Illumio Core What's New and Release Notes for 23.5

API being made available to integrators.

This API was changed so that the property risky_ports_by_category was added to support the widget "Risky ports by type" in the UI.

"risky_ports_by_category": {
	  "description": "Risky ports by Port type",
	  "type": "object",
	   "properties": {
		"admin": {
			"$ref": "num_protected_unprotected_ports.schema.json"
		},
		"legacy": {
			"$ref": "num_protected_unprotected_ports.schema.json"
		}
	}
}

This API was changed so that besides the number of Managed Workloads, the following two other properties were added:

Data is presented with the granularity of day, week, month, and quarter, where the default is day.

{
	"$schema": "http://json-schema.org/draft-04/schema#",
	"type": "array",
	"items": {
	   "type": "object",
	   "required": [
		"property"
		],
	   "properties": {
		"property": {
		   "description": "The property for which time series 
                     data is requested.",
		   "type": "string",
		   "enum": [
		   "num_managed_workloads",
		   "ransomware_protection_coverage_percent",
		   "num_workloads_by_exposure"
		   ]
		},

Previously, the schema contained the integer count on the end date of the counted period. This item was removed:

"count": {
	   "description": "The integer count on the end 
              date of this period.",
	   "type": "integer"
	   },
	"unit": {
	   "description": "The unit of the value returned.",
	   "type": "string"        
          },

This API now gives the percentage of the end date of the counted period.

This API is now referencing the schema num_workloads_by_exposure_time_series.

 "data": {
   "oneOf": [
   {
	"$ref": "../../../agent/schema/v2/num_workloads_by_
           exposure_time_series.schema.json"
   },
   {
	"count": {
		"description": "The integer count on the 
                  end date of this period.",
		"type": "integer"
		}
	},
	{
	"percentage": {
		"description": "The percentage on the end 
                  date of this period.",
		"type": "number",
		"minumum": 0,
		"maximum": 100
		}
	}
]

This schema is referenced from workloads_risk_details_get to supply the required service data:

In release 23.5, additional information about the operating systems has been added for the ransomware service: Windows and Linux.

{
	"properties": {
	    "os_platforms": {
		"description": "Operating system for this ransomware service",
		"type": "array",
		"minItems": 1,
		"items": {
		    "type": "string",
		    "enum": [
		    "windows",
		    "linux"
		]
	    }
	}
    }
}

In this API, a new array rule_edges was added, which provides a list with a placeholder for each requested source and destination pair.

The previous object rules is replaced with a reference to "$ref": "#/definitions/rule_href_mapping", and the previous array edges is replaced with a reference to "$ref": "#/definitions/rule_edges".

"rule_edges": {
	"type": "array",
	"description": "A list with a placeholder for each requested 
           source and destination pair",
	"items": {
	   "type": "array",
	   "description": "A list with with a placeholder for 
            each requested service 
                         (per source and destination pair)",
	"items": {
	   "type": "array",
	   "description": "A list of indexes of matching rules 
                         (for each service per source and 
                           destination pair)",
	"items": {
	   "type": "string",
	   "pattern": "^[0-9]+$"
	   }
     }
}

In 23.5, This API was changed so that an optional feature flag for Windows outbound process was added: windows_outbound_process_enforcement.

	"properties": {
		"name": {
		"description": "Name of the feature",
		"type": "string",
		"enum": [
			"ip_forwarding_firewall_setting",
			"ui_analytics",
			"illumination_classic",
			"ransomware_readiness_dashboard",
			"per_rule_flow_log_setting",
			"lightning_default",
			"collector_scanner_filters",
			"corporate_ips_groups",
			"labels_editing_warning_for_enforcement_mode",
			"label_based_network_detection",
			"cloudsecure_enabled",
			"windows_outbound_process_enforcement"
		]
	    },	

This feature flag can be enabled or disabled using the following CURL command:

curl -u ${your_api_key}: ${your_api_secret} -H "Content-Type: application/json" -X PUT -d '[{"name":"windows_outbound_process_enforcement","enabled":true}]' https://${your_pce_server}:8443/api/v2/orgs/${your_ord_id}/optional_features
		

where you can define the part of the command: "enabled":true or "enabled":false.

For this API, these changes have been made:

	"metadata": {
		"$ref": "
		../common/kubernetes_workloads_
                   metadata.schema.json"