https://cybertoolchain.io/tools/aviatrix New releases and features in Aviatrix, tracked by The Cyber Toolchain. en Thu, 17 Sep 2026 00:00:00 GMT https://docs.aviatrix.com/docs/enterprise/latest/reference/release-notices/what-is-new/what-is-new-controller#10-1-0 https://docs.aviatrix.com/docs/enterprise/latest/reference/release-notices/what-is-new/what-is-new-controller#10-1-0 Thu, 17 Sep 2026 00:00:00 GMT Aviatrix 10.1.0 adds FIPS 140-3 IPsec, end-to-end VRF multi-tenancy, DCF East-West L7 inspection, Premium IPS feeds, and Flexible Gateway Deployment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Security > Distributed Cloud Firewall > IPS > Rule Feeds` (labeled `ET Pro` in CoPilot) as a Premium IPS feed applied alongside custom Suricata rulesets, with traffic actions governed by severity thresholds in the active IPS Profile.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DCF intra-cluster enforcement for EKS, enabled per-cluster from CoPilot under `Security > Distributed Cloud Firewall > Settings > Intra-Cluster`, supporting Calico, Cilium, Antrea, AWS VPC CNI (v1.14+), Weave Net, and Canal. • Adds VRF for multi-tenancy (end-to-end propagation) across transit-to-transit peering, BGP-spoke-to-transit peering, and intra-group backup links; enabled by a Controller feature flag (off by default) plus per-attachment opt-in, supporting up to 200 network domains. • Adds Flexible Gateway Deployment (private subnet, no public IP), enabled per gateway group at creation time on AWS (including GovCloud) and Azure, via CoPilot and Terraform. • Adds FIPS 140-3 validated IPsec data plane as a separate FIPS-validated gateway build; existing gateways must be replaced (not toggled) to enter FIPS mode. • Adds DCF East-West Layer 7 inspection for AWS, with symmetric routing enabled per spoke group in CoPilot or Terraform, also reducing cross-AZ data transfer cost and latency. • Adds DCF Spoke Local Breakout, recording the egress path taken in every DCF log entry; requires Single IP SNAT (or customized SNAT), the 10.1 gateway image, and a supported instance size on Aviatrix Transit (FireNet) and AWS TGW centralized topologies. • Adds DCF Quick Time-to-Value dashboard with a system-defined, Aviatrix-managed read-only threat intelligence ruleset (defaults to Watch Mode) and ten Recommended Security Control cards covering ToR traffic, sanctioned-country traffic, cleartext legacy protocols, cryptomining pools, and outbound proxy/relay; requires Controller 8.2+ and CoPilot 4.37. • Promotes Kubernetes Discovery and SmartGroups to general availability, enabling DCF rules to enforce policy across both Kubernetes Pods/Services and VM workloads. • Promotes DCF CSP Exclusion List to general availability. • Adds Universal Installer for the Aviatrix OpenVPN Client. • Adds independent gateway instance sizing, allowing a single instance to be resized from CoPilot at `Cloud Fabric > Gateways > (transit or spoke) > gateway group > Instances` tab without affecting HA or the group default size; surfaces 'Multiple Sizes' label when a group has diverged. • Adds Azure v6 instance support for gateways on Controller 10.1.0 and later. • Adds AZ Affinity Across Transit, enabled per peering (disabled by default) on AWS same-region HPE peerings. • Adds opt-in AWS inter-region jumbo frame support for transit peering (AWS only, excluding partitions such as AWS GovCloud that do not support jumbo frames). • Adds GCP Global VPC Regional Spoke Egress (Phase 2), letting operators choose which regions egress locally vs. through FireNet, with both modes coexisting in the same Global VPC; CoPilot Egress page now shows Global VPCs in a nested tree displaying each region's egress mode. • Adds SNAT and HPE support on Azure spokes with subnet groups for both HPE and non-HPE deployments, configurable via the existing Controller API/CLI or Terraform. • Adds AKS onboarding with Microsoft Entra ID, with Controller auto-detecting the Entra ID setting on the AKS cluster. • Adds DCF for Private Kubernetes Clusters (Preview), enabled per cluster in CoPilot or Terraform, supporting EKS, AKS, and GKE; requires an Aviatrix spoke gateway in the same VPC with a security-group rule allowing TCP port 443 to the Kubernetes API server. • Adds Make Before Break Gateway Replacement (Preview), preserving the gateway's external IP through cut-over so partners and firewalls need no reconfiguration, with automatic eligibility checking per gateway. • Adds Smart Gateways Phase 3 (Preview) covering transit gateways, Edge as Spoke, Edge as Transit, and BGP spoke gateways, controlled by three tiered feature flags (fabric-wide kill switch, per-group underlay flag, per-group route-resolver flag) all off by default. Breaking changes: • Private Mode is fully removed; deployments still on Private Mode cannot upgrade in place and must be rebuilt as Flexible Gateway deployments. • Controller UI features formerly managed in the Controller UI are now managed exclusively from CoPilot; onboarding flows for new and existing deployments now route through CoPilot. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/latest/reference/release-notices/what-is-new/what-is-new-controller#10-1-0 https://docs.aviatrix.com/docs/enterprise/latest/reference/release-notices/what-is-new/what-is-new-controller#10-1-0 Thu, 17 Sep 2026 00:00:00 GMT Aviatrix 10.1.0 adds FIPS 140-3 IPsec, end-to-end VRF multi-tenancy, DCF East-West L7 inspection, Premium IPS feeds, and Flexible Gateway Deployment.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Security > Distributed Cloud Firewall > IPS > Rule Feeds` (labeled `ET Pro` in CoPilot) as a Premium IPS feed applied alongside custom Suricata rulesets, with traffic actions governed by severity thresholds in the active IPS Profile.