Aviatrix CoPilot

No entries match these filters. Clear filters

1. New and Enhanced Features in 4.38.0 Oct 15, 2026 · issue 110

   CoPilot 4.38.0 adds login banner configuration, route approval email alerts, and Site2Cloud hostname group links in notifications.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢ ⤢
   • Adds login banner configuration in CoPilot for customizing the authentication screen.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds route approval email alerts to notify administrators when routes require approval.
   • Delivers upgrade experience enhancements for the gateway upgrade workflow.
   • Delivers gateway grid and routing enhancements.
   • Delivers Distributed Cloud Firewall enhancements.
   • Adds login banner configuration in CoPilot for customizing the authentication screen.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds route approval email alerts to notify administrators when routes require approval.

   3 more in Everything

2. docs update Sep 24, 2026 · issue 084

   Aviatrix CoPilot gains Cloud Routes: a unified multicloud routing visibility and diagnostics hub under Diagnostics > Cloud Routes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Trace which gateways propagate a specific subnet across your multicloud network, then immediately run a packet capturepacket captureA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. on the offending gateway to investigate traffic.
   📍1. In CoPilot, go to Diagnostics › Cloud Routes. 2. Click the Gateway Routes tab. 3. In the subnet filter, enter the target CIDR (e.g. 10.10.5.0/24) to list every gateway propagating that subnet. 4. Click the Gateway Diagnostics icon in the row of the suspect gateway. 5. Select PACKET CAPTURE, set the host and port filters, choose the interface, click Start, then Stop, then Download to retrieve the pcap file for Wireshark analysis.
   Verify BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. route advertisement from an on-prem site into the cloud without logging in to the cloud provider console.
   📍1. In CoPilot, go to Diagnostics › Cloud Routes. 2. Click the BGP Info tab. 3. Review Advertised routes to confirm the expected prefixes are being sent to the remote site, and Learned routes to see what the on-prem site is advertising back. 4. Use the connection map to confirm the correct gateway, local ASN/IP, and remote ASN/IP are configured.
   • Adds Cloud Routes under CoPilot > Diagnostics > Cloud Routes to view all routing information for managed resources across multicloud and on-prem (Site2Cloud) connections in a single place.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Gateway Routes tab showing tunnel information, route state (up/down), and per-gateway routing tables for all Aviatrix gateways managed by the Controller, with filtering by gateway name, subnet, or IP address.
   • Adds VPC/VNet Routes tab showing routing tables for all VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules./VCNs across any cloud provider, filterable by route table name, subnet, or IP address.
   • Adds External Connections tab displaying data-center-to-cloud tunnel status, connected gateway, remote IP, and tunnel type, with links to Topology and FlowIQ.
   • Adds BGP Info tab showing advertised and learned BGP routes plus a visual map of each BGP connection including local ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses./IP, connection name, remote ASN/IP, and the gateway the session is established on.

   +1 more show less

   • Adds gateway diagnostics launchable directly from the Gateway Routes tab, supporting PING, TRACEROUTE, TRACEPATH, TRACELOG (uploads to Aviatrix Support), Test Connectivity (TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. to a specified host and port), ACTIVE SESSIONS, INTERFACE STATS, PACKET CAPTURE (with pcappcapA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. download for Wireshark), and SERVICE ACTIONS.

   6 details in Everything

3. docs update Sep 24, 2026 · issue 084

   Aviatrix VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. Client 3.0.2 adds a Universal binary for macOS (Intel + Apple Silicon) and extends Ubuntu support to 26.04.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds a Universal binary macOS installer that runs natively on both Intel and Apple Silicon (ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead.) Macs, eliminating the Rosetta 2 requirement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Extends Ubuntu support to include Ubuntu 26.04 (alongside 22.04 and 24.04).
   • Adds a Universal binary macOS installer that runs natively on both Intel and Apple Silicon (ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead.) Macs, eliminating the Rosetta 2 requirement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. build of VPN Client 3.0.2 requires the VPN gateway's UserVPN CA to use an RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. key of at least 2048 bits; gateways on Controller versions earlier than 8.2 (or Controller 8.2 whose UserVPN CA has not been rotated) may have a 1024-bit CA, which the FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. validated module will refuse — rotate the UserVPN CA before upgrading.
   • !Ubuntu 20.04 support is deprecated in VPN Client 3.0.2.
4. docs update Sep 24, 2026 · issue 084

