The section describes the updates made in this document for RUCKUS One.

Table 1. Summary of Enhancements in RUCKUS One

Feature	Description	Location
Support for AP Wired Port Client Isolation	RUCKUS One supports enabling client isolation to enhance network security by preventing devices on the same Wi-Fi network from communicating directly with each other.	Networking Settings Customizing the IP Settings and the LAN Port Settings of an AP Client Isolation Profile Details
Support for SoftGRE over an Ethernet port	RUCKUS One supports enabling a SoftGRE tunnel profile on an Ethernet port.	SoftGRE Tunneling Support Networking Settings Customizing the IP Settings and the LAN Port Settings of an AP
RSTP update when the RUCKUS ICX switches are running FastIron firmware versions FI 10.0.10a or later.	For RUCKUS ICX switches running on firmware versions FastIron 10.0.20a and later, the Spanning Tree Protocol settings at the profile level automatically apply RSTP when STP is selected. At the switch level, the Spanning Tree Protocol settings are limited to either RSTP or None, with priority values set to zero or increments of 4096.	Adding and Managing a Regular Switch Configuration Profile Editing a Switch
Flexible Authentication	RUCKUS ICX switches now support Flexible Authentication with 802.1X authentication and MAC authentication for selected port ranges. Additionally, authentication profiles can be created and applied via RUCKUS One, streamlining client authentication management.	Understanding the Authentication Profile Creating an Authentication Profile
KPI metrics for wired networks	The Health page includes new KPI metrics for wired networks, such as Multicast Traffic Compliance, Interface Health Compliance, and DHCP. These metrics enable you to measure network compliance against SLA goals and provide the ability to drill down by network segment and time for detailed analysis.	Monitoring Wired Network Health
TCP SYN DDoS Incident	A new Wired AI Security category has been introduced to include TCP SYN DDoS incident detection. This feature detects TCP SYN attack incidents, provides notifications to users, and recommends appropriate remediation actions to mitigate potential threats.	Incidents Page
AP Ethernet Auto-negotiation Incident	The incident previously labeled as 'Sub-optimal WAN throughput' has been renamed to 'Physical link speed/duplex mismatch between AP and upstream/connected device' with its severity level adjusted to P4 for better alignment with the behavior. It is reported as a single Zone-level incident, reducing the number of individual incidents in the Incidents table and simplifying incident management.	Incidents Page