ ------------------------------------------------------------ **New security feature in the wireless LAN: "Protected Management Frames (PMF)"** FRITZ!OS now supports additional security during registration of devices with the wireless LAN. "Protected Management Frames" ("PMF" for short) offer additional protection for the wireless connection during the setup phase. PMF is standardized according to IEEE 802.11w-2009 and is automatically offered to or negotiated with wireless devices that support this technology. The new feature is available in the user interface under Wireless > Security > Additional Security Settings. ------------------------------------------------------------ **MyFRITZ! access to your FRITZ!Box via internet now without security messages in the browser** When you access the user interface of your FRITZ!Box from the internet, a security warning may be displayed in the browser. The new FRITZ!OS version enables your FRITZ!Box to receive a SSL certificate for your MyFRITZ! address from the organization letsencrypt.org. Browser access via the MyFRITZ! address to the interface of FRITZ!Box is no longer accompanied by a security warning, since most browsers trust the certificates from letsencrypt.org. Proceed as follows: 1. First you need to register your FRITZ!Box with MyFRITZ! (myfritz.net). 2. Under "Internet / MyFRITZ! Account", enable the "Let's encrypt" optLet's Encryption. 3. Confirm by clicking "Apply" and wait for the status "Certificate issued successfully". Your FRITZ!Box has the certificate created for your MyFRITZ! address and uses it for browser access to this address, for example when you access your FRITZ!Box via your account on https://myfritz.net. It's also possible to send links for FRITZ!NAS file sharing (for example photos) to third parties, who'll have access without annoying certificate warnings. This way, FRITZ!NAS becomes an even greater alternative to cloud storage services. Note: To receive the certificate, the TCP port 443 of your FRITZ!Box is open for a few minutes. The certificate is currently valid for 60 days and is then renewed by the FRITZ!Box. HTTPS access to your FRITZ!Box via public or local IP address, "fritz.box" in the home network or over a DynDNS provider do not use the certificate from letsencrypt. MyFRITZ!App: After activation of the Let's Encrypt certificate in the FRITZ!Box, the MyFRITZ!App notifies you once about the change of the certificate fingerprint. Select "trust" to continue using the new certificate. ------------------------------------------------------------ ------------------------------------------------------------ **Option for assessing and, if necessary, remedying detected interference with VDSL from Powerline** In the Internet / DSL Information / Interference Resistance menu of the FRITZ!Box, any interference with VDSL that may have been caused by FRITZ!Powerline can be minimized. This process of checking and adjusting can take up to ten minutes. During this time, the load on the powerline connection may affect the network quality and internet connection. This procedure can be repeated to optimize the interaction of VDSL with a high-performance powerline installation step by step, and the adjustmented settings can be returned to their original configuration. This option is available only if VDSL interference was detected that could have been caused by a FRITZ!Powerline product. ------------------------------------------------------------ New and improved Features in FRITZ!OS 6.80 Internet: NEW - Display of Internet use by guests in the Online Monitor New - Guaranteed data rate for home network devices despite intensive use of the guest network NEW - Option for autonomous port sharing (UPnP/PCP) can be enabled for each device Home network: NEW - IP address (DHCP) can be changed directly in the device details Wireless LAN: NEW - To improve data transmission, a dual-band wireless device can be set to switch between the 2.4 and the 5-GHz frequency band automatically (band steering) MyFRITZ!: NEW - New convenience features added to myfritz.box user interface and optimized display on smartphones and tablets (responsive design) Security: NEW - Password for registering an IP telephone with the FRITZ!Box must have at least eight characters. IP telephones with a shorter password will be disabled with this update. NEW - Certain settings and features require additional confirmation by the user where the FRITZ!Box is located Storage (NAS): NEW - FRITZNAS user interface optimized for tablets and smartphones (responsive design) USB/UMTS: NEW - Text messages received at mobile communications dongles operating as a modem displayed as events --- More wireless LAN speed through band steering The new FRITZ!OS offers a leap of speed for WiFi with band steering. Many smartphones and tablets can transmit data on the 2.4-GHz-band and the 5-GHZ-band. If one band is working at a high capacity, the FRITZ!Box now automatically