Skip to content

Controller / UI Release: 22.09 - October 6, 2022

Features

  • Orchestration and Integration
    • Gateway Disk Encryption using CMEK for Azure and GCP
    • Enabling Acceptance Required for GWLB (AWS Egress/EW Gateway)
    • Deploying Gateways in Edge Mode using private IPs (AWS only)
  • User Interface and Usability
    • System Log alerts in UI message bar
    • Dashboard improvements and consistency
    • Consolidated Gateway deployment workflow
    • Enhanced FQDN Filtering Profile display
  • Security and Segmentation Policy
    • Tracking certificate expiry
    • FQDN Filtering Profile grouping
  • Troubleshooting
    • User-generated Diagnostic bundle
  • Miscellaneous
    • Performance improvements
    • Controller operation improvements
    • Bug fixes and stability improvements

Enhancements

  • Enhancement: Adds visibility to newly generated System Log alerts in top UI message bar
  • Enhancement: Adds support for enabling Disk Encryption for a Gateway deployed in GCP using a Customer Managed Encryption Key (CMEK)
  • Enhancement: Adds support for enabling Disk Encryption for a Gateway deployed in GCP using a Customer Managed Encryption Key (CMEK)
  • Enhancement: Adds support for specifying the Acceptance Required for the GWLB in a Gateway. Applies to Egress / East-West Gateways for AWS only.
  • Enhancement: Improvements in UI for Home Dashboard and Discovery Dashboard to ensure consistency
  • Enhancement: Adds System Log message for certificate expiry awareness (15 days from expiry, expired and expired and in-use)
  • Enhancement: Provides support for immediately applying Gateway configuration changes rather than applying those changes when new instances are deployed
  • Enhancement: Adds the ability to track certificate expiry for Certificate and Decryption Profile tables
  • Enhancement: Provided an ability for a user to trigger generating a Gateway diagnostic bundle to Valtix Support
  • Enhancement: Updated and consolidated Gateway deployment workflow
  • Enhancement: Provides an improved way to display the FQDNs for each row in an FQDN Filtering Profile
  • Enhancement: Ability to deploy Valtix Gateways in Edge Mode as private (no public IP address assigned to Datapath and Management interfaces). Requires the use of a NAT Gateway for bridging private to public. (AWS only)
  • Enhancement: Adds Group support for FQDN Filtering Profile where more than one FQDN Filtering Profiles can be grouped together to form a Group FQDN Filtering Profile
  • Enhancement: Adds a Description argument to the Cloud Account resource

Fixes

  • Fix: Fixes an issue that could occur when attempting to attach (peer) a Spoke VPC to a Service VPC
  • Fix: Fixes an issue with sort on Status in the Gateway listing view
  • Fix: Fixes an issue where editing an IDS/IPS Profile would have Action set to Rule Default, but the Action was shown as empty
  • Fix: Fixes an issue where the FQDN and URL Filtering Profiles would not accept certain valid inputs
  • Fix: Fixes various UI-related Topology view issues when viewing VPCs
  • Fix: Fixes a label issue in a Discovery Inventory Dashboard widget
  • Fix: Fixes misalignment in the Gateway Status Dashboard widget
  • Fix: Fixes an issue where the Spoke VPC protection orchestration in AWS fails silently if the TGW route table limit is exceeded
  • Fix: Fixes an issue where a Log Forwarding Profile does not show associated Gateways for which the Profile is assigned
  • Fix: Fixes an issue where adding or removing FQDNs in a Reverse Proxy Address Object could cause errors
  • Fix: Fixes an issue where disabling a Gateway that is deployed in GCP will not fully clean up the Load Balancer backend targets
  • Fix: Fixes a display issue in Network Stats to display larger connection rate numbers as thousands (K) rather than non-unit numbers
  • Fix: Adds the ability to edit the External ID when onboarding an AWS Account. Editing is NOT recommended, but there are cases where this is necessary.
  • Fix: Fixes an issue where upgrade of a 2.11 Gateway to a more modern version will cause the state to remain in "Upgrading..."
  • Fix: Fixes an issue where export to Terraform of Policy Ruleset can potentially add extra leading space to Rule names, which will generate an error when running the Terraform
  • Fix: Fixes an issue with export to Terraform for GEOIP Address Object to ensure all country codes are exported as lower case
  • Fix: Fixes an issue to ensure a user cannot edit Subnets associated with Instances when a Service VPC is selected. The Service VPC selection is intended to auto-populate the proper Subnets and not allow a user to make changes.
  • Fix: Fixes an issue where Cloning a Rule and specifying a Name and Description would save the Rule with the new Name, but would not save the Description
  • Fix: Fixes an issue where Editing or Cloning a Rule was grayed out, but the operation was permitted
  • Fix: Fixes an issue where deleting a Policy Ruleset that is a member of a Policy Ruleset Group was not showing what Policy Ruleset Group it was a member of
  • Fix: Fixes an issue in changing the Policy Ruleset on an Active Gateway where the UI was not showing a full list of available Policy Rulesets
  • Fix: Fixes an issue where phantom events were shown after refresh in Traffic Summary Logs and Events views
  • Fix: Fixes an issue where a Gateway deployment attempt into a NAT Gateway enabled Service VPC would incorrectly fail due to not enough EIPs
  • Fix: Fixes an issue where Security Profiles could not be deleted since they only showed association with Gateways. They could not be deleted because they were associated with Policy Rulesets. Updated the Details view to show whether the Profile is associated with one or more Policy Rulesets.
  • Fix: Fixes an issue where creating a Service Object could fail with error "invalid port value"
  • Fix: Adds additional validation to ensure Policy Ruleset and Gateway feature set compatibility
  • Fix: Fixes an issue where the Gateway IAM role was not being auto-filled when creating a new Gateway in AWS