What's New

Table 1. What's New in Version 6.1.0
Feature Description
Configure Business Policy with Pre-NAT IP for LAN Side NAT When creating a new business policy rule you have an " Activate Pre-NAT" option to enable matching with pre-NAT source/destination IP in the case for LAN side NAT flow. Selecting the " Activate Pre-NAT" option allows the business policy to match with both, pre-NAT and post-NAT IPv4 addresses, on the LAN side for the Source IP.
Note: The Pre NAT option is supported for IPv4 and Mixed mode object groups but not for IPv6 object groups.
For additional information, see Configure Business Policy.
DNS Cache Flush Support for Edges The "Flush DNS Cache" remote diagnostic test is introduced to make domain-based business policies more reliable. Currently, even though DNS cache is removed every 10 minutes, only entries with a TTL <=0 are removed. The DPI-based entries are initially cached with a TTL of 24 hours and last at least that long in the cache, preventing new entries from being learnt. This prevents reliable DNS lookups to support domain-based business policies. The Flush DNS Cache test will remove all entries from the cache and helps to free up space for new entries in order that domain-based business policies can be reliable. For additional information, see the " Flush DNS Cache" topic in the " VeloCloud SD-WAN Troubleshooting Guide".
Edge 4100 Edge 4100 is introduced in the 6.1.0 release.
Enhanced Firewall Services Security Reporting You can generate secure SD-WAN Enterprise reports for the analysis of your network. The secure SD-WAN Enterprise report PDF will now include overall Network and Security Summary, IDS/IPS, URL Filtering, and Malicious IP related data collected from all Enhanced Firewall Service (EFS) engines (IDS/IPS, URL Filtering, Malicious IP) if EFS is activated at the customer level. For additional information, see Enterprise Reports and Monitor Enterprise Reports.
Event Migration to ClickHouse Existing events data are migrated from mySQL to Clickhouse and all the new events data is stored in ClickHouse for a duration of 1 year. For additional information, see VeloCloud SASE Global Settings Guide.
High Availability Failover Pre-Emption The High Availability (HA) process chooses the Active Edge device based on which Edge has the most LAN and WAN interfaces. However, this logic can cause frequent and unnecessary failovers if the interfaces frequently go down and come back up (also know as "flapping"). To address this potential issue, a new advanced setting is added to Release 6.1.0: Pre-empt Switchover. When enabled, this setting pre-empts an HA switchover/failover where there is LAN or WAN degradation as long as the Active Edge has at least one WAN port and one LAN interface up. For additional information, see Configure High Availability (HA).
High Availability Standby Monitoring Merged with System Tab A High Availability (HA) site previously had a separate page for monitoring the Standby Edge health statistics under the Edge > Monitor > Standby Edge page. With Release 6.1.0, the Standby Edge tab is merged into the Edge > Monitor > System page. A user can now select between the Active and Standby Edge health statistics. For additional information, see Monitor System Information of an Edge.
Monitor Flow Visibility- Live Mode The Live Mode monitoring feature is supported. The Live Mode monitoring feature enables customers to fetch live flow data to identify and troubleshoot problems. By default, this feature fetches a batch of up to 1000 recent flow records from the Edge or however many flows can be captured within five seconds (default value). The number of flows and the flow capture time can be configured by an Operator.

The Live Mode monitoring gives visibility into Source Port on top of non-live flows. It allows you to select individual or multiple live flows (up to four flows) to monitor and compare their metrics as live time series graphs. For additional information, see Monitor Flow Visibility.

Note: The Live Mode feature is only available for Edges with a version of 6.1 or later and Orchestrator with a version of 6.1 or later. Both Edge and Orchestrator must be on version 6.1 or later.
Multi-Segment OSPF Support The OSPF (OSPFv2, OSPFv3) is now configurable in all segments (global and non-global) at the Profile level. In previous releases, OSPF was configurable only on the global segment.
Note: Edges running lower versions (6.0 and below) will not process OSPF configuration in non-global segments even though OSPF configuration is allowed at the Profile level in the Orchestrator.
For additional information, see Activate OSPF for Profiles.
SD-WAN Client Connector on Edges The SD-WAN Client Connector on Edges allows users to connect to datacenter resources using SD-WAN Edge devices. This feature allows SD-Access clients to connect to SD-WAN. For additional information, see VeloCloud SASE Global Settings Guide.
Symantec WSS PoP to PoP integration VeloCloud SD-WAN introduces the Symantec Web Security Service (WSS) PoP to PoP integration, which supports pre-provisioned Geneve tunnels from VeloCloud Gateways (VCG) to Symantec WSS Gateways in GCP. For additional information, see VeloCloud SASE Global Settings Guide.
Unique WAN MAC Address in High Availability Deployments Customers deploying Virtual Edges in a High Availability topology can retain the original MAC address on the HA Edge's WAN interfaces. This feature joins the previously added Unique MAC Address for the HA Edge LAN interfaces. For additional information, see VeloCloud SASE Global Settings Guide.
VCMP Tunnel Management based on Authentication mode change The behavior of Edge and Gateway is enhanced based on different combinations of authentication mode changes. For additional information, see
Edge Cloud Orchestrator Rebranding As a part of rebranding SASE Orchestrator is renamed to Edge Cloud Orchestrator. To view updated screens, see Using SSO Login for an Enterprise User.
VeloCloud SASE Supportability Enhancements for Edge The following enhancements are implemented for Edges to better troubleshoot the field issues:
  • Packet Capture (PCAP) filters support for Edges. You can now optionally configure filter parameters for the PCAP request through the Edge Diagnostics Bundle page. For additional information, see Request Packet Capture Bundle.
  • Remote diagnostic improvements for IPv4 and IPv6 Route Table Dump tests. Two fields "Preference" and "Order" are newly added to the log output table that helps to check route preference and order.
  • Diagnostic bundle improvements to support longer retention of log files and handling of large core files in the diagnostic bundle.
  • Two new syslog events (BGP_NEIGHBOUR_UP and BGP_NEIGHBOUR_DOWN) are generated when the BGP neighbor goes up or down, respectively. For additional information, see VeloCloud SASE Global Settings Guide.
Wi-Fi Radio Setting The Wi-Fi radio setting for a Profile, is improved to enable selection of dual radio frequency bands (2.4 GHz and 5 GHz). For additional information, see VeloCloud SASE Global Settings Guide.

Release Notes

For information on all the new/modified features for 6.1.0, see the Release Notes.

Previous VeloCloud SD-WAN Versions

To get product documentation for previous VeloCloud SD-WAN versions, contact your VeloCloud SD-WAN representative.