initiates a band switch. This way resources can be exploited better and data reach their destination faster and without interference. Band steering is possible for all FRITZ!Box models with dual-band Wireless AC+N (FRITZ!Box models 7580, 7490, 7560, 6490, 4040, 3490). Priorities in WiFi With the FRITZ!OS 6.80 update users can be sure to surf, stream or chat without interference even if the guest network is highly used. So you can decide which transmission rates you and your guests are entitled to. If the FRITZ!Box owners are not online, the guests can enjoy higher data rates. The new online monitor is also very handy, since it now displays the data rates of the guest access on top of the usual downstream rates for Internet and IPTV. Even better and easier: MyFRITZ! for browser and app Following the fritz.box user interface \E2?? the window to the FRITZ!Box \E2?? with FRITZ!OS 6.80 the user interfaces of the MyFRITZ! service (myfritz.net) and FRITZ!NAS now also appear in a responsive design and adjust to any display size. Using the MyFRITZ!App 2 (for Android) users have convenient access to saved data at home and from anywhere else. With a single swipe you can establish a secure connection to your home network and access your FRITZ!Box and connected devices from on the go. On the safe side: strong passwords and settings requiring confirmation The saving of backup files is even safer now as a new function implements an additional confirmation that can only be verified where the FRITZ!Box is located (two-factor authentication). Attempts to log in with wrong user data are recorded as an event. Numerous other FRITZ!OS 6.80 upgrades provide the FRITZ!Box with the latest security standards. With every large update AVM always advises to install the latest version of FRITZ!OS for optimum security and best network synchronization. Approve access from the Internet for online games, gaming consoles or IP devices Devices connected to the FRITZ!Box are safe from unauthorized access from the Internet. However, certain applications such as online games or devices like IP cameras or gaming consoles sometimes need to be accessible for others over the Internet. FRITZ!Box users can enable such connections through port sharing. Now it's also possible to allow certain devices to control port sharing automatically. With FRITZ!OS 6.80 all shared ports (IPv4, IPv6, MyFRITZ! or autonomous) can be viewed and configured at once. Users can find an overview of all shared ports with their connected home network devices in the menu at "Internet > Permit Access". Settings for parental controls can also be used with pure IPv6 devices with the new FRITZ!OS 6.80. --- Additional improvements in FRITZ!OS 6.83: DSL: Improved - Optimization for VDSL vectoring Improved - Better interoperability with various VDSL and ADSL connections Improved - Compatibility mode added for VDSL connections with supervectoring (35B) Internet: Improved - Display of online time in the parental controls overview Improved - Labeling of time axes in the Online Monitor Improved - Filters for websites take account of blocked domains for https calls as well Improved - Support for pure IPv6 devices in parental controls Improved - Port sharing combined with MyFRITZ! sharing and IPv6 sharing Improved - Complete firewall exceptions possible for downstream routers with IPv6 Improved - Static routes can be defined for IPv6 Bug fix - Shifted time scale in the graphic overview of permitted online time on fritz.box/surf.lua Home network: Improved - Display of device details completed Resoved - "Deleting" unused devices in the home network list also removesVPN connections Change - LAN port 1 through 4 switched to power mode Wireless LAN: Improved - Shows the time when autochannel was last refreshed Improved - Deletion of all inactive wireless devices without individual settings from the list of known wireless devices MyFRITZ!: Improved - Diagnostics of "Function" and "Security" includes MyFRITZ! Improved - Optimized registration of MyFRITZ! account Security: Improved - Attempts to log in with wrong user data recorded in Event Log Improved - Access via FTPS supports ECDHE ciphers Change - Registeration with FRITZ!Box user interface valid for 20 min Change - Increased security of FRITZ!Box's own certificate through signature with SHA 256 System: Improved - Optimized configuration of switching schedule by graphic time table for smartphone and tablet Improved - FRITZ!OS update page also shows the last time the version was checked or the last time a FRITZ!OS was installed Improved - Display of logins via FTP or SMB in the Event Log Improved - Event log adjusted to different display sizes Improved - User guidance for restoring saved settings Improved - Push Service overview Improved - Reworked mail subject line for push service mails and information about sender Improved - Text edited in the FRITZ!Box Info mail from push service Improved - Push service combines