What’s New in CoPilot?

A persistent banner appears in the UI if your CoPilot instance is running an appliance version earlier than Version 3.x. It is strongly recommended that you migrate to the latest version.

On Security > Distributed Cloud Firewall > Monitor the Auto Refresh toggle is now persistent when the option is enabled.

On Groups > SmartGroups, the vertical ellipses menu now includes an option to Clone SmartGroup.

When you select a SmartGroup and click Clone SmartGroup, a dialog box opens called Clone SmartGroup: selectedGroupName. The fields will be pre-populated with information from the selected SmartGroup. The cloned SmartGroup name will be Copy-of-selectedGroupName. You can keep or modify the information.

On Cloud Fabric > Gateways, the Transit, Spoke, and Specialty Gateways tabs now all include a Details view.

The Details view includes tabular data for General Information, BGP (if applicable), Subnet Information, and Certs Info (if issued).

An option is added on the Transit Gateways and Spoke Gateways tabs at Cloud Fabric > Gateways. This option opens a Manage Gateway Attachments window from which you can add or delete transit and spoke gateway attachments.

To access the feature, locate the transit or spoke gateway in the table and click the Manage Gateway Attachments icon in the last column to the right.

See Managing Transit Gateway Attachments and Multi-Region Multicloud Transit Gateway Peering Workflow for more information.

On Networking > Connectivity > External Connections (S2C) you can filter the table and save the view for later use.

The browser tab now provides more descriptive content to better reflect the current state of CoPilot. The tab title is in the format, <tab name> - <menu name> | Aviatrix CoPilot.

Various enhancements to predictions and usability are added.

See Aviatrix Feature Modes for more information about Preview Features.

This new dialog window is available as a preview feature in CoPilot version 4.11 with Controller version 7.1.4100.

On Monitor > Performance, if you select the CPU Used (%) metric and the core data is available, the related graph displays a View vCPU Breakdown button. Clicking this button provides a breakdown of core usage for each gateway you selected on the Performance page. A table shows the minimum, maximum, and average percentages. Clicking the Core name opens a graphical view that displays the percentage used per day and time when you move your cursor over the graph.

This new report is available as a preview feature in CoPilot.

On the Administration > Reports tab, you can generate a Gateway Instance Sizing Recommendations report. This report provides gateway instance size recommendations based on your gateway utilization. The report is currently available in JSON format.

This release of CoPilot has additions to the UX for Megaport support, where Aviatrix Secure Edge can be deployed in Megaport Virtual Edge.

This release adds the ability to perform a Controller image upgrade from CoPilot UI.

Unmanaged VMs are now available in the CoPilot Topology view for Controller versions earlier than 7.1.

A View Gateway button is added to the Gateway Details in the Side Panel for Topology.

When you select a gateway instance (the Gateway Virtual Machines, in the outermost circle of the topology map) in your topology map, buttons display below the Properties table.

Click View Gateway to open Cloud Fabric > Gateways with details about the Gateway.

Overview and Flows pages now support displaying the traffic breakdown by Packet Count.

In the Monitor > FlowIQ > Overview page, Packet Count is added to the View By dropdown list. A card that displays Total Packet Count is also added below the View By field.

In the Properties panel for Edge resources, labels are changed or removed to better reflect Edge resources and terminology.

The following fields are added:

The following field name changed:

The Network Insights API is now a General Availability (GA) feature.

The Aviatrix Network Insights API allows you to retrieve network metric and status data across your Aviatrix data plane. Using the API, you can integrate with third-party tools for data analysis and visualization of the performance and health of your Aviatrix-managed resources. The API also supports data retention for compliance.

The Network Insights API supports Prometheus and JSON formats. All data transmissions are encrypted using industry-standard protocols. An API key is used to authenticate requests for your Aviatrix services.

To use the Network Insights API, you must have an add-on license and enable it from Settings > Configuration > License.

For more information, see Monitoring with Network Insights API.

Two enhancements were made on Diagnostics > Diagnostic Tools.