   Aviatrix CoPilot adds a Security > Egress > Overview tab with Egress Security Score and VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. protection status (requires Controller 8.0 + DCF).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Review your egress posture score and jump to remediation after enabling DCF on Controller 8.0.
   📍In CoPilot, go to Security › Egress › Overview, review the Egress Security Score card, then click Manage VPC/VNets to open the Egress VPC/VNets tab and apply protection to any Unprotected or Monitored VPC/VNets.
   • Adds the Security > Egress > Overview tab (requires Controller 8.0 and DCF enabled) showing an Egress Security Score card, a score-calculation explanation dialog, and a Protected VPC/VNets breakdown (Unprotected, Monitored, Partially Protected, Protected, No Egress, Unknown).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds the Egress Security Score Explained dialog, accessible via Learn More on the Overview tab, detailing how scores are assigned to VPC/VNets based on their protection status.
   • Adds a Manage VPC/VNets shortcut on the Egress Security Score card that navigates directly to the Egress VPC/VNets tab for managing protection.

   3 details in Everything

5. New and Enhanced Features in 4.37.0 Sep 10, 2026 · issue 071

   CoPilot 4.37.0 adds Transit GatewayTransit GatewayAn AWS-managed network hub that connects VPCs and on-premises networks through a single gateway, replacing complex peering meshes and giving cyber tools a central point to route or inspect cross-network traffic. horizontal scaling, DCF IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. rule feeds, Kubernetes onboarding GA, CSRCSRA Certificate Signing Request is a block of encoded data submitted to a certificate authority, containing a public key and identity details, so the CA can issue a signed TLS certificate without ever seeing the private key. generation, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   • Introduces Transit Gateway Horizontal Scaling for scaling out transit gateway capacity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Distributed Cloud Firewall IPS Rule Feeds for managing intrusion prevention rule feeds in DCF.
   • Adds a Distributed Cloud Firewall Value Dashboard for visualizing DCF security value and coverage.
   • Makes Kubernetes Cluster Onboarding Enforcement on Clouds and DCF on Kubernetes generally available.
   • Adds Certificate Signing Request (CSR) Generation capability within CoPilot.

   +6 more show less

   • Extends Packet Capture availability to Controller 10.0.
   • Redesigns VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. Routing and Private Route Tables for improved network routing visibility and management.
   • Decouples FireNet from a single gateway, enabling more flexible FireNet deployments.
   • Introduces Gateway Start and Stop controls for managing gateway lifecycle.
   • Adds Egress, SNAT, and Peering enhancements for more flexible traffic management.
   • Improves Table Views and Notifications for a more actionable operational experience.
   • Introduces Transit Gateway Horizontal Scaling for scaling out transit gateway capacity.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds Distributed Cloud Firewall IPS Rule Feeds for managing intrusion prevention rule feeds in DCF.
   • Adds a Distributed Cloud Firewall Value Dashboard for visualizing DCF security value and coverage.
   • Adds Certificate Signing Request (CSR) Generation capability within CoPilot.
   • Introduces Gateway Start and Stop controls for managing gateway lifecycle.

   6 more in Everything

6. changelog Aug 19, 2026 · issue 050

   CoPilot 4.36.0 adds Session Count and Logging columns to the security rules tab for gateways.

   ⤢ ⤢ ⤢ ⤢
7. docs update Aug 14, 2026 · issue 045

   Aviatrix CoPilot adds Cloud Routes for centralized multicloud routing visibility and gateway diagnostics

   • New Cloud Routes feature accessible at CoPilot > Diagnostics > Cloud Routes provides a central view of all routing information across the Aviatrix transit network, including multicloud and on-prem Site2Cloud connections, without requiring logins to individual cloud provider consoles.
   • New Gateway Routes tab shows tunnel information, route state (up/down), and detailed routing tables for all Aviatrix gateways across clouds, with filtering by gateway name, subnet, or specific IP address.
   • New VPC/VNet Routes tab displays routing tables for all VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules./VCNs across any cloud provider, with filtering by route table name, subnet, or IP address.
   • New External Connections tab shows data center connections into the cloud, including tunnel status, connected gateway, remote IP address, and tunnel type, with links to Topology and FlowIQ.
   • New BGP Info tab shows BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. connections from on-prem into the cloud, including advertised routes, learned routes, and a connection map showing gateway, local ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. and IP, connection name, and remote ASN/IP.