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds DCF intra-cluster enforcement for EKS, enabled per-cluster from CoPilot under `Security > Distributed Cloud Firewall > Settings > Intra-Cluster`, supporting Calico, Cilium, Antrea, AWS VPC CNI (v1.14+), Weave Net, and Canal. • Adds VRF for multi-tenancy (end-to-end propagation) across transit-to-transit peering, BGP-spoke-to-transit peering, and intra-group backup links; enabled by a Controller feature flag (off by default) plus per-attachment opt-in, supporting up to 200 network domains. • Adds Flexible Gateway Deployment (private subnet, no public IP), enabled per gateway group at creation time on AWS (including GovCloud) and Azure, via CoPilot and Terraform. • Adds FIPS 140-3 validated IPsec data plane as a separate FIPS-validated gateway build; existing gateways must be replaced (not toggled) to enter FIPS mode. • Adds DCF East-West Layer 7 inspection for AWS, with symmetric routing enabled per spoke group in CoPilot or Terraform, also reducing cross-AZ data transfer cost and latency. • Adds DCF Spoke Local Breakout, recording the egress path taken in every DCF log entry; requires Single IP SNAT (or customized SNAT), the 10.1 gateway image, and a supported instance size on Aviatrix Transit (FireNet) and AWS TGW centralized topologies. • Adds DCF Quick Time-to-Value dashboard with a system-defined, Aviatrix-managed read-only threat intelligence ruleset (defaults to Watch Mode) and ten Recommended Security Control cards covering ToR traffic, sanctioned-country traffic, cleartext legacy protocols, cryptomining pools, and outbound proxy/relay; requires Controller 8.2+ and CoPilot 4.37. • Promotes Kubernetes Discovery and SmartGroups to general availability, enabling DCF rules to enforce policy across both Kubernetes Pods/Services and VM workloads. • Promotes DCF CSP Exclusion List to general availability. • Adds Universal Installer for the Aviatrix OpenVPN Client. • Adds independent gateway instance sizing, allowing a single instance to be resized from CoPilot at `Cloud Fabric > Gateways > (transit or spoke) > gateway group > Instances` tab without affecting HA or the group default size; surfaces 'Multiple Sizes' label when a group has diverged. • Adds Azure v6 instance support for gateways on Controller 10.1.0 and later. • Adds AZ Affinity Across Transit, enabled per peering (disabled by default) on AWS same-region HPE peerings. • Adds opt-in AWS inter-region jumbo frame support for transit peering (AWS only, excluding partitions such as AWS GovCloud that do not support jumbo frames). • Adds GCP Global VPC Regional Spoke Egress (Phase 2), letting operators choose which regions egress locally vs. through FireNet, with both modes coexisting in the same Global VPC; CoPilot Egress page now shows Global VPCs in a nested tree displaying each region's egress mode. • Adds SNAT and HPE support on Azure spokes with subnet groups for both HPE and non-HPE deployments, configurable via the existing Controller API/CLI or Terraform. • Adds AKS onboarding with Microsoft Entra ID, with Controller auto-detecting the Entra ID setting on the AKS cluster. • Adds DCF for Private Kubernetes Clusters (Preview), enabled per cluster in CoPilot or Terraform, supporting EKS, AKS, and GKE; requires an Aviatrix spoke gateway in the same VPC with a security-group rule allowing TCP port 443 to the Kubernetes API server. • Adds Make Before Break Gateway Replacement (Preview), preserving the gateway's external IP through cut-over so partners and firewalls need no reconfiguration, with automatic eligibility checking per gateway. • Adds Smart Gateways Phase 3 (Preview) covering transit gateways, Edge as Spoke, Edge as Transit, and BGP spoke gateways, controlled by three tiered feature flags (fabric-wide kill switch, per-group underlay flag, per-group route-resolver flag) all off by default. Breaking changes: • Private Mode is fully removed; deployments still on Private Mode cannot upgrade in place and must be rebuilt as Flexible Gateway deployments. • Controller UI features formerly managed in the Controller UI are now managed exclusively from CoPilot; onboarding flows for new and existing deployments now route through CoPilot. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 25 Jun 2026 00:00:00 GMT Aviatrix CoPilot 4.34.0 adds Transit Egress config exposure, Access Control card, and Site2Cloud SDN metric. • Exposes full Transit Egress configuration options (subnet selection and gateway-level settings) in CoPilot UI, previously Controller-only. • Adds `CoPilot Access Control` card with strategy selector for greenfield vs legacy deployments and CAM terminology removal. • Shows tooltip listing all gateways included in a maintenance window entry on the **Upcoming** and **Runs** tabs. • Displays SDN metric in the **Site2Cloud** connection detail view for additional routing context. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-9.0.10 https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-9.0.10 Mon, 22 Jun 2026 00:00:00 GMT Aviatrix Controller 9.0.10 makes the database migration timeout user-configurable during upgrades. • The database migration timeout during Controller upgrade is now user-configurable instead of hard-coded at 15 minutes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 01 Jun 2026 00:00:00 GMT Aviatrix CoPilot 4.33.0 adds upgrade workflows in Administration > Maintenance, DCF logging visibility for serverless workloads, gateway Security Rules tabs, and SNAT/DNAT ru • Adds `Administration > Maintenance` pages to consolidate Controller and gateway upgrade workflows, including upgrade groups, readiness checks, and backup/restore. • Adds serverless workload details (VPC/VNet, Region, Cloud Account, Type) to Source and Destination Workload columns in DCF logging via an info icon tooltip. • Adds a new accordion UI for DCF audit changes providing structured diff views for policy modifications. • Adds a `Security Rules` tab on the `Gateways` page and `Transit Egress` page to display DCF rules enforced on each gateway, plus an `Enforcement on Gateway` setting card. • Adds priority and move controls to reorder SNAT and DNAT rules, enabling user-controlled priority assignment for both Customized SNAT and DNAT rules. • Moves TLS inspection and WebGroup URL filtering from Preview to General Availability; TLS Profiles now support configurable enforcement levels for SNI Verification (strict or permissive). