Release date: March 13, 2025
Note: Starting with this release, Infrastructure Assurance has
transitioned from semantic versioning to calendar versioning for its version
numbers. Therefore, the current version number is 25.1.0, with the previously
released version number being 9.0.1.
Platform
New Features:
- Technology preview of Live DDI Analytics—Infrastructure Assurance v25.1.0 offers a free technology preview of the Live DNS, DHCP, and IP Address Management (DDI) Analytics add-on feature. Live DDI Analytics is an interactive reporting and analytics add-on feature that enables you to explore, visualize, and interact with your DDI environment. For details, see Technology preview of Live DDI Analytics.
- ServiceNow CMDB integration—Starting in v25.1.0, Infrastructure Assurance supports additional configuration options that allow you to ensure that the correct Configuration Management Database (CMDB) configuration item (CI) is populated automatically in the ServiceNow incidents. For details, see ServiceNow Integration.
-
Enhancements to the Scheduled Tasks tab—The Scheduled Tasks tab
contains the following usability improvements:
- Ability to view jobs scheduled in the future (up to a maximum of 5 weeks) by using the navigation arrows, along with a back arrow to return to the current week in the Calendar view.
- Ability to edit scheduled jobs from the calendar itself.
- Ability to filter the list of jobs by using the All, Upcoming, and Completed buttons in the page.
- Ability to export all, completed, or upcoming jobs (based on the selected filter) as a CSV file to your computer.
- Ability to view alerts generated for devices during a change.
For details, see Schedule Tasks.
- Enhancements to manifest reports to simplify their interpretation. For details, see Enhancements to Manifest reports.
- Automatic archiving of resolved alerts—Starting in v25.1.0, issues that have been in Resolved state for more than 30 days (default) are automatically archived. The archiving process runs as a background task every 24 hours (1440 minutes), by default. You can customize the duration (in hours) after which you want the issues to be archived and the archiving interval (in minutes), if required. For details, see Archived Issues.
- Integration with LiveNX—Starting in v25.1.0, Infrastructure Assurance v25.1.0 supports integration with LiveNX v25.1.0 and later, enabling the storage of alerts (generated in Infrastructure Assurance) in the LiveNX database. For details, see LiveNX Integration.
Deployments:
- Starting in v25.1.0, Infrastructure Assurance can be installed using an ISO image for GEN5 appliances. For details, see Installation using an ISO Image.
New devices and releases:
Infrastructure Assurance v25.1.0 introduces support for Panorama Log Collector, in addition to the existing support for Panorama devices. For details, see Palo Alto Networks.
Knowledge
New Features:
- Support for ping probe—Infrastructure Assurance v25.1.0 supports a ping probe to monitor the availability of network devices proactively by sending ICMP ping request packets to specific IP addresses. This feature is currently available only for BlueCat and Check Point devices. For details, see Ping Probes.
BlueCat
-
Integrity
-
New auto-detect elements:
-
BlueCat DNS/DHCP Servers (BDDS): Check power supplies from IDRACs
-
BDDS: DNS forwarding not working
-
BlueCat Address Manager (BAM): Audit_queue DB table too large
-
-
-
Edge Service Point devices
-
Ability to perform DNS lookup tests for multiple domains. For details, see DNS Probes.
-
Check Point
-
GAiA
-
CLM log rate monitoring alert, with graphing support for capacity planning
-
SecureXL drop template used alert, with support for drop counters displaying the current count
-
-
Maestro
-
Parity with Check Point GAiA
-
New/Updated CVE Rules:
Cisco ASA
| Severity | CVEs |
|---|---|
| Critical | CVE-2024-20329 |
| High | CVE-2024-20260, CVE-2024-20268, CVE-2024-20402, CVE-2024-20408, CVE-2024-20426, CVE-2024-20494, CVE-2024-20495 |
| Medium | CVE-2024-20297, CVE-2024-20299, CVE-2024-20331, CVE-2024-20341, CVE-2024-20370, CVE-2024-20382, CVE-2024-20384, CVE-2024-20443, CVE-2024-20481, CVE-2024-20485, CVE-2024-20493 |
F5
| Severity | CVEs |
|---|---|
| High | CVE-2024-45844, CVE-2025-20029, CVE-2025-20045, CVE-2025-20058, CVE-2025-21087, CVE-2025-21091, CVE-2025-22846, CVE-2025-22891, CVE-2025-23239, CVE-2025-23412, CVE-2025-24312, CVE-2025-24320, CVE-2025-24326, CVE-2025-24497 |
| Low | CVE-2025-23415 |
Fortinet
| Severity | CVEs |
|---|---|
| Critical | CVE-2024-55591 |
| High | CVE-2024-35279, CVE-2024-40591, CVE-2024-46668, CVE-2024-46670, CVE-2024-48884, CVE-2024-48886, CVE-2025-24472 |
| Medium | CVE-2024-26011, CVE-2024-36504, CVE-2024-46666, CVE-2024-54021 |
| Low | CVE-2024-33510, CVE-2024-46665, CVE-2024-46669, CVE-2024-52963 |
Palo Alto Networks
| Severity | CVEs |
|---|---|
| High | CVE-2024-2550, CVE-2024-2551, CVE-2024-3393, CVE-2024-5911, CVE-2024-8686, CVE-2024-9468, CVE-2025-9472 |
| Medium | CVE-2024-0012, CVE-2024-2552, CVE-2024-5916, CVE-2024-5918, CVE-2024-5919, CVE-2024-5920, CVE-2024-8687, CVE-2024-8688, CVE-2024-8691, CVE-2024-9471, CVE-2024-9474, CVE-2025-0108, CVE-2025-0111 |
| Low | CVE-2024-5917, CVE-2025-0109 |
This release resolves the following issues:
Platform
- Migrated device backup schedules are missing from the Scheduled Tasks page.
- Device backups: Cannot modify jobs that did not run yet.
- yslog integration cannot be saved with Syslog Facility option
13-logaudit .
Knowledge
- BlueCat: BDDS Refactoring rule "Connectivity amongst DNS servers broken".
- BlueCat: BAM deployment failures script doesn't run on BAM 9.6.
- BlueCat: Add logout of BAM API to any IND that uses BAM API.
- BlueCat: Edge namespace/forwarder alerts can't be resolved if the customer makes a modification in the CI.
- Palo Alto Networks: PAN-OS - failure to parse new vm-cap-tier format.
- Palo Alto Networks: PAN-OS - parser fails on SNMP v3 Configuration.
- Refactor Zone Transfer failure parser.
- BCIA parser log file grows to a size that can leave the server without storage space.
- DNS probe config file parsing refactoring.