   +1 more show less

   • New gateway diagnostics panel in Cloud Routes supports PING, TRACEROUTE, TRACEPATH, TRACELOG (uploads directly to Aviatrix Support), Test Connectivity (TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it./UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. to a specified host and port), ACTIVE SESSIONS (filterable by port or search criteria), INTERFACE STATS, PACKET CAPTURE (filter by host, port, time, source/destination address/port, protocol, flags; download as pcappcapA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. for Wireshark), and SERVICE ACTIONS (check and restart gateway services).

   6 details in Everything

8. docs update Aug 14, 2026 · issue 045

   Aviatrix VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. Client 3.0.2 adds a Universal macOS binary with native Apple Silicon support, dropping the Rosetta 2 requirement.

   • Aviatrix VPN Client 3.0.2 macOS installer is now a Universal binary running natively on both Intel and Apple Silicon (ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead.), eliminating the Rosetta 2 dependency.
   • Adds Ubuntu 26.04 support to the VPN Client alongside existing Ubuntu 22.04 and 24.04 support.
   • FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. compliant encryption is now supported in the VPN Client, with SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider.-based authentication (Okta, Duo, and other SAML identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.) available across Windows, macOS, and Ubuntu.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. build of VPN Client 3.0.2 requires the VPN gateway's UserVPN CA to use an RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it. key of at least 2048 bits — gateways on Controller versions earlier than 8.2, or Controller 8.2 gateways whose UserVPN CA has not been rotated since upgrade, may use a 1024-bit CA (common on Controllers originally initialized on Aviatrix 7.1 or earlier) and will fail client certificate verification. Rotate the UserVPN CA to RSA 2048-bit before upgrading.
   • !Ubuntu 20.04 support is deprecated in VPN Client 3.0.2.
9. docs update Aug 14, 2026 · issue 045

   Aviatrix CoPilot adds Egress Security Score dashboard with VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware./VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. protection breakdown under Security > Egress > Overview

   ⤢ ⤢ ⤢
   • Adds Security > Egress > Overview tab (requires Controller 8.0 and DCF feature enabled) showing an Egress Security Score card, a score-calculation explainer dialog, and a Protected VPC/VNets breakdown chart.
   • New Egress Security Score card displays a calculated protection score for VPC/VNets and links to the Egress VPC/VNets tab via a Manage VPC/VNets action.
   • New Protected VPC/VNets card breaks down cloud-account VPC/VNets into Unprotected, Monitored, Partially Protected, Protected, No Egress, and Unknown states.

   3 details in Everything

10. New and Enhanced Features in 4.36.0 seen Aug 14, 2026 · issue 045

    CoPilot 4.36.0 adds AZ Affinity, Symmetric Routing, VRFVRFA Virtual Routing and Forwarding instance is a router feature that maintains multiple independent routing tables on one device, letting a cyber tool isolate traffic flows or simulate separate network segments without extra hardware.-aware Network Segmentation, Kubernetes intra-cluster orchestration status, updated Controller bell notifications, FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. UI compliance, and serverless missing-permissions visibility.

    ⤢ ⤢ ⤢ ⤢
    • Adds AZ Affinity, Symmetric Routing, and T-Shirt Instance Sizing controls for Gateway Management.
    • Adds VRF support in Network Segmentation, enabling VRF-aware policy across segmented networks.
    • New Kubernetes Intra-Cluster Orchestration Status view surfaces the health and state of intra-cluster traffic orchestration.
    • Updated Controller Bell Notifications bring alerting improvements to the CoPilot notification center.
    • Adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. 140-3 compliance indicators in the CoPilot UI.

    +1 more show less

    • New Missing Permissions Visibility for Serverless Functions surfaces IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access./permission gaps for serverless workloads directly in CoPilot.

    6 details in Everything

11. 4.36.0 Aug 13, 2026 · release notes

    Aviatrix CoPilot 4.36.0 adds Session Count and Logging columns to gateway security rules tab.

12. 4.16.0 Dec 19, 2024 · release notes

    Aviatrix CoPilot 4.16.0 adds Conntrack Allowance Available and Usage Rate alerting

    └──▷ HOW TO FIND IT
    Set up notifications when conntrack entries approach their limit on a gateway instance.
    📍In the Aviatrix CoPilot console, navigate to the Alerting section and enable Conntrack Allowance Available for your gateways.
    Monitor real-time conntrack consumption to anticipate saturation before connections are dropped.
    📍In the Aviatrix CoPilot console, navigate to the Alerting section and enable Conntrack Usage Rate for your gateways.
    • Adds the ability to configure alerts for Conntrack Allowance Available threshold.
    • Adds the ability to configure alerts for Conntrack Usage Rate metrics.

    2 details in Everything