Illumio What's New and Release Notes in 25.4.x

E-131484

Enhanced Stability for Agent-to-Platform Communication

Illumio resolved an issue where the agent service continued using stale connections to Redis replica servers after a Redis restart. This behavior could cause request timeouts.

The fix improves service stability and reduces intermittent request failures that impact agent‑to‑platform communication.

E-129758

Corrected Mapping Issue between Corporate Network and Internet

The issue is resolved. The logic for selecting the initial network with a matching brn and ip_version overlooked the introduction of the 'Internet' network. This led to the erroneous display of 'Internet' in the traffic user interface, even though 'Corporate' was intended.

E-129554

MSP Users Regain Full Access to Policy Generator

MSP users encountered an issue accessing the policy generator due to missing configurations for working_org_id, caused by recent updates in cross-org access.

This is resolved. MSP users can use the policy generator without any interruptions.

E-128999

Correct Timestamps Reported by VEN

An issue arose due to incorrect timestamps reported by VEN, resulting in inaccurate tables in the PCE database.

This problem affected data integrity and consistency, necessitating a review and update of the timestamp handling mechanism to ensure accurate table generation and reliable data reporting.

E-128872

Improved Policy Selection with Autocomplete Feature

Previously restricted to selecting from 500 initial policies, users can now choose any policy with the added autocomplete functionality.

This update allows dynamic fetching from the full list, enhancing the user experience and streamlining the policy selection process.

E-128723

UI Slowness Issue Resolved in Latest Upgrade

The UI slowness issue reported after the 25.2.12 upgrade has been fixed by no longer waiting for the ruleset_overlapping_rule_search API response on the RuleSet detail page.

This change improved page load times.

E-128375

Rule Coverage for Traffic in Draft Mode with Kubernetes Workloads

Rule Coverage for Traffic in Draft mode was malfunctioning, specifically for Kubernetes Workloads, causing inconsistencies in rule application.

This issue is resolved. It ensures that Rule Coverage operates correctly for Traffic in Draft mode within Kubernetes Workloads.

EYE-128267

Traffic Processing and Cluster Naming Fixes

Two issues were identified and resolved in this update.

The fixed version ensures correct network matching and an accurate representation of container cluster names, improving system behavior.

E-127081

Extended Delay with RuleListEntity Retrieval in /rulesets Endpoint

Previously, loading RuleListEntity was slow due to repeated database queries for exclusion labels and service accounts. These queries, executed redundantly per rule or rule list, resulted in delays despite the usual static or org-scoped outcomes.

To address this, per-org caching for Exclusion label query results and Service account lookup results was implemented.

This optimization decreased redundant database round-trips, enhancing overall latency, throughput, and policy computation during rule list loading.

E-126363

Approximate Scheduled Times for Label Assignment

Scheduled times are approximate.

Due to system processes, labels may not be assigned to matching workloads precisely at scheduled times.

E-114626

Policy Subnet Issue Impairs Endpoint Efficiency

The issue with "use workload subnets" causing provider churn and reducing Workload Endpoint efficiency is resolved.

The policy now operates optimally, enhancing Endpoint efficiency.