The Settings > Configuration > General section has been reorganized to provide clearer navigation.

The Aviatrix Billing feature has been enhanced to include multiple Report views that provide reports based on your actual Aviatrix Billing Plan.

You can access the reports in CoPilot from the Billing & Cost > Aviatrix Billing > Report tab. The Report page includes the Summary view, Usage Breakdown view, and Billing Breakdown view. It also provides an overview of your Aviatrix Billing Plan.

From the various Report views, you can determine the rate of consumption against your billing plan and whether there are any overages. The information in these views can help you identify patterns or trends that could assist in determining the reasons behind any overages and potentially predict whether costs are likely to remain within the billing plan commitment.

See more information in the Aviatrix Billing documentation.

An option called UserVPN Diagnostics is added to the More action menu in the UserVPN gateway list. This new feature is available at Cloud Fabric > UserVPN.

You can now perform IAM policy updates and account audits on multiple accounts at one time. On the Cloud Resources > Cloud Account page, select the checkbox to the left of the accounts on which you want to perform an action. Click the Actions menu and select Audit Account or Update IAM Policy. Select the checkbox in the table header to select or deselect all accounts.

When running a background job in CoPilot, toast pop-up messages now display the result of the job directly in the UI. The messages display on the right side and indicate whether the job completed successfully or failed. You can click Task Details in the message to open the Monitor > Notifications > Tasks tab for more information.

The Gateway Group Upgrade and Upgrade Plan is available as a preview feature.

This feature allows users to put gateways into groups to perform upgrades. For example, groupings could be by region, cloud, or gateway type. Once grouped, a sequence can be configured to perform upgrades in priority order.

This new upgrade option can be found at CoPilot > Administration > Upgrade. See more information in the Gateway Upgrade Groups documentation.

Under Gateways > Gateway Management, the Gateway Type column that identified a primary or secondary HA type is now renamed to Instance Type. This change also applies anywhere in the CoPilot UI where a primary or secondary type is identified.

The Gateway Type column still exists but specifically identifies the gateway type for spoke, transit, etc.

The Aviatrix CoPilot Topology Network View now displays both unmanaged VPCs (VPCs with no Aviatrix Gateway) and managed VPCs (VPCs with an Aviatrix Gateway). For more information for filtering resources in topology, see Visibility into Cloud Resources.

You can now save changes to the time zone displayed in Aviatrix CoPilot across different browsers. To change your time zone, click on the profile icon in the top right and select the Time Zone icon.

You can now create, edit, and delete views on some CoPilot pages, including the Aviatrix CoPilot > Security > Distributed Cloud Firewall → Monitor tab.

You can now save and preserve views on the Aviatrix CoPilot > Monitor > Performance page.

Added support for Spoke-to-Spoke attachment management in Aviatrix CoPilot. See Spoke Gateway Attachments.

Added support for Spoke-to-Egress Transit attachment management in Aviatrix CoPilot. See Spoke Gateway Attachments.

The Geoblocking feature under ThreatIQ is now in Preview mode by default. To use Geoblocking, manually enable the feature from the Aviatrix CoPilot > Settings > Configuration page > License tab under Feature Previews.

WebGroups (Domain Names and URLs) became available in Preview Mode in CoPilot 3.10. As of release 4.5 only WebGroups that use URLs are in Preview Mode.

Improved CoPilot’s method of collecting data. Previously, CoPilot used rates calculated by the gateway. Now, CoPilot will discard rates calculated by the gateway and determine them from raw counters instead.

This improvement ensures that CoPilot traffic statistics are internally consistent and unaffected by control plane interruptions, which could cause CoPilot to incorrectly record some throughout rates as 0 and to overestimate percentage-based metrics.

Improved CoPilot’s method of collecting data. Previously, CoPilot used rates calculated by the gateway. Now, CoPilot will discard rates calculated by the gateway and determine them from raw counters instead.

This improvement ensures that CoPilot traffic statistics are internally consistent and unaffected by control plane interruptions, which could cause CoPilot to incorrectly record some throughout rates as 0 and to overestimate percentage-based metrics.

