What's New for APIs in 26.3.1
Here's a summary of changes in this release.
Note
The properties all_ips_except_for_in_consumers and all_ips_except_for_in_providers are available only in releases 26.30.x.
Change to the Schema optional_features_put
The following value has been added to the optional_features_put schema:
[ "agent_policy_delivery_metrics" ]
The agent_policy_delivery_metrics entry enables the collection and reporting of agent policy delivery performance metrics.
Change to the schema vens_get
The vens_get response now includes additional workload-level properties that provide visibility into the most recently delivered security policy:
security_policy_last_delivered_at
Date-time (UTC) indicating when the PCE last delivered a security policy to the VEN. Use this field to verify policy freshness and delivery timing.
security_policy_last_delivered_num_cidrs
An integer representing the total number of IP addresses or CIDR ranges included in the last delivered policy. This metric reflects the scope of network coverage.
security_policy_last_delivered_num_rules
An integer representing the number of rules in the last delivered policy. This value helps assess the size and complexity of the policy.
These properties improve observability by exposing key policy delivery metadata directly in the vens_get response, enabling better monitoring and troubleshooting of policy distribution.
Change to the Schema workloads_get
The workloads_get response now includes additional agent status properties that expose metadata about the most recently delivered security policy, along with enhanced agent health details:
security_policy_last_delivered_at
Date-time (UTC) indicating when the PCE last delivered a security policy to the VEN. Use this field to verify policy freshness and delivery timing.
security_policy_last_delivered_num_cidrs
An integer representing the total number of IP addresses or CIDR ranges included in the last delivered policy. This metric reflects the breadth of network scope applied to the workload.
security_policy_last_delivered_num_rules
An integer representing the number of rules in the last delivered policy. This value helps assess policy size and complexity for the workload.
agent_health
Represents agent health status and error details.
type: array of objects
Each object includes:
token (string) – A unique, machine-readable error identifier string (sub-type), falling back to agent_error. Allows SIEMs or scripts to easily parse, filter, and categorize specific agent health issues without parsing text.
message (string) – A human-readable, detailed plain-text error message describing the issue.
Adding a token and a message to the agent_health array improves error resolution. Instead of agent failures, administrators can now programmatically categorize errors via the token and understand how to fix them using the message.
New Device Configurability Flag
This release introduces a new configurable attribute in the API to indicate whether a device can be configured via Illumio.
The configurable field is a Boolean property that indicates whether the device can be managed and configured programmatically. Integrations and API consumers can use this flag to determine device capabilities and adjust workflows accordingly.
{
"configurable": true
}The key benefit of the flag is that it provides clear visibility into device manageability, enabling integrations to conditionally apply configuration logic only to supported devices.