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-9.0.0 https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-9.0.0 Tue, 12 May 2026 00:00:00 GMT Aviatrix Controller 9.0 adds DCF IPS, East-West TGW inspection, K8S discovery, IPv6 Phase 2, ActiveMesh 4.0 Phase 2, S2C on scaled transit, and Edge image upgrades. • `aviatrix_spoke_gateway` and related resources gain `private_route_table_config` to explicitly select Azure route tables for DCF egress SNAT • Adds DCF IPS (Intrusion Prevention System) with Suricata inline detection/prevention and TLS decryption modes (IPS Only, TLS Decrypt Only, IPS + TLS Decrypt) • Adds DCF East-West inspection for AWS TGW environments by inserting spoke gateways into the traffic path without re-architecture • Kubernetes workload discovery is now enabled by default for SmartGroup policy enforcement • ActiveMesh 4.0 Phase 2 enables dynamic HPE toggle at gateway group level with mixed HPE/non-HPE support during transition • First-hop VRF support allows overlapping CIDRs from multiple S2C connections via kernel VRF namespace isolation on Transit Gateway • Proxy ID configuration for route-based Site2Cloud tunnels enables specific local/remote traffic selectors instead of default 0.0.0.0/0 • S2C is now supported on horizontally scaled (Smart Gateway) transit groups with 3 or more gateways • Dell R470 hardware platform is added for AEP Edge with 25G NIC support • Image upgrade for self-managed and Equinix Edge Gateways is supported without deleting the gateway from the Controller • FireNet supports per-firewall Panorama template and template stack for heterogeneous configurations within the same FireNet gateway • Azure FireNet firewall management interfaces are scoped to Aviatrix Controller IP, replacing open 0.0.0.0/0 rules • Default route propagation from Transit FireNet to Edge Spoke gateways is enabled • Centralized Security Hub VPC for AWS is available via API only, auto-provisioning VPC infrastructure including GWLB and endpoint services • DCF enforcement is extended to Edge gateways (Spoke and Transit) with L4/L7 filtering and TLS decryption capabilities • BGPoLAN is now available in Azure China (21Vianet) • DCF Policy Audit provides structured diffs and change attribution for DCF entities, exportable via API • DCF extends SmartGroups and policies to serverless resources including AWS Lambda, ECS/Fargate, Azure Functions, Container Apps, GCP Cloud Functions, and Cloud Run Breaking changes: • GCP Regional VPCs now use the Spoke Gateway for local egress by default for all workloads instead of requiring `avx-snat-noip` tagging • Azure VNET local egress no longer auto-detects route tables; administrators must explicitly select them via `private_route_table_config`, causing plan drift in existing Terraform configs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 29 Apr 2026 00:00:00 GMT Aviatrix CoPilot 4.32.0 adds Transparent Inspection for AWS TGW, Power Cycle types, Manual Gateway power controls, vCPU metrics API, vCPU alerting, Proxy ID support, explicit • Adds **Transparent Inspection** configuration for inter-VPC traffic in AWS Transit Gateway (TGW) networks • Adds **Power** cycle type to **Auto Cycles**, allowing scheduled power up/down with per-cycle start and end times • Adds **Power Up** and **Power Down** actions on the **Gateways** page for manual gateway lifecycle management • Exposes per-gateway **vCPU utilization metrics** through the **Metrics API** for external monitoring integration • Enables alerting configuration based on **per-gateway vCPU utilization** thresholds • Adds **Proxy ID** configuration support for routed external connections to enable third-party VPN interoperability • Enhances **DCF UI** with improved management controls for URL-based WebGroups, Encryption Certificates, TLS Profiles, and Custom CA imports • Adds **explicit Azure route table selection** for Single IP SNAT on spoke gateways, replacing implicit detection with direct assignment via **Edit VPC/VNet Route Tables** control • Supports **selective egress NAT** for Bump-in-the-Wire (BITW) deployments in AWS, automatically determining internet-bound traffic for NAT while preserving east-west flows Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 24 Mar 2026 00:00:00 GMT Aviatrix CoPilot 4.31.0 adds VPC CIDR overlap detection and DCF ruleset managed-by indicators • Adds VPC overlapping CIDR tracker to identify IP address conflicts across multicloud networks. • Adds AWS Transit Gateway (TGW) peering attachments view on the Gateway Details page. • Adds 'Managed By' column to Distributed Cloud Firewall (DCF) Rulesets page to show Terraform or CRD origin. • Enables selection of multiple templates and template stacks per firewall in FireNet Vendor Integration. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 03 Feb 2026 00:00:00 GMT Aviatrix CoPilot 4.29.0 adds Auto Right-Sizing for all gateways, maintenance windows, multiple TLS profiles per DCF rule, and enhanced VM/K8s context in Monitor • Auto Right-Sizing is now available for all gateways, allowing proactive resizing without waiting for recommendations. • Any gateway can now be added to a maintenance window to schedule upgrades and minimize impact. • Non-CoPilot rulesets are now locked from modification to protect externally managed configurations. • The Distributed Cloud Firewall (DCF) Monitor UI now displays enriched workload context for VMs (Name, VPC/VNet, Region, Cloud Account) and Kubernetes workloads (Cluster Name, Node Name, Pod Name, Namespace/Service). • DCF rules now support associating multiple TLS profiles to a single rule. Breaking changes: • Rulesets that are not created by CoPilot can no longer be modified. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 22 Dec 2025 00:00:00 GMT Aviatrix CoPilot 4.28 adds Intrusion Log subtab in DCF Monitor and TLS controls for remote logging. • Adds an `Intrusion Log` subtab under `Security > Distributed Cloud Firewall > Monitor` for IDS Phase 2 (Preview) visibility • Adds dedicated TLS toggle and certificate upload/validation controls for remote rsyslog profiles in the UI • Reorganizes `Cloud Assets` menu into `Cloud Workloads` and `Cloud Networks` categories with Kubernetes Clusters and Serverless support Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-8.2.0 https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/controller/controller-rn-8.2.0 Mon, 22 Dec 2025 00:00:00 GMT Aviatrix Controller 8.2.0 adds OCI DCF support, FlightPath 2.0, TLS profiles, hierarchical policies, and more. • Adds `FlightPath 2.0` for deep, topology-aware troubleshooting with CAI metrics and hop-by-hop path visualization • Extends Distributed Cloud Firewall (DCF) to Oracle Cloud Infrastructure (OCI), allowing rule enforcement on OCI gateways • Adds TLS Profile Extensions for DCF, enabling per-rule TLS profiles and multiple custom CA bundles for origin certificate validation • Introduces Hierarchical (MultiWriter) Policy via Terraform for distributed policy management and RBAC • Enhances logging with configurable session-level logging options in Session Profiles, including duration, bytes transferred, and stage attributes • Adds Controller CA Rotation capability for zero-downtime rotation of the Controller's internal CA certificate • Updates Terraform provider to support IPv6 constructs, Smart Gateway settings, IPS profiles, advanced SNAT/DNAT options, hierarchical policy attachments, and logging/TLS profile objects • Enables DCF policy enforcement and SmartGroup discovery for Kubernetes private clusters • Changes default IPsec ciphers to NIST-recommended AES-256-GCM and deprioritizes weak ciphers • Adds BGPoLAN Gateway Resizing, allowing dynamic downsizing of AWS BGPoLAN gateways without service disruption • Enables Preview: IPv6 Capability Phase 1 for dual-stack networking across Controller, CoPilot, AWS, and Azure • Enables Preview: Active Mesh 4.0 Phase 1 with primary gateway lifecycle control, dynamic HPE toggle, and Make-Before-Break upgrade pipeline • Enables Preview: Smart Gateways Phase 1 with BGP-LU underlay and Controller offload capabilities • Enables Preview: Suricata-based IPS with customizable rulesets, external threat feeds, and Terraform/API automation • Enables Preview: Policy Audit Enhancement with structured diffs, change attribution, and API export • Enables Preview: DCF Serverless Rule Support for AWS Lambda discovery and Smart Group-based policy application • Enables Preview: Bump-in-the-Wire mode for AWS TGW + Cloud WAN for inter-VPC traffic inspection without TLS decryption Breaking changes: • Gateway audit status indicators have been fully removed from the UI and API • The historical default deny bootstrap rule has been relocated into the user-manageable ruleset; legacy allow/deny bootstrap rules may be safely removed after confirming equivalent policy coverage • Legacy FQDN Filtering is deprecated; users must migrate to Distributed Cloud Firewall (DCF) FQDN/URL Filtering via WebGroups • The legacy Stateful Firewall is deprecated; users must migrate to Distributed Cloud Firewall (DCF) Stateful Rules via SmartGroups • ThreatIQ is deprecated; users must migrate to Distributed Cloud Firewall (DCF) ThreatGroups with integrated threat intelligence • Geo Blocking is deprecated; users must migrate to Distributed Cloud Firewall (DCF) GeoGroups with country-level filtering Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 13 Aug 2025 00:00:00 GMT Aviatrix CoPilot 4.24.0 adds upgrade group ordering, Kubernetes SmartGroup labels, and detailed VPC routes. • Adds an 'Order' column to the Administration > Upgrade > Upgrade Groups page to control multi-group upgrade sequences • Enables creating Kubernetes SmartGroups using 'Kubernetes Node' attributes for label-based selection • Adds a 'Show Detailed Routes' action in Diagnostics > Cloud Routes > VPC/VNet Routes to view non-summarized route lists • Allows skipping gateway upgrades that are already at the target version via the 'Prepare for Upgrade' card in Administration > Upgrade > Upgrade Plan • Adds 'Account' (default) and 'Billing ID' columns to Cloud Resources > Cloud Assets pages for VPCs/VNets & Subnets and Virtual Machines Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 24 Jul 2025 00:00:00 GMT Aviatrix CoPilot 4.23.0 adds saved views for Native Peering and Cloud Assets, plus new TGW columns and WebGroup navigation • Adds the ability to save custom views and filters in *Networking > Connectivity > Native Peering* to manage large-scale peering deployments. • Adds a *Manage View* page to *Cloud Resources > Cloud Assets* that supports saving custom views, persisting column filter settings, and pinning the first column during horizontal scrolling. • Adds TGW ID, Account, and Cloud columns to the *Networking > Connectivity > AWS TGW* page for deeper context on Transit Gateway connections. • Enables navigation from WebGroups in *Security > Distributed Cloud Firewall > Policies* rules to their details pages, and allows links in *Groups > WebGroups* to return to the *Policies* page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 23 Jun 2025 00:00:00 GMT Aviatrix CoPilot 4.22.0 adds Megaport MVE GA support, egress protection workflow, and alert notification bulk actions • Megaport Virtual Edge (MVE) is now a General Availability feature for Edge Transit Gateways when used with Controller release 8.0. • Adds the ability to perform bulk actions on alert notifications in the CoPilot UI. • Adds an Actions list and a Views list to the Alert Notifications interface. • Updates the Details pane for alerts in the Notification feature. • Distributed Cloud Firewall (DCF) is now enabled by default in CoPilot without an additional license or cost. • Network Insights API is now enabled by default in CoPilot without an additional license or cost. • The Add-On Features list has been removed from Settings > Configuration > License due to the licensing change for DCF and Network Insights API. • Network Insights API, Cost IQ, and Billing Insights (legacy) can be turned on or off from Settings > Configuration > General. • Distributed Cloud Firewall can be turned on or off from Distributed Cloud Firewall > Settings. • The Egress Protection Workflow automatically creates SmartGroups and WebGroups for VPCs/VNets and trusted domains when protection is enabled. Breaking changes: • The Add-On Features list has been removed from Settings > Configuration > License. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 27 May 2025 00:00:00 GMT Aviatrix CoPilot 4.21 adds Egress Security Score preview and self-service K8s resource discovery • Adds `Egress Security Score` under *Security > Egress > Overview* to visually display VPC/VNet egress protection status (Unprotected, Monitored, Partially Protected, Fully Protected) • Updates `Auto Right-Sizing` to consider Azure local temporary disks for gateway size recommendations • Enables self-service activation of `Discovery of Kubernetes Resources` via *Settings > Configuration > License > Add-on Features* and *Groups > Settings > Discovery of Kubernetes Resources* Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 01 May 2025 00:00:00 GMT Aviatrix CoPilot 4.20.0 adds maintenance windows for auto right-sizing, custom AEP management CIDR, and overall health visualization. • Adds a 'Resize' button in **Cloud Fabric > Scaling > Auto Right-Sizing** to schedule gateway resizing during a custom maintenance window with configurable start time, recurrence (daily, weekly, monthly), and duration. • Enables specification of a custom Management Interface CIDR when adding or editing an Edge device on the Aviatrix Edge Platform (AEP). • Adds an **Overall Health** section under **Settings > Resources > System Health** with color-coded bar charts and status labels (Up, Degraded, Down) for Controller and CoPilot. • Allows selecting multiple threat types and severity levels when creating or editing an ExternalGroup with **Threat Feeds** as the resource type. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 01 Apr 2025 00:00:00 GMT Aviatrix CoPilot 4.19.0 adds Controller IP Access UI, SNI toggle for DCF rules, and Equinix/Megaport gateway updates • Adds ability to add CIDR blocks directly via `Settings > Configuration > General > Security > Controller IP Access` in the CoPilot UI • Adds SNI verification toggle when creating or editing Distributed Cloud Firewall (DCF) rules • Enables adding additional WAN interfaces to existing Equinix Edge Transit Spoke gateways • Allows disabling ActiveMesh for transit peering with Megaport Edge gateways • Renames `Remote Gateway` to `Remote Device` in External Connections (S2C) • Adds ability to update or dismiss alerts directly from the Alert details view Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 07 Mar 2025 00:00:00 GMT Aviatrix CoPilot 4.18.0 adds UI Usage Analytics opt-in and Controller service restart from System Health. • Adds a `UI Usage Analytics` option in Settings > Configuration to collect user interaction data with an explicit opt-in mechanism • Enables restarting individual Controller services directly from the System Health page via the Monitor field Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 12 Feb 2025 00:00:00 GMT Aviatrix CoPilot 4.17.0 adds IP whitelist management, DCF Kubernetes support, ExternalGroups, health views, and conntrack alerts • Adds `Settings > Configuration > General > Security` section for managing the CoPilot IP Access List to whitelist allowed IP addresses. • Enables Aviatrix Distributed Cloud Firewall (DCF) support for Kubernetes clusters via automated networking, security, and Kubernetes-based SmartGroups in DCF rules. • Introduces the ExternalGroups feature for creating named groups for access controls and security policies across multiple resource types via DCF, including Azure SaaS, GitHub, threat feeds, and country restrictions. • Provides a comprehensive Controller & CoPilot Health view with graphs for System, Application, and Network health, service health reporting, and metric alert configuration. • Adds Conntrack Allowance Available and Conntrack Usage Rate as new metrics supported by the Alert System for monitoring connection tracking resource utilization. Breaking changes: • Controller and CoPilot Metrics have been moved from the Performance page and are now found in `Settings > Resources > System Health`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 19 Dec 2024 00:00:00 GMT Aviatrix CoPilot 4.16.0 adds Hostname SmartGroup support, custom DNS resolution for non-HTTP/S, and auto right-sizing controls. • Adds `Hostname` resource type to SmartGroups so you can create SmartGroups based on hostnames instead of IP addresses. • Adds the `DNS Server for Hostname Resolution` card under Groups > Settings to select a custom DNS server or the Gateway's default for resolving SmartGroup hostnames in non-HTTP/HTTPS traffic. • Adds enable/disable toggle for the Auto Right-Sizing feature via Cloud Fabric > Scaling > Auto Right-Sizing > Auto Right-Sizing Settings dialog. Breaking changes: • Security > Egress > Monitor is renamed to FQDN Monitor (Legacy). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 14 Nov 2024 00:00:00 GMT Aviatrix CoPilot 4.15 adds Microsoft SSE external connections, Azure ARM spoke peering, and GCP Global VPC for FireNet egress. • Adds `Microsoft SSE Solution` to the `External Connections To` dropdown under Networking > Connectivity > External Connections (S2C) • Supports `Azure ARM Spoke` attachment through `Native Peering` on CoPilot • Enables configuring `GCP Global VPC` on `Gateways > Settings` for FireNet Egress • Adds `Enable Local Egress on VPC/VNets` button on `Security > Egress > Egress VPC/VNets` • Allows accepting auto-resizing recommendations in `Cloud Fabric > Scaling` to immediately implement gateway right-sizing • Automatically selects the single available cloud account in the `Upgrade Controller Wizard` when only one is accessible Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 08 Oct 2024 00:00:00 GMT Aviatrix CoPilot 4.14.0 renames Cloud Fabric > Edge to Hybrid Cloud with a new URL path • Renames the Cloud Fabric > Edge page to Cloud Fabric > Hybrid Cloud and changes its URL from /cloud-fabric/edge/... to /cloud-fabric/hybrid-cloud/... Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 04 Sep 2024 00:00:00 GMT Aviatrix CoPilot 4.13.0 adds SmartGroup cloning, gateway details pages, and persistent DCF auto-refresh • Adds `Clone SmartGroup` option under Groups > SmartGroups vertical ellipses menu to duplicate a group configuration • Adds `Details` view (with General Information, BGP, Subnet Information, and Certs Info tabs) for Transit, Spoke, and Specialty Gateways on Cloud Fabric > Gateways Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 08 Aug 2024 00:00:00 GMT Aviatrix CoPilot 4.12.0 adds Manage Gateway Attachments window and saved views for External Connections • Adds a Manage Gateway Attachments option on Cloud Fabric > Gateways to add or delete transit and spoke gateway attachments • Allows saving filtered views of the External Connections (S2C) table on Networking > Connectivity Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 17 Jul 2024 00:00:00 GMT Aviatrix CoPilot 4.11.1 adds a View vCPU Breakdown dialog for gateway core usage analysis. • Adds a `View vCPU Breakdown` button on the Performance page graph (Monitor > Performance) that opens a dialog showing min/max/avg core usage percentages per gateway and a per-day/time graphical view. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 27 Jun 2024 00:00:00 GMT Aviatrix CoPilot 4.11.0 adds Gateway Instance Sizing report and Aviatrix Secure Edge on Megaport support. • Adds 'Gateway Instance Sizing Recommendations' report under Administration > Reports, outputting in JSON format. • Adds UX for deploying Aviatrix Secure Edge on Megaport Virtual Edge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 31 May 2024 00:00:00 GMT Aviatrix CoPilot 4.10.0 adds controller image upgrades via UI and unmanaged VM visibility in topology. • Adds the ability to perform a Controller image upgrade directly from the CoPilot UI • Shows Unmanaged VMs in the Topology view for Controller versions earlier than 7.1 Breaking changes: • Existing Alerts configured on renamed Network Interface and Connection Status interfaces will not work until updated with new names; e.g., AWS `eth1` is now `eth-tgw0`, `eth2` is `eth-fn0`, and Azure/GCP/OCI `eth1` is now `eth-fn0`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 30 Apr 2024 00:00:00 GMT Aviatrix CoPilot 4.9.0 adds direct gateway navigation from topology, packet count metrics, and updated edge resource properties. • Adds `View Gateway` button in Topology side panel to open Cloud Fabric > Gateways details • Adds `Packet Count` option in Monitor > FlowIQ > Overview View By dropdown with Total Packet Count card • Adds Instance ID, Site ID, and Managed fields to Edge resources Properties panel in Topology • Renames Insane Mode field to High Performance in Edge resources Properties panel Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 08 Apr 2024 00:00:00 GMT Aviatrix CoPilot 4.8.0 adds the GA Network Insights API and Controller Diagnostics tool in the UI. • The Aviatrix Network Insights API is now GA, supporting Prometheus and JSON formats for network metric data retrieval. • A new Diagnostics Tool on the *Diagnostics > Diagnostic Tools* page runs comprehensive controller reports including routes, NTP, DNS, SSH, IPsec, and other services. • The Gateway Diagnostics page now offers an option to run Controller diagnostics alongside existing Gateway diagnostics. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 11 Mar 2024 00:00:00 GMT Aviatrix CoPilot 4.7.0 adds multi-account IAM/Audit actions, UserVPN diagnostics, billing report views, and job status toasts. • Adds UserVPN Diagnostics option to the More action menu in the UserVPN gateway list for Cloud Fabric > UserVPN • Enables bulk IAM policy updates and account audits on multiple cloud accounts via Actions menu on Cloud Resources > Cloud Account page • Introduces Summary, Usage Breakdown, and Billing Breakdown views in the Cloud Fabric > Aviatrix Billing > Report tab • Displays job result status (success or failure) directly in toast pop-up messages during background jobs with a link to Monitor > Notifications > Tasks Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 26 Jan 2024 00:00:00 GMT Aviatrix CoPilot 4.6.0 introduces Gateway Group Upgrade and fixes CSV export bugs • Adds the `Gateway Group Upgrade` feature at **CoPilot > Administration > Upgrade** to group gateways (by region, cloud, or type) and configure priority-based upgrade sequences. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/vpn-client/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/vpn-client/index Wed, 10 Jan 2024 00:00:00 GMT Aviatrix VPN Client 2.17.7 adds Ubuntu 20/22 support and includes updated Windows TAP driver. • Adds native support for Ubuntu 20.04 and 22.04 operating systems • Bundles Windows TAP driver v9.24.7 with the client installer Breaking changes: • Support for Ubuntu 18.04 has been deprecated and is no longer available in this release Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 22 Dec 2023 00:00:00 GMT Aviatrix CoPilot 4.5.0 adds Geo-blocking preview, spoke-to-spoke attachment management, and view persistence. • Adds `Geoblocking` feature under ThreatIQ in Preview mode • Adds `Spoke-to-Spoke` gateway attachment management • Adds `Spoke-to-Egress Transit` FireNet gateway attachment management • Enables creating, editing, and deleting views on the *Aviatrix CoPilot > Security > Distributed Cloud Firewall → Monitor* tab • Enables saving and preserving views on the *Aviatrix CoPilot > Monitor > Performance* page • Adds ability to view both managed and unmanaged VPCs in the Topology Network View Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 24 Oct 2023 00:00:00 GMT Aviatrix CoPilot 4.3.0 adds alerts for gateway DOWN/KEEPALIVE_FAIL states and a Geo View in the Topology map. • Adds ability to configure alerts based on the number of gateways in the DOWN or KEEPALIVE_FAIL state • Adds a `Geo View` selection to the `Topology > Overview` page showing all cloud network constructs on a geographic map • Adds a `Performance` tab to the `CoPilot > Cloud Fabric > Gateways > Transit/Spoke Gateways` page for telemetry statistics • Adds ability to configure a subnet group for Spoke Gateways when configuring FireNet Gateway policies for Microsoft Azure • Redesigns the `CoPilot > Dashboard` with separate sections for network health and resources, adding cards for Gateway Health, Connection Health, Detected Intrusions, CoPilot Health, Controller Health, Threats view, Threats list, and Alerts list Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 22 Sep 2023 00:00:00 GMT Aviatrix CoPilot 4.2.0 adds UserVPN support and new percentage-based alert metrics. • Adds `UserVPN` feature to configure VPN gateways, profiles, users, and authentication against AWS SSO, Azure AD, and Centrify. • Adds percentage-based metric conditions for alerts: `per_bandwidth_egress_limit_exceeded`, `per_bandwidth_ingress_limit_exceeded`, `per_conntrack_limit_exceeded`, `per_linklocal_limit_exceeded`, `per_pkt_drop`, `per_pkt_fail`, `per_pps_limit_exceeded`, `per_rx_drop`, `per_rx_errs`, `per_tx_drop`, and `per_tx_errs`. • Adds support for Dell R450 hardware in Aviatrix Secure Edge platform. • Moves the option to enable 'Old Topology Experiences' to **CoPilot > Settings > Configuration** page, adding the **Old Topology Experiences** toggle. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 24 Aug 2023 00:00:00 GMT Aviatrix CoPilot 4.1.0 adds AWS TGW orchestration, VPC/VNet central view, and FlowIQ quick filters • Adds the ability to create an AWS Transit Gateway (TGW) and orchestrate attachments via *CoPilot > Networking > Connectivity > AWS TGW* • Introduces a central VPC/VNet inventory page at *CoPilot > Cloud Resources > Cloud Assets > VPC/VNets & Subnets* with Aviatrix managed status • Adds automatic quick filter generation for host IP addresses and port numbers in the FlowIQ Filter dialog Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Fri, 21 Jul 2023 00:00:00 GMT Aviatrix CoPilot 4.0 adds VM visibility, Secure Egress wizard, native VPC peering, and in-product Controller management. • Adds the 'CoPilot > Cloud Resources > Cloud Assets > Virtual Machines' page to view all cloud VMs and create SmartGroups (max 20 VMs per group). • Adds a Getting-Started Workflow Wizard for Secure Egress traffic rules with preview support for WebGroups, TLS Decryption, and IDS options. • Adds in-product capability to perform native peering for CSP VPCs via the 'CoPilot > Networking > Connectivity > Native Peering' page (requires Controller build > 7.1.1577). • Enables uploading and updating Aviatrix Controller certificates from the 'Controller Certificate' card in 'CoPilot > Settings > Configuration'. • Adds 'Install Patches' card in 'CoPilot > Settings > Maintenance > Upgrade' to apply software patches to Aviatrix Controller. • Allows enabling Controller Security Group Management via the 'Controller Security Group Management' card in 'CoPilot > Settings > Configuration > Security'. • Allows enabling CoPilot Security Group Management via the 'CoPilot Security Group Management' card in 'CoPilot > Settings > Configuration > Security'. • Adds configuration options for Controller IP Access, DNS Server, WAF, Tunnel, FIPS 140-2, Session Timeout, and Logging Services through dedicated UI cards. Breaking changes: • The top-level 'AirSpace' menu option is renamed 'Cloud Fabric'. • The top-level 'Troubleshooting' menu option is renamed 'Diagnostics'. • The 'Distributed Firewalling' page is renamed 'Distributed Cloud Firewall'. • The 'Distributed Firewalling > Policy Monitor' page is renamed 'Distributed Cloud Firewall > Monitor'. • The 'Asset Visibility' page is renamed 'Cloud Assets'. • The 'Connectivity' page has moved to 'CoPilot > Networking'. • The 'Anomaly Detection' page has moved to 'CoPilot > Security'. • FlowIQ Overview, Trends, and Geo pages now show only the most recent 120 days of data; historical data earlier than this must be accessed via the Flows and Records tabs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 28 Jun 2023 00:00:00 GMT Aviatrix CoPilot 3.14.0 adds controller patching, native VPC peering, backup/restore, image migration, SMTP/configurable alert recipients, and metric_info to webhooks • Adds `metric_info` field to CoPilot webhook payloads for triggered alerts. • Adds `CoPilot > AirSpace > Connectivity > Native Peering` page for CSP VPC peering. • Adds `Install Patches` card in `CoPilot > Settings > Maintenance > Upgrade` for applying software patches. • Adds `Back Up Controller` and `Restore Controller` cards in `CoPilot > Settings > Maintenance > Back Up & Restore`. • Adds `Upgrade Controller Image` card in `CoPilot > Settings > Maintenance > Upgrade` for image migration. • Adds configurable alert email recipients (e.g., `Security Events`, `Critical Alerts`) in `CoPilot > Monitor > Notifications > Settings`. • Adds `SMTP Service` card in `CoPilot > Monitor > Notifications > Settings` to configure SMTP server for alerts. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot-images/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot-images/index Thu, 15 Jun 2023 00:00:00 GMT Aviatrix CoPilot OCI image v3.0.0 applies CIS hardening and updates base software to 3.12.1 • OCI image version 3.0.0 now includes CIS hardening • Base software version updated to 3.12.1 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 14 Jun 2023 00:00:00 GMT Aviatrix CoPilot 3.13 adds VPC/VNet creation in UI, Global Memory Swap Surge alerts, and enhanced diagnostic tools. • Adds `CoPilot > Monitor > Cloud Networks` page for creating and deleting VPC/VNets directly from the UI • Adds `Global Memory Swap Surge` alert to monitor gateway virtual machines when swap memory (mem_swapped) is more than 0B and total memory exceeds 1GB • Adds ability to run `ping`, restart services (`CloudXD`, `PERFMON`, `rsyslog`), and view command/event logs via `CoPilot > Troubleshoot > Diagnostic Tools` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 31 May 2023 00:00:00 GMT Aviatrix CoPilot 3.12.0 adds vertical scaling for SNAT-enabled gateways, custom webhook auth headers, and per-user UI time zone configuration • Supports setting a custom authorization header in CoPilot webhook requests to integrate with downstream third-party alerting systems • Allows users to configure a display time zone for the UI via the user profile menu Breaking changes: • The Monitor > Traffic & Latencies > Latency Monitor view with Classic Experience enabled is removed and superseded by the CoPilot > Monitor > Traffic & Latencies > Latencies page. • The Monitor > FlowIQ view with Classic Experience enabled