mails generated within a short period Improved - Change notices for selected settings added to push service mails Improved - Push service mail for use of guest access even when wireless network login/logout display disabled Improved - Important notifications for secure and reliable operation now also via MyFRITZ!App 2 and by push service mail (Previously: only red Info LED and fritz.box overview) Improved - Better stability even in atypical load situations Bug fix - Recurrent push mails (change notices) about first registration of powerline devices or devices without a clock Change - Interface descriptions for developers expanded (www.avm.de/Schnittstellen) Storage (NAS): Improved - FTP and SMB service can be enabled/disabled independently of each other Change - FTP service in the home network disabled upon delivery USB/UMTS: Improved - Optimized configuration of a mobile communications connection via Huawei E182 or ZTE W21v Improved - Huawei E5331 and other mobile communications dongles supported in tethering mode Change - Access number may be left blank --- What's new in FRITZ!OS (from 6.50) DSL: NEW-With active VDSL vectoring, impulse noise protection (G.INP) can be used at the same time as seamless rate adaptation (SRA) Internet: NEW: Parental controls with tickets to extend online time as needed NEW: Display of remaining online time and restrictions to Internet use with fritz.box/surf.lua (parental controls) NEW: Display of a longer Internet disruption (red INFO LED and on Overview page of the user interface) NEW: In the DS-Lite connection mode, the Port Control Protocol can be used to configure incoming IPv4 port sharing in the AFTR gateway of the Internet service provider. Must be supported by the Internet service provider. NEW: Use own local DNS server (IPv4 and IPv6) NEW: Automated port sharing in the home network set up via the Port Control Protocol (PCP) NEW: New filter for TCP port 25 to block unsecured e-mail dispatch (can be enabled under "Internet / Filters / Lists") Wireless: NEW: Displays loading of radio channel currently in use (temporal progress) NEW: Option for granting Internet access via the guest access only after consent to terms of use (captive portal) NEW: Wireless standard in the 2.4-GHz band set to "802.11n+g" (presetting changed) NEW: Failed login attempts by wireless devices recorded in a separate list on the "Wireless / Radio Network" page. Storage (NAS): NEW-USB storage media keep the drive name set on the computer (not active until factory settings configured) Home network: NEW: "Home network overview" of all connected devices NEW: Central update function for all FRITZ! products in the home network NEW: Deletion of inactive devices without special settings from the overview of network connections NEW: Secure access to the user interface from connected FRITZ! devices via the FRITZ!Box password NEW: Display of VPN users in the network connections overview USB/UMTS: NEW-Option to enable "Internet connection via smartphone or mobile communications stick by USB tethering" automatically whenever the DSL connection is interrupted NEW-Support for Huawei E3372h LTE dongle (tethering mode) System: NEW: User interface in new responsive design for optimized display on smartphones and tablets NEW: Completely new graphic design of the user interface NEW: "Change notice" push service notifies about changes to selected settings and events NEW: Push service sends mail with status after successful update (effective after next update) NEW: Display of important notifications for secure, reliable operation with red "Info"' LED and on the start page Security: NEW: For increased security when accessing the user interface, now a FRITZ!Box password must be assigned during the first configuration NEW: For increased security, a password must be assigned to backup files NEW: Firewall "stealth mode" setting available under Internet > Filters > Lists > Global Filter Settings --- New features for the FRITZ!Box: New design for FRITZ!OS 6.50, with better overview of the home network and over 120 innovations The latest update offers a redesigned user interface at http://fritz.box, optimized for smartphones, tablets and notebooks. In the browser it adjusts flexibly to the different display sizes. The user interface also received a fresh new look. The menu items and their arrangement remain familiar to users. The extensive home network overview of all connected devices is also new. These include all wireless, LAN, powerline and USB devices. At a single glance users can see whether their connected FRITZ! products are equipped with the latest version of FRITZ!OS. You can start updates directly from here. With the new FRITZ!OS you can also use helpful analyses of your wireless LAN environment. Under "Wireless / Radio Channel" the loading of the radio channel currently in use is shown over time for the 2.4-GHz and the 5-GHz frequency band. The lower the loading of the radio