Illumio Core What's New and Release Notes for 23.5

Performance issue in new PCE UI (E-110920)

Performance issues led to a slow and unresponsive UI experience when using the New PCE UI experience in Chrome and Edge browsers on the Windows operating system. This issue is resolved.

Reports not being generated to the selected filter (E-110556)

When running a report for a filter with an IP list as a provider, the export CSV file ignored the filter and sent only all traffic. This issue is resolved.

Policy decision reported as potentially blocked for deleted workloads but not calculated in UI rules (E-110145)

The draft policy decision returned from the backend was incorrect. It should have been labeled as 'unknown' for flows with deleted workloads. This issue is resolved.

Could not delete or edit the "Default" traffic filter (E-110059)

The default filter was created randomly, without asking users and without giving them an option to change or edit the filter. This issue is resolved. A default query notification was added, which allows the user to remove the default query. The landing page text was also updated to be more descriptive.

UI Policy Rulesets diff page displayed the wrong user (E-110022)

The Policy Version diff page was showing "updated by" and "updated at" values, but the column was incorrectly labeled as "provisioned by". This issue is resolved. The columns are now labeled correctly.

VENs failed to communicate after VEN upgrade in some cases (E-109762)

When a VEN paired to a 23.2.10 or 23.2.11 PCE was upgraded to VEN version 23.2.0, 22.5.0 through 22.5.20, or earlier, the VEN lost connectivity with the PCE. This issue is resolved. For additional important details, log in to Illumio Support and see the Knowledge Base article "Upgraded VENs fail to communicate with the PCE due to an API version mismatch issue".

The flow_monitor service restarted due to an unhandled distribution transaction deadlock (E-109758)

This issue is resolved.

UI was not consistently displaying service names in Traffic Query search results (E-109701)

The Traffic Query UI failed to display labels correctly for ports with assigned service objects. This issue is resolved.

Unable to create FQDN IP Lists (E-109576)

An ‘Invalid IPv4’ error occurred when validating Fully Qualified Domain Names (FQDN) during the creation or modification of IP Lists. This issue is resolved.

Ransomware dashboard showed only "No data to display" (E-109441)

After enabling the Ransomware Protection Dashboard, it showed the message "No data to display". This issue is resolved. Now the UI shows "No services tagged with ransomware metadata" when a ransomware-risky service is available.

Occasional async API failures (E-109356)

The PCE could enter a state where async API calls failed until a PCE restart is performed. This issue is resolved.

PCE performance could degrade (E-109311)

Large amounts of FQDN traffic or large numbers of managed endpoints in the PCE could result in degraded PCE performance. In this situation, the PCE database could experience reference table deadlock. This issue is resolved. Transaction processing has been optimized for this type of traffic.

Could not rename same policy object by changing letter case (E-109292)

Names could not be changed from capital to lowercase for the same policy object, creating an issue when the same label names with different capitalizations were used. This issue is resolved.

Source and destination labels were missing in visualizations (E-109189)

Visualizations in the Explore UI could fail to display labels for source and destination policy objects. There was a non-deterministic issue. This issue is resolved.

The Reports tab was missing in the UI (E-109126)

Access Wizard incorrectly indicated that users with Admin roles could access the Reporting page. This issue is resolved.

Locked out of Workload details (E-109125)

You navigate to the workload Detail page by clicking on a managed workload on the List page. If you then navigate back and click on another managed workload, the page should successfully navigate to the Detail page of the second workload. However, navigating back and clicking on the previous workload was not successful. The navigation flow Workload A > List page > Workload B > List page > Workload A did not display the detail page of workload A. This issue is fixed.

Workload name and labels were updated when VEN modes changed (E-109097)

Workload updates in the UI were sometimes producing the wrong data.  This issue is resolved. To make sure that no stale data is picked from the UI cache, the UI now makes a fresh API call for data each time the page is edited.

The traffic panel in the map showed incomplete results (E-109090)

The map's visualization traffic panel showed only a subset of the outbound process. This issue is resolved.

Version picker options were out of order on the VEN list page (E-108953)

Version picker options in the VEN list were not sorted. This issue is resolved.

Report generation failed for Japanese characters (E-108799)

Report generation was failing when Japanese characters were entered. This issue is resolved.

Service Group did not display more than 50 entries (E-108500)

Service Group was not displaying more than 50 entries. This issue is resolved. Services are now displayed properly.

Traffic from unpaired VENs missing or not available (E-108243)

The VEN traffic was not available to investigate an issue after a VEN was unpaired. This issue is resolved.

SAML ACS URL UI Naming (E-107290)

The ‘Assertion Consumer Service URL’ terminology on the IDP configuration page was incorrect. This issue is resolved.

Ransomware Dashboard always showed a high Protection coverage score (E-106996)

The protection coverage score shown in the dashboard and workload summary pages was 100%, even in an environment with no flow data for some time. This issue is resolved.

Global Admin unauthorized to update Ransomware "Workloads Requiring Protection" (E-105756)

When Global Admins attempt to update the "Workloads Requiring Protection" in Ransomware, their action fails. Global Admins are currently not allowed to update this value.

Explorer/Illumination Plus filter incorrectly interprets flows with an empty label group (E-105503)

When using an empty Label Group as a filter in Explorer or Illumination, the same results were returned as if the filter criteria was "Any Workloads." This issue is now resolved.

Mesh re-rendered repeatedly. Interactions were not working (E-105167)

Hover and brush interactions on Mesh did not work properly, and images were re-rendered repeatedly. This issue is resolved.

Proposed Rules - Status information was hidden (E-105098)

The Proposed Rules status information was hidden by the Ruleset Summary page. This issue is resolved.

App Group not showing for Workload Manager (E-105068)

The workload manager could not see the App Group menu. This issue is resolved.

Standalone PCE was not starting up after service_discovery_encryption_key changed (E-104880)

This issue is resolved. The explanation was added to the PCE Supercluster Deployment Guide in the "Deploy New Supercluster" topic under the section "Verify Supercluster Readiness".

UI displayed PCE support bundles by mistake (E-104708)

UI mistakenly displayed the PCE support bundles as an option under the Troubleshooting menu for the SaaS cluster. This issue is resolved.

Visualizations and reports pages were blank when users created a custom time-saved filter in different time zone formats (E-102528)

This issue is resolved.

Reports page displayed with a blank page when upgrading from v22.4.x to v22.5.0 (E-99327)

When users who had two-label app group filters upgraded from 22.4.x to 22.5.0, a JavaScript error caused reports to display as blank pages. This issue is resolved.

UI Provisioned Policy Versions diff page not displaying full results (E-110021)

The Policy Versions diff table did not allow users, such as auditors and administrators, to view the full changes that were provisioned for the provisioning event. This issue is resolved.

metrics_database_service not starting (E-105498)

The service metrics_database_service was not starting. This issue is resolved.

Visualization failed with 403 in Microsoft Edge (E-102491)

When using visualizations, pages would sometimes fail to load with the Microsoft Edge browser. The same pages load only after subsequent attempts. This issue is resolved. The pages now load properly using the Microsoft Edge browser.

Occasional async API failures (E-95932)

The PCE could enter a state where async API calls fail until a PCE restart is performed. This issue is resolved.