Zyxel USG FLEX H Adds Bitdefender GravityZone Endpoint Visibility with uOS 1.40

What was announced, and when​

Zyxel's own press release is dated October 27, 2026. It describes an integration of its USG Flex H series firewalls into Bitdefender's endpoint and networking security suite GravityZone. The pitch is to cut the daily console-hopping that lean IT teams put up with. Zyxel names the familiar blind spots: expired licences, outdated devices and protection gaps that are easy to miss until something breaks.

Trade coverage of the launch is consistent on the main points. The native integration requires no custom development and lets admins activate a Bitdefender trial directly from the firewall.

What the integration does today​

Zyxel's announcement and the coverage that followed describe three current functions:

• Endpoint information in the firewall dashboard. Admins can view endpoint categories, operating system versions and licence status. Surfacing this data in the firewall interface is meant to help identify risks such as expired licences or outdated devices.
• Licence visibility. The firewall shows the state of the Bitdefender subscription. That makes it easier to spot a lapsed or incomplete licence from the place you already manage the network.
• Trial registration. Zyxel says admins can register a Bitdefender account and start a free trial from the firewall. Treat this as a convenience shortcut. Zyxel's wording stresses a few clicks, but it does not say a full trial runs entirely inside the firewall.

Zyxel says the connection works out of the box. No custom API work, extra software or engineering resources are needed to connect the two platforms.

What it does not do (yet)​

The current release surfaces information. The announcement does not claim that the firewall automatically blocks risky endpoints, remediates devices or replaces either vendor's management console. Those ideas sit on the roadmap.

Further integration is planned for 2027, including endpoint risk scores, predefined actions and threat intelligence sharing through the Zyxel Security Distribution Network. No delivery dates, prerequisites or response actions have been published. Plan around what ships today.

There is also a scope limit that Windows admins should take seriously. A Greek outlet, TheLab.gr, notes that because the data comes from Bitdefender's API, visibility logically covers only endpoints enrolled in GravityZone. That is the outlet's inference rather than a Zyxel statement. It still matches how API-fed integrations normally behave. An unmanaged laptop or a forgotten server with no agent will not appear as a protected Bitdefender endpoint. Those are often the machines you most need to find.

Supported hardware and firmware​

The requirement is firmware, not a new box. The integration is available on USG FLEX H series firewalls running uOS version 1.40 or later. Coverage lists eight models: USG FLEX 50H, 50HP, 100H, 100HP, 200H, 200HP, 500H and 700H.

The release date of uOS 1.40 is slightly muddy. TheLab.gr says Zyxel released uOS 1.40 on October 19. Zyxel's own release notes, as reported in the research for this story, give October 12. I would not treat either date as the definitive general-availability date. Check the firmware version on your own device instead.

A sensible pre-deployment checklist​

This is general practice built on the facts above, not a Zyxel-documented procedure. Zyxel's published material does not give a full step-by-step activation guide.

1. Confirm that your firewall is one of the listed USG FLEX H models.
2. Check the running uOS version and schedule an upgrade to 1.40 or later, using your normal change-control and backup process.
3. Make sure GravityZone is already configured and that the Windows workstations and servers you care about have the Bitdefender agent installed.
4. In the firewall's management interface, find the Bitdefender integration settings. Zyxel's user guide reportedly places them under External Integrations, but confirm the path on your firmware.
5. Check that endpoint categories, OS versions and licence status show up as expected.
6. Compare the dashboard against your GravityZone console. Any endpoints missing from the firewall view are worth investigating.

Success looks like this: licence status and endpoint details appear on the firewall, and they match what GravityZone reports.

Reading the marketing carefully​

Much of the coverage repeats Bitdefender's own claims. Those include a protection rate of 99.8 per cent or higher across the past seven AV-Comparatives Real-World Protection Tests, and the fewest compromised systems in 2026 testing. These come from the vendors' announcement. They describe Bitdefender's endpoint engine, not this integration. The dashboard does not make detection better. It makes the status of what you already deployed easier to see.

The commercial angle is also worth a mention. Zyxel's president says the partnership gives MSPs a way to offer endpoint protection alongside existing network security services, with the firewall acting as a sales channel. TheLab.gr makes a similar observation, noting that the integration also works as a commercial channel for GravityZone licences. That doesn't make the feature useless. It does mean the trial button is partly a sales funnel.

Why Windows admins should care​

For small businesses and MSPs, the firewall is often the one console that is always open. A card showing OS versions and licence expiry for endpoints, most of them Windows machines, is a cheap early-warning system. It can surface a Windows 10 machine nobody retired or a lapsed subscription before an auditor does. That is the realistic win here.

The caveats are the ones above. It needs a supported firewall model and current firmware. It needs the Bitdefender agent on the endpoints. The risk scoring and response features are 2027 plans. The sources do not quantify any time savings or incident reduction.

Bottom line​

Zyxel and Bitdefender have shipped a modest but practical visibility integration for USG FLEX H firewalls on uOS 1.40 and later. If you already run both products, it is worth testing. If you are choosing a stack because of the 2027 roadmap, remember that roadmaps are promises, not features.