channel, the better the potential data throughput there. Now there is an option for granting guest access to the wireless LAN or LAN only after consent to the FRITZ!Box owner's terms of use. The guest is taken first to a captive portal to signal consent. Without confirming this page, you cannot connect to the Internet. News for parental controls: Tickets can be issued for each device to extend surfing time by 45 minutes. When online time has been exhausted, tickets can be redeemed on the Information page on blocked Internet use in the browser. By going to http://fritz.box/surf.lua with any network device, you can view the device's settings for Internet use and the amount of online time already used on the current day. Since AVM also optimizes the security of the entire FRITZ! family with every new FRITZ!OS, it is advisable for every user to perform the update. The firewall can be operated in stealth mode to prevent ping queries. TLS security has been improved and port 25 received a new filter to block the unsecured e-mail dispatch. --- Improvements and Bug Fixes in FRITZ!OS 6.52 Internet: Improved: Wireless LAN stability for using Entertain Home network: Resolved: Fixed assignment of the same IPv4 address lost on restart System: Improved: Stability, eliminated possibility of continual reboots in special application scenarios Changed: Update with a FRITZ!OS file is permitted only with the latest version of FRITZ!OS Improvements and Bug Fixes in FRITZ!OS 6.50 DSL: Improvement-Notice on login page when no DSL connection available Resolved-impulse noise protection (G.INP) was not negotiated during first connection after restart Resolved-problem connecting to Broadcom 147.159 (VDSL) Resolved-problem connecting to Infineon 7.23.4 (ADSL2+) Internet: Improved: Number of VPN connections raised from 8 to 12 Improved: Support can be enabled for PPPoE passthrough Improved: VPN interoperability to external remote stations Changed: "MyFRITZ!" menu command renamed "MyFRITZ! Account" Resolved: Non-supported services disabled when operating mode switched Resolved: Error when checking connection of user-defined Dynamic DNS provider Resolved: In some cases, VPN settings of FRITZ!Box user did not contain a preshared key Resolved: Delayed notifications in the wireless network for Android apps on IPv6 connections Resolved: Fix for missing data of a guest access configuration on the start page Wireless: Improved: Display of wireless LAN channels occupied by adjacent networks Improved: Maximum possible data rate shown on the detail pages of wireless LAN devices in "Wireless / Radio Network" Improved: Password evaluation for entry of wireless network key Improved: Reworked messages on wireless LAN under "System / Events" Improved: Wireless auto-channel function now also occupies higher channels in the 5-GHz band Improved: Wireless guest access now encrypted with WPA2 instead of WPA/WPA2 (mixed mode) Resolved: In "Repeater" operating mode, changes to "Radio Channel Settings" led to permanent loss of connection to access point Resolved: Transmission power for enabled guest access can be controlled again Resolved: Wireless guest access can be enabled in the "Share existing Internet connection in the network (IP client)" mode again Storage (NAS): Improved: Warning message on attempt to delete the "FRITZ!" folder Improved: Media server supports thumbnails for contents of Synology NAS devices Resolved: After releasing a directory for sharing with a user, NAS could no longer be reached by other users Home network: Improved: Display of type and path of a device's connection to the FRITZ!Box now included in the details of the "Network Overview" page Improved: "Network Overview" page with optimized listing of powerline devices with their own user interface Improved: Reworked local IPv6 settings Improved: All AVM FRITZ!Powerline products in the powerline network can now be updated from the FRITZ!Box user interface USB/UMTS: Improved: Optimized detection of memory cards in mobile communications dongles by Huawei Improved: Mobile communications configuration optimized for smartphones and mobile communications dongles with USB tethering Improved: Mobile communications modems by Huawei configured for automatic selection of network technology Improved: Preselection of operating mode optimized for mobile communications dongles Resolved: Configuration pages of a mobile communications dongle with USB tethering could not be opened from the mobile communications configuration under certain circumstances Resolved: Detection corrected for mobile communications dongle Speedstick LTE V Resolved: Eliminated "Unsupported device" message for tethering devices without a card reader Resolved: Several Huawei mobile communication dongles were not correctly recognized as modems Resolved: No timeout for detection attempts by card readers in mobile communications dongles System: Improved: Upon conclusion, configuration wizard checks whether