Added an option to export the data from the Aviatrix Billing - Explore Page. This option allows you to export all the individual gateway costs for all CSPs and regions into a single csv file.

Added a new type of status to the BGP Info page to clarify when some connections are up and others are down. This new status is "Partially Established."

When the BGP Info page displays this "Partially Established" status, review the Status column for each individual connection to see whether it is Established or Not Established.

The CoPilot Dashboard now displays new information:

This display gathers data from the previous 24 hours.

For a description of all data shown on the CoPilot Dashboard, see CoPilot Dashboard Page Reference.

The label for a column for BGP Learned Routes and BGP Advertised Routes has been edited for consistency. Previously, the same column was labeled “Learned Routes” on the BGP Learned Routes page and “Network” on the BGP Advertised Routes page. Now, the column’s label is “Advertised Routes” in both places.

You can now configure alerts based on the number of gateways that match the following alert-trigger criteria:

See Alerts Based on Gateway Status.

The CoPilot > Dashboard is redesigned. The dashboard has separate sections for monitoring network health and network resources. The information more critical in determining network health is at the top of the dashboard to help you quickly determine the overall health of your network. This section provides links to other CoPilot pages where you can analyze the data in more detail.

For information about added, removed, and changed elements in the CoPilot Dashboard, see Dashboard UI Changes.

For a description of all data shown on the CoPilot Dashboard, see CoPilot Dashboard Page Reference.

The CoPilot > Cloud Fabric > Gateways > Transit/Spoke Gateways page now includes a Performance tab. Use the Performance view to readily look up telemetry statistics for the given gateway such as a gateway’s trend chart for CPU usage.

The CoPilot > Cloud Fabric > Topology map includes the following enhancements:

For Microsoft Azure, the ability to configure a subnet group for Spoke Gateways when configuring FireNet Gateway policies is now available in CoPilot. For detailed information, see Configuring Azure Spoke Subnet Groups.

The CoPilot navigation-menu search is enhanced to consider page sub-menus in search results based on keywords. For example, search results after typing the word ping will include the controller and gateway Diagnostics pages because they each contain a sub-menu for the ping tool.

The CoPilot Dashboard is redesigned with a separate Health and Resources section.

The following UI elements were changed in the CoPilot Dashboard in 4.3:

The following UI elements were added to the CoPilot Dashboard in 4.3 for showing network health:

The following UI elements were removed from the CoPilot Dashboard in 4.3:

Please note the count for number of gateways shown on the CoPilot Dashboard reflects the following:

For a description of all data shown on the CoPilot Dashboard, see CoPilot Dashboard Page Reference.

The CoPilot > Administration > Audit page is redesigned.

CoPilot offers additional percentage-based metric conditions to choose from when you set conditions for triggering alerts or for monitoring resource performance.

See the metrics list in CoPilot > Monitor > Performance.

See the metrics list in CoPilot > Monitor > Notifications > Configure Alerts.

The following percentage-based metrics are now available:

The CoPilot geographic map display and behavior is improved.

See the map in the CoPilot > FlowIQ > Network > Geolocation page.

The UserVPN feature is now available in Aviatrix CoPilot. You can use this feature to add VPN gateways, profiles, users, and authentication against supported Identity Service Providers such as AWS SSO, Azure AD, and Centrify.

See the CoPilot > Networking > Connectivity > UserVPN page.

For more information, please see the UserVPN Overview or the UserVPN FAQ.

See also the release note about editing UserVPN profiles.

The CoPilot topology map includes improved search/filter controls and a more streamlined filter menu design.

You can use quick filters to filter by cloud, region, and resource type.

You can choose to display or hide the average-value details for latencies between VPC/VNet connections.

You can set any saved topology filter as a default view.

You can easily reset filters to a default state.

See the search and filter pane in the CoPilot > Cloud Fabric > Topology > Overview page.

