- DigiCert product docs
- What's new
- Release notes
- Ultra Security
Ultra Security
Release notes
Recent releases
April 17, 2026
Ultra Security Version: 2026-04-17
Included in this release:
New
Portal Inactivity Timeout
The Ultra Security portal includes an optional Portal Inactivity Timeout feature that automatically logs users out after a defined period of inactivity.
When enabled, the session remains active as long as the user continues interacting with the portal, helping prevent unexpected logouts during active use. “Inactivity” refers to a lack of interaction, such as:
No mouse movements or clicks
No page navigation
No keyboard input or interaction
If the inactivity limit is reached, the session expires and the user must log in again to continue. A warning modal is displayed 30 seconds before automatic logout, informing the user of the upcoming session expiration.
If this feature is not enabled, sessions expire after the default period of two hours unless a new page is loaded. In this case, user activity (such as mouse movement or keyboard input) does not extend the session, which may result in users being logged out even while working and potentially losing unsubmitted changes.
To request a Portal Inactivity Timeout value, raise a ticket with the Ultra Security Security Operations Center (SOC) through the DigiCert Ultra Support Portal (https://security.ultraproducts.support/). Include portal_inactivity_timeout and the desired timeout value (in seconds) in your request.
Additional details:
Exception for Breakout Pages: Breakout pages are identified by a “new tab” icon next to their links in the main navigation menu. When selected, these pages open in a new browser tab. The Portal Inactivity Timeout feature does not apply to these pages, and activity within these pages does not extend the active session. If a breakout page is the only remaining open Ultra Security portal page, the configured Portal Inactivity Timeout is not enforced. Instead, the session follows the default two-hour expiration period and is extended only by page loads.
Multi-Tab Synchronization: The inactivity timeout is synchronized across all open browser tabs, except for breakout pages. Activity in any tab keeps the session active across all tabs. If a user is inactive in all open tabs, a warning modal appears in each tab. The session will remain active as long as the user resumes activity in any non-breakout page tab.
March 05, 2026
Ultra Security Version: 2026-02-12
Included in this release:
New
Cloud Firewall Form Editor
Introduces a guided, JSON-free configuration experience for Cloud Firewall Access Control List (ACL) rules. The Form Editor allows users to create and modify firewall rules using structured fields such as action, protocol, source subnets, destination subnets, source ports, and destination ports. Rules can be reordered using drag-and-drop to control evaluation order. This experience removes the requirement to manually author and validate ACL rules in JSON format, reducing configuration errors and simplifying rule management.
Enhancements
Cloud Firewall JSON Editor Naming Update
Renames the existing rule configuration interface to JSON Editor to clearly distinguish it from the new Form Editor. The JSON Editor continues to provide direct access to the raw ACL configuration format for advanced or bulk rule updates.
February 07, 2026
Ultra Security Version: 2026-01-29
Included in this release:
New
Mitigated DDoS Traffic (Statistical View - Bits)
Adds a new Mitigated DDoS Traffic series to the Statistical View when viewing traffic in bits, providing clear visibility into the volume of DDoS attack traffic actively mitigated by the platform using precise, unsampled data.
Enhancements
Ultra Security Portal Navigation Guide
Updates the left-side navigation to improve findability and consistency across the portal. Alerts is now a top-level item, Blocked IPs has moved to Analytics DDoS Blocked IPs, UltraWAF configuration is consolidated under Configuration WAF (Assets, Policies, Certificates, Signatures), and Management has been renamed to Account, reducing clicks and clarifying workflows