a new FRITZ!OS is available and offers an update Improved: Reworked content and display of push service mails Improved: Link to the FRITZ!Box user interface in the footer of the push service mail can now be accessed externally as well (requires MyFRITZ! or Dynamic DNS) Improved: Option to deactivate push service entirely Improved: Settings backup now also includes parental controls, wireless guest access and basic smart home settings Improved: Sorting function in tables in the user interface Improved: Dispatch of "FRITZ!Box Info" push mail as needed Improved: "FRITZ!Box Info" and "Wireless Guest Access" push mail sent before restart Improved: Time-saving operation via optimized navigation in the user interface Improved: Display of new functions via HTTPS before a FRITZ!OS update Improved: New event for saving settings Security: Improved: Password evaluation during first configuration and configuration of MyFRITZ! Improved: Secure TLS mandatory, support for SSLv3 removed Diagnostics: Improved: Function diagnosis of function takes own FRITZ!WLAN Repeaters into consideration when counting radio networks of that name in the vicinity Improved: Function diagnosis now includes detection of old wireless LAN devices (802.11b) Improved: Send diagnostics results for "Function" and "Security" by mail We recommend every update for reasons of security as well. Further improvements to increase security with this version of FRITZ!OS are presented at http://en.avm.de/guide/security in the area "Updates increase security". --- New in FRITZ!OS 6.30 This version of FRITZ!OS includes modifications to better support the latest services offered by Internet providers and improved interoperability on the DSL line. Vodafone customers can enjoy an extra improvement with the new FRITZ!OS. It is now even easier to reconfigure the Vodafone account data entered during the first installation of the FRITZ!Box for a new DSL/VDSL line. Additional improvements to the DSL software provide for improved stability and faster transmission over various connections. The DSL diagnostics data have also been expanded for error analysis, so that future optimizations can be analyzed in even greater detail. --- Improvements and Bug Fixes in FRITZ!OS 6.30 DSL: Improvement - interoperability for VDSL Improvement - expanded DSL diagnostics options Improvement - for G.Vector and diagnostics Internet: Improvement - faster web page access on busy lines Improvement - VPN interoperability to external remote stations Improvement - simpler configuration on Vodafone lines Improvement - first configuration for Vodafone even when DSL cable not connected Improvement - fist configuration with 1&1 start code supported even before switching date Fixed - problems connecting to some VPN servers NAS: Bug fix - no login by other users possible after sharing a folder Security: Improvement - password evaluation when setting the FRITZ!Box password during first configuration Improvement - MyFRITZ! configuration with stricter password guidelines Further improvements to increase security with this version of FRITZ!OS are presented at en.avm.de/guide/security in the "Updates increase security" area. Access to the FRITZ!Box via Telnet is no longer supported --- To carry out the firmware update: 1) Open your Internet browser and enter the address "fritz.box" or "192.168.178.1" 2) Select the "System" menu and then the "Firmware Update" sub-menu. 3) Use the "Browse ..." button to enter the appropriate path to the update file. 4) Click the "Update" button. To recover the storage space on your hard drive, you can delete the update file after performing the update. \A9 AVM GmbH 2021. All rights reserved. This firmware package consists of files which are distributed under different license terms, in particular under AVM proprietary license or under any Open Source License (namely GNU General Public License, GNU Lesser General Public License or FreeBSD License). For further details see file "license.txt" (https://download.avm.de/fritzbox/license.txt). The source code of those files distributed as Open Source are available on written request to fritzbox_info@avm.de. Under all AVM intellectual property rights, AVM grants the non-exclusive right to personally use this AVM firmware package which is delivered in object code format only. Licensee shall olny be entitled to make a copy exclusively reserved for personal backup purposes (backup copy). AVM reserves all intellectual property rights except as expressly granted herein. Without the prior written approval of AVM and except to the extent as may be expressly authorised under mandatory law, this AVM firmware package in particular - shall not be copied, distributed or otherwise made publicly available - shall not be modified, disassembled, reverse engineered, decompiled or otherwise "be opened" in whole or in part, and insofar shall not be copied, distributed or otherwise made publicly available. DHA 2023/09/04