Aviatrix Secure Edge now supports the Dell R450 hardware for the Aviatrix Edge Platform. For more information, see:

In CoPilot 4.2.0, the option to enable the classic experiences of Topology map has moved from the Topology page to the Settings page.

If you want to enable the classic experiences for Topology map, do the following:

CoPilot now shows in a central location all the VPC/VNets running in your clouds for cloud accounts onboarded onto Aviatrix Controller.

In the CoPilot > Cloud Resources > Cloud Assets > VPC/VNets & Subnets page:

CoPilot shows VPC/VNets that were created in the CSP environment as well as those that were created as part of deploying Aviatrix resources such as those created during the deployment of your controller, CoPilot, and gateways.

A VPC/VNet can be marked as Aviatrix managed where:

You can use the filter and search functions to sort and find VPC/VNets by cloud, region, IP address CIDR, CSP tag(s), Aviatrix SmartGroup, and other criteria.

You can create SmartGroups from the VPC/VNets & Subnets page. You can create a SmartGroup from one or more VPC/VNets with a maximum of 20 VPC/VNets per SmartGroup.

In FlowIQ, CoPilot now automatically creates flow filter rules or quick filters for a host’s IP address or port. After you enter a host’s IP address or port number, CoPilot shows all traffic flows sent to and received from that IP address or port in FlowIQ charts. The quick filters are available in the custom rule dialog if you want to use them in a custom flow query.

Quick filter created when typing an IP address:

( Source IP Address = IP_address OR Destination IP Address = IP_address )

Quick filter created when typing a port number:

( Source Port = port_number OR Destination Port = port_number )

To use quick filters:

You can now use CoPilot to create an AWS TGW and orchestrate TGW attachments.

See the CoPilot > Networking > Connectivity > AWS TGW page.

For more information, see Overview of AWS Transit Gateway Orchestrator Features.

CoPilot now shows in a central location all the virtual machines running in your clouds for cloud accounts onboarded onto Aviatrix Controller.

In the CoPilot > Cloud Resources > Cloud Assets > Virtual Machines page:

CoPilot shows VMs that were created in the CSP environment as well as those that were created when deploying Aviatrix resources such as those running your controller, CoPilot, and gateways.

A VM can be marked as Aviatrix managed where:

You can use the filter and search functions to sort and find VMs by cloud, region, IP address, instance size, tag(s), Aviatrix SmartGroup, and other criteria.

You can create SmartGroups from the Virtual Machines page. You can create a SmartGroup from one or more VMs with a maximum of 20 VMs per SmartGroup.

Performance optimizations were applied to FlowIQ that improve page-load times when querying traffic flows.

You will notice page load is faster for the following pages:

Page load performance optimizations do not apply to the following pages:

The Flows and Records pages render granular flow data details that take longer to load. The numbers in charts reflect the raw bytes value based on the most recently received raw data.

Note the following about the Overview, Trends, and Geo pages where page-load performance optimizations now apply:

You can use CoPilot to upload and update certificates for Aviatrix Controller.

See the Controller Certificate card in the CoPilot > Settings > Configuration page.

For information about using the CoPilot UI to update Controller certificates, see Controller Certificate Management

You can use CoPilot to apply software patches onto Aviatrix Controller.

See the Install Patches card in the CoPilot > Settings > Maintenance > Upgrade page.

For more information, see Installing Software and Security Patches.

You can use CoPilot to enable the Aviatrix Controller security group management feature.

See the Controller Security Group Management card in the CoPilot > Settings > Configuration > Security section.

For more information, see Controller Security Group Management.

You can use CoPilot to enable the CoPilot Security Group Management feature.

See the CoPilot Security Group Management card in the CoPilot > Settings > Configuration > Security section.

For more information, see Enabling Controller to Manage CoPilot Security Groups.

You can use CoPilot to perform native peering with cloud service provider (CSP) VPCs.

See the CoPilot > Networking > Connectivity > Native Peering page.

This functionality requires a Controller software build version higher than 7.1.1577.