is removed and superseded by the CoPilot > Monitor > FlowIQ > Overview page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Mon, 22 May 2023 00:00:00 GMT Aviatrix CoPilot 3.11.0 introduces new diagnostic capabilities and improved help content. • Adds Gateway, Connectivity and BGP Diagnostic tools to CoPilot Troubleshoot > Diagnostic Tools menu • Adds in-app help content for SmartGroups feature accessible via question mark icon Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot-images/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot-images/index Fri, 12 May 2023 00:00:00 GMT Aviatrix CoPilot v3.10.0 for AWS China x86 applies CIS hardening and bumps appliance version to 3.0.0. • Applies CIS hardening in the AWS China x86 image • Increases appliance version from 2 to 3.0.0 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 11 May 2023 00:00:00 GMT Aviatrix CoPilot 3.10.0 adds Edge HA creation, Distributed Firewalling with WebGroups, GCP Global VPC routing, and L4 firewall support on Secure Edge. • Adds `CoPilot > AirSpace > Edge` page to create edge high availability (HA) gateways • Adds `WebGroups` support for defining Domains and URLs in Distributed Firewalling (DFW) rules within `CoPilot > Security > Distributed Firewalling` • Adds GCP Global VPC Routing (Global Spoke) configuration option in `CoPilot > AirSpace > Gateways > Settings page` • Adds L4 firewall capabilities on Aviatrix Secure Edge to define policies using CIDR, IP addresses, ports, and protocols • Adds `event.threatIqInfo` field to ThreatIQ webhook alerts containing affected gateway name in addition to threat IP Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Tue, 25 Apr 2023 00:00:00 GMT Aviatrix CoPilot 3.9.0 adds FireNet configuration UI, CSV gateway exports, and backup time-range selection. • Adds `CoPilot > Security > FireNet` page to configure FireNet settings • Enables CSV export for gateway summary details via the `CoPilot > AirSpace > Gateways > Overview page` • Adds time range selection for CoPilot data backups in `CoPilot > Settings > CoPilot Management` Breaking changes: • The memory_free metric is removed from alert configuration options; alerts now use memory_available. • Custom timezones are deprecated and will be removed; Controller must be set to UTC timezone for CoPilot 3.9+ compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 05 Apr 2023 00:00:00 GMT Aviatrix CoPilot 3.8.0 adds gateway upgrades via UI, SAP-services discovery, Packet Drop Rate metrics, and Metric API authentication. • Adds the `Metric API` authentication feature to retrieve network metric data across your Aviatrix data plane • Enables selection of `Packets Drop Rate` and Packets Drop Rate(%) options for Performance Metric Settings, Gateway Alert Configuration, and Manual Scaling Policy Settings • Adds SAP-Services Discovery Enablement as a configurable feature (disabled by default) • Adds gateway upgrade capability on the `CoPilot > Gateways > Gateway Management` page Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Sun, 19 Mar 2023 00:00:00 GMT Aviatrix CoPilot 3.7.1 adds Global Control Plane/Network Health alerts, multi-metric webhook fields, and user visibility controls. • Adds `Global Control Plane Health` alert to monitor Controller and CoPilot VM resources (CPU, memory, disk). • Adds `Global Network Health` alert to monitor Gateway instances for packet drop rates or down status. • Introduces `CoPilot > Administration > User Access page` for setting navigation menu permissions and creating Controller user groups. • Adds new webhook payload fields: `alert.defId`, `alert.metrics`, `alert.version` (always 'v2'), `alert.query`, and `event.condition`. • Separates alert notification channel configuration to the `CoPilot > Monitor > Notifications > Recipients page` with webhook preview. • Enables setting egress-traffic rule conditions for selected VPC/VNets on the `CoPilot > Security > Egress page`. Breaking changes: • Pre-existing alert configurations monitoring Controller host AND other hosts for health/network metrics had the Controller host removed; if Controller was the only monitored host, the configuration was removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Wed, 22 Feb 2023 00:00:00 GMT Aviatrix CoPilot 3.6.0 adds gateway pages, multi-condition alerts, and date picker for data migration • Adds a new page in *CoPilot > Gateways* for launching specialty (regular) and edge gateways • Adds a new page for establishing Site2Cloud (S2C) and external connections • Enables specifying multiple conditions when defining alert configurations • Adds a date picker to the data migration process to select the start time for migrating data indices Breaking changes: • In Gateways > Scaling configuration and Distributed Firewalling configuration pages, the field *Wait Time* is renamed to *Evaluation Period* Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/vpn-client/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/vpn-client/index Thu, 02 Feb 2023 00:00:00 GMT Aviatrix VPN Client 2.16.42 adds Ubuntu 22.04 support and fixes connection termination issues. • VPN client now supports Ubuntu 22.04 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index https://docs.aviatrix.com/docs/enterprise/10.1/reference/release-notices/release-notes/copilot/index Thu, 19 Jan 2023 00:00:00 GMT Aviatrix CoPilot 3.5.2 adds Scheduled Auto Scaling, Private Mode proxy support, and a new Cloud Accounts page with audit settings. • Adds `Scheduled Scaling` policy creation for gateway HA instances (scale out/in) based on time periods. • Enables configuration of `HTTP or HTTPS proxy settings` in `CoPilot > Settings > Configuration` for Private Mode deployments. • Introduces the `Cloud Accounts page` (`CoPilot > Cloud Resources > Cloud Accounts`) with `Audit Settings` for regular background health audits and email notifications. • Adds `Amount for Time Period` field to Shared Services in CostIQ (`CoPilot > Billing & Cost > CostIQ > Shared Services tab`). • Allows disabling/enabling `SAP Discovery` via `CoPilot > Settings > Configuration > General tab`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/aviatrix