Skip to main content

Illumio Core What's New and Release Notes 23.2

PCE Platform

  • In a supercluster environment, member PCEs should be allowed to configure the local syslog server (E-106345)

    In a Supercluster, syslog server cannot be configured for member PCEs (E-106345). The setup of a syslog server can be performed only from the leader PCE.

  • PCE application log files are not rotated (E-105659)

    Some PCE application log files (agent, collector, haproxy) are not rotated, while other files are rotated correctly.

    Workaround: None

  • A large app_stats log file (8GB and more) is continuing to grow (E-95636)

    On some systems, logrotate for the internal log files is sometimes not successful, which causes these files to continue to grow in size.

    Workaround: None

  • XFF not working properly (E-88891)

    The user activity page in the UI reports the LB SNAT IP address instead of the user's IP address from the XFF header even when SNAT IP is configured as a Trusted Proxy. In addition, accessing a non-existent API endpoint also logs the SNAT IP address in audit events instead of the client IP address from the XFF header.

    Workaround: None

  • The agent.activate events are not always classified correctly (E-74682)

    Events generated when an agent is activated (agent.activate events) are categorized inconsistently. Success events are classified as auditable, and failure events are categorized as system_events.

    Workaround: None