You can use CoPilot to configure these Aviatrix Controller settings:

A workflow wizard is available to help deploy and configure Secure Egress traffic rules and monitoring. After you enable Distributed Cloud Firewall (formerly named Micro-segmentation/Distributed Firewalling) and enable the WebGroups preview feature, the wizard will appear in your CoPilot Dashboard. You can click Start to go through the workflow or dismiss it.

Note that WebGroups and TLS Decryption and IDS traffic rule options are in preview. Preview Features are not safe for deployment in production environments. The purpose of the quick-start workflow is to offer you the opportunity to experiment with the Secure Egress feature and use WebGroups.

The following top-level menu options are renamed:

The following pages are renamed:

The following pages have been moved:

CoPilot now shows the following information about triggered alerts.

The information is shown for each triggered alert in the CoPilot > Monitor> Notifications> Alerts page, in emails sent to configured alert recipients, and in the webhook payload that CoPilot generates.

For the webhook payload, the new metric_info field is added alongside the existing alert, event, and extra fields. To view a sample of the metric_info field format, go to the CoPilot > Monitor > Notifications > Recipients > Webhooks page, click + Webhook, and then click Preview Sample Payload.

A new page was added to the CoPilot UI for performing native peering with cloud service provider (CSP) VPCs.

See the CoPilot > AirSpace > Connectivity > Native Peering page.

This functionality requires a Controller software build version higher than 7.1.1577.

A new page was added to the CoPilot UI for applying security patches and general software patches onto Aviatrix Controller.

See the Install Patches card in the CoPilot > Settings > Maintenance > Upgrade page.

This functionality requires a Controller software build version higher than 7.1.1577.

A new page was added for backing up and restoring Aviatrix Controller from the CoPilot UI.

See the Back Up Controller and Restore Controller cards in the CoPilot > Settings > Maintenance > Back Up & Restore page.

This functionality requires a Controller software build version higher than 7.1.1577.

For more information, see CoPilot System Administration.

A new page was added to the CoPilot UI for migrating your Controller to a new Controller image.

See the Upgrade Controller Image card in the CoPilot > Settings > Maintenance > Upgrade page.

This functionality requires a Controller software build version higher than 7.1.1577.

For more information, see CoPilot System Administration.

A new page was added to the CoPilot UI for setting email recipients for Controller-generated alert emails.

In this page, you can specify email accounts or aliases that can receive important notification emails that are sent from your Controller.

See the CoPilot > Monitor > Notifications > Settings page to access the settings.

This functionality requires a Controller software build version higher than 7.1.1577.

A new page was added to the CoPilot UI for setting the SMTP service you want to use for Controller-generated alert emails.

By default, the SMTP service is provided by a third-party, Sendgrid. Even though Aviatrix implements third-party risk monitoring, we are not responsible for Sendgrid controls. Aviatrix recommends that you configure your own SMTP service.

See the SMTP Service card of the CoPilot > Monitor > Notifications > Settings page.

This functionality requires a Controller software build version higher than 7.1.1577.

Support for a more simplified CoPilot image migration using backup and restore is now available. This image migration method is supported for AWS cloud between two simple CoPilot deployments running Appliance Version 2 images. See Migrate CoPilot to Appliance V3 (AWS).

For information about CoPilot image releases, see Aviatrix CoPilot Image Release Notes.

Enhancements were made for accessing diagnostic tools in CoPilot.

You can perform the following actions in Controller Diagnostics from the CoPilot > Troubleshoot > Diagnostic Tools page:

See Diagnostic Tools for more information.

The System Health view of the CoPilot > Settings > Resources page is redesigned. Check the CPU Used, Memory Used, and Disk Free status of the CoPilot virtual machine from this page.

The VPC/VNet Routes view of the CoPilot > Monitor > Cloud Routes page is redesigned. The search capability is expanded to all table column fields.

The performance of rendering the CoPilot Resource Utilization report is improved. A limited preview of performance metric charts is shown in the report in the CoPilot UI. The PDF output of the report does not show performance metric charts.

