Skip to main content

Illumio What's New and Release Notes in 25.4

Resolved Issues in 25.4

These release notes describe the resolved issues in this release.

Resolved Issues

Issue

Fix Description

E-129758

Corrected Mapping Issue between Corporate Network and Internet

The issue is resolved. The logic for selecting the initial network with a matching brn and ip_version overlooked introducing the 'Internet' network. This led to the erroneous display of 'Internet' in the traffic user interface even though 'Corporate' was intended.

E-129554

MSP Users Regain Full Access to Policy Generator

MSP users encountered an issue accessing the policy generator due to missing configurations for working_org_id, caused by recent updates in cross-org access.

This is resolved. MSP users can use the policy generator without any interruptions.

E-128999

Correct Timestamps Reported by VEN

An issue arose from incorrect timestamps reported by VEN, leading to inaccurate tables in the PCE database.

This problem affected data integrity and consistency, necessitating a review and update of the timestamp handling mechanism to ensure accurate table generation and reliable data reporting.

E-128872

Improved Policy Selection with Autocomplete Feature

Previously restricted to selecting from 500 initial policies, users can now choose any policy with the added autocomplete functionality.

This update allows dynamic fetching from the full list, enhancing the user experience and streamlining the policy selection process.

E-128723

UI Slowness Issue Resolved in Latest Upgrade

The UI slowness issue reported after the 25.2.12 upgrade has been fixed by no longer waiting for the ruleset_overlapping_rule_search API response on the RuleSet detail page.

This change improved page load times.

E-128375

Rule Coverage for Traffic in Draft Mode with Kubernetes Workloads

Rule Coverage for Traffic in Draft mode was malfunctioning, specifically for Kubernetes Workloads, causing inconsistencies in rule application.

This issue is resolved. It ensures that Rule Coverage operates correctly for Traffic in Draft mode within Kubernetes Workloads.

EYE-128267

Traffic Processing and Cluster Naming Fixes

Two issues were identified and resolved in this update.

  • Reported traffic using the cluster network was mistakenly processed on the PCE with a network belonging to a foreign cluster.

  • The updated container cluster names did not align with the cluster network names.

The fixed version ensures correct network matching and an accurate reflection of container cluster names for improved system behavior.

E-127081

Extended Delay with RuleListEntity Retrieval in /rulesets Endpoint

Previously, the RuleListEntity loading was slow due to repetitive queries to the database for exclusion labels and service accounts. These queries, executed redundantly per rule or rule list, resulted in delays despite the usual static or org-scoped outcomes.

To address this, per-org caching for Exclusion label query results and caching for Service account lookup results were implemented.

This optimization decreased redundant database round-trips, enhancing overall latency, throughput, and policy computation during rule list loading.

E-126363

Approximate Scheduled Times for Label Assignment

Scheduled times are approximate.

Due to system processes, labels may not be assigned to matching workloads precisely when scheduled.

E-114626

Policy Subnet Issue Impairs Endpoint Efficiency

The issue with "use workload subnets" causing provider churn and reducing Workload Endpoint efficiency is resolved.

The policy now operates optimally, enhancing Endpoint efficiency.