Illumio Core What's New and Release Notes 23.2

All Saved Filters Disappear after Running Topology Discovery (E-116829)

After running the Discover the Topology of your Organization option at the Traffic page, and the default graph was created, all previously saved filters would disappear.

NEN 2.6.20 is stuck in "ACL generation pending" (E-116805)

In a configuration with a 2.6.20 NEN paired with a supercluster member on PCE Version 22.5.32-12, running "Generate ACLs" never completed, and only showed the "ACL Generation Pending" message without ever producing an ACL.

Header manipulation issue (E-116114)

Appropriate validation for host header was added to avoid any host header manipulation.

Script needed for default profile recreation and sync migration (E-113855)

A script was needed for default profile recreation and sync migration with release 23.2 and later.

Sudo access for ilo-pce (E-113745)

This issue is fixed, and the command ilo-pce does not require sudo access.

App Group Rule listing is missing Rulesets (E-113259)

Intra-scope rules were not showing up in the App Group rules menu.

report_monitor and traffic_query services flapping on coordinator replica node after OS upgrade (E-113024)

On DX configurations, adding a new CC (Citus Coordinator) node or a new CW (Citus Worker) node to the cluster sometimes caused flapping of some services, such as report_monitor or traffic_query. This flapping occurred because IP restrictions on some current nodes of the cluster did not account for the new node IP addresses.

FQDN 'Provider is not' filter not working (E-112068)

When filtering using an FQDN, only one IP address was being filtered, and not the actual FQDN. Also, many remaining instances of the FQDN that were intended to be excluded from the search were instead being shown.

The Ransomware Dashboard was displaying the same port/process multiple times (E-112055)

This issue is fixed.

Received an empty response when navigating to the CWP (Container Workload Profile) page on the PCE UI (E-111845)

When the default container workload profile was deleted, a blank page was displayed when navigating to that container workload profile page.

The PCE failed to initialize in FIPS mode on RHEL 8.3 or higher with Ruby 3.1.2 (E-111825)

When operating in FIPS mode on EL 8.3 or higher, the PCE could not start on an initial install. A change in the runtime environment introduced this issue, which has now been fixed.

ERROR: cannot DROP TABLE "event_bus_changes" was triggered with pending trigger events (E-111745)

This regression was caused by an optimization introduced to drop a temp table to avoid vacuum buildup.

Performance issue in new PCE UI (E-110920)

Performance issues led to a slow and unresponsive UI experience when using the New PCE UI experience in Chrome and Edge browsers on the Windows operating system.

Reports not being generated to the selected filter (E-110556)

When running a report for a filter with an IP list as a provider, the export CSV file ignored the filter and sent only all traffic.

Ransomware dashboard showed only "No data to display" (E-109441)

After enabling the Ransomware Protection Dashboard, it showed the message "No data to display." This issue is resolved. Now the UI shows "No services tagged with ransomware metadata" when a ransomware-risky service is available.

IP list traffic not appearing in searches (E-108490)

The IP list traffic was not appearing in searches due to the inclusion of an iplist containing an FQDN in query parameters. This led to the inclusion of region_id in the SQL query executed in each region. However, the region_id being passed is the leader's region ID. The issue happened only on a supercluster.