The Global Memory Swap Surge alert monitors the virtual machines of all your Aviatrix Gateways and triggers an alert when any gateway meets both of the following conditions:

You can change the default trigger conditions for this alert. For details, see Global Memory Swap Surge Alert.

A new page was added for creating and deleting VPC/VNets from the CoPilot UI.

For more information, see Creating a VPC/VNet using CoPilot.

Vertical scaling is now available for SNAT-enabled gateways. See Creating a Manual Scaling Policy for more information.

You can now configure a time zone in CoPilot so that every timestamp in the UI displays in the configured time zone. All time zones are supported. By default, CoPilot uses the browser time zone.

To configure a different time zone, click the user profile icon, click Local, select a time zone from the list, and then click Save. All timestamps visible in the CoPilot UI are rendered for the selected time zone.

When clicking on the icon, it will toggle between UTC and local. When the set time zone is different than your browser time zone, CoPilot shows the time zone abbreviation of the zone you are looking at in the browser bar.

The time zone is set at the browser level (not application wide for all user accounts). If the browser cache and cookies are cleared, CoPilot resets to using the browser time zone.

The timestamps in notification alerts (sent via email and webhook) use UTC regardless of the time zone configured in CoPilot.

Enhancements were made for accessing diagnostic tools from the CoPilot > Topology page (classic and new experience) and the CoPilot > Troubleshoot > Cloud Routes page. A new design allows access to the following gateway diagnostic tools for gateways:

Previously, only Gateway Diagnostics could be accessed from these pages. You must have Controller version 7.0.1577 or higher to view these enhancements.

You can also access gateway diagnostic tools from the CoPilot > Airspace > Gateways page (in all views: transit, spoke, and specialty) and from the CoPilot > AirSpace > Connectivity page.

See here for more information.

You can now set an authorization header in the webhook requests CoPilot sends out. Passing a custom authorization header may be used for integrating with downstream third-party alerting systems.

For more information, see Specifying the Webhook Payload URL.

Enhancements were made to the CoPilot > Settings > Configuration page that is organized into separate views for performing general configuration, license and SKU related configuration, and more advanced (and less used) configuration tasks.

The following view in Traffic & Latencies is removed:

The classic view is superseded by the CoPilot > Monitor > Traffic & Latencies > Latencies page which offers equal and improved functionality.

The following view in FlowIQ is removed:

The classic view is superseded by the CoPilot > Monitor > FlowIQ > Overview page which offers equal and improved functionality.

Gateway, Connectivity, and BGP Diagnostics tools are now available in CoPilot. You can access these tools from the CoPilot Troubleshoot > Diagnostic Tools menu, or in the Topology (New Topology Experience) (if you select a gateway instance).

See here for more information.

The backup and Support functions for Private Mode are improved. If you use Private Mode, you can use the troubleshooting tools for uploading log bundles and enabling remote support.

Help content is now available in the CoPilot application for the SmartGroups feature. You can read the help content by clicking the question mark icon in the SmartGroups' overview page.

This release enables support for Aviatrix Secure Edge Gateway to be deployed via a turnkey solution from Aviatrix by leveraging an appliance wherein appliance onboarding and orchestration is driven from the Cloud. Deployment of the Edge gateway is via a zero touch provisioning model. The solution enables a seamless management and configuration model from Cloud to edge. This functionality requires Controller software version 7.1.1710 or later.

Aviatrix Edge Gateway can be used to terminate VLANs on the Edge Gateway. This also includes VRRP support. This can be used leveraging Aviatrix Edge platform on a device with secure edge gateway acting as a LAN side router. This functionality requires Controller software version 7.1.1710 or later.

Aviatrix Secure Edge at a customer on-premises location can be used as a LAN side Gateway with VLANs and this now enables cloud to Edge segmentation model, where segmentation domains and corresponding policies allow customers to define isolation across CSP VPCs and VNETs to onpremises networks and viceversa. This functionality requires Controller software version 7.1.1710 or later.

Aviatrix Secure Edge in Equinix Network Edge platform now supports setting up private virtual connections from Aviatrix Secure Edge to CSPs such as AWS, Azure, GCP and OCI and use BGP for peering to the CSP private connections (for example, Direct Connect, Express Route, Interconnect). This functionality requires 7.1.1710 Controller release.

Aviatrix Secure Edge now supports L4 firewall capabilities where CIDR and IP addresses can be used along with ports and protocols to define policies for granular traffic control.

Edge in Equinix is only a single Gateway per site in this release.

Edge on ESXi/KVM is untested in Controller version 7.1.1710. For Edge on ESXI/KVM self managed environments, please use Controller version 6.8 , 6.9 or 7.1.

The Controller release 7.1.1710 supports two active/active Gateways when deployed in on-premises.

The CoPilot > Troubleshoot > Cloud Routes page has an updated layout and improved format for tables and search controls.

For ThreatIQ alerts, additional information is now included for both email and webhook alert notification channels.

New pages were added to CoPilot for these functional areas:

You can now use the CoPilot > AirSpace > Edge page to create edge high availability (HA) gateways.

This functionality requires Controller software version 7.1.1710 or later.

You can now use WebGroups (Preview feature) when defining Distributed Firewalling (DFW) rules in the CoPilot > Security > Distributed Firewalling page. WebGroups define Domains and URLs into a group which can be used into the DFW Rules as a matching condition for the Rule action to be enforced.

This functionality requires Controller software version 7.1.1710 or later.

If you have Controller version 7.1.1710 or later, you can perform Security Group orchestration for VPC/VNets that have Intra VPC/VNet enabled. See the CoPilot > Security > Distributed Firewalling > Settings tab.

You can view the Intra VPC/VNet configuration in the Topology map and see how many VPC/VNets have Intra VPC/VNet enabled.

You can now attach a Spoke Gateway to a FireNet Gateway while creating or editing the FireNet Gateway in the CoPilot > Security > FireNet page.

If you have CoPilot 3.10.0 and Controller version 7.1.1710 or later, the following decryption CA certificate functions are available as a preview feature:

In CoPilot > Security > Distributed Firewalling > Settings > Decryption CA Certificate:

When using a Controller version earlier than 7.1.1710, you can download the Aviatrix CA certificate for use in your environment but other functions (described above) are not available.

Global Spoke for GCP is a preview feature available in CoPilot 3.10.0.

Global Spoke for GCP creates regional awareness between the VPC and Aviatrix gateways allowing you to restrict spoke gateway traffic to transit gateways in the same region as the spoke gateway. Without global VPC, communications between spokes over transit in the same region are routed outside the region. Regional awareness is achieved by appending regional network tags to virtual machines and adding regional routes to the gateways in the routing table using tags. You can configure the method of appending the network tags in the CoPilot > AirSpace > Gateways > Settings page. For more information, see GCP Global VPC Routing.

WebGroups are used in Distributed Firewalling rules. WebGroups define Domains and URLs into a group which can be used into the DFW Rules as a matching condition for the Rule action to be enforced.

The mechanism for blocking traffic for the ThreatIQ and Geoblocking features has been enhanced to use IP sets. This supports blocking on a larger scale because IP sets require less rules (need only 2 rules per gateway rather than 2 rules per IP address per gateway).

When performing a backup of CoPilot data, you can now select the range of data to back up. From CoPilot > Settings > CoPilot Management, you can select or specify a time period for data backups.

You can now download in CSV format each category of gateway information shown in the CoPilot > AirSpace > Gateways > Overview page.

You can now use the CoPilot > Security > FireNet page to configure FireNet.

This functionality requires Controller software version 7.0.1577 or later.

Enhancements have been made to improve the performance of the CoPilot > Airspace > Topology functional area.

You can now use the CoPilot > Gateways > Gateway Management page to upgrade your gateways.

This functionality requires Controller software version 7.0.1577 or later.

In this version, SAP-services discovery is now disabled by default. You can opt in to enable the feature upon first login to CoPilot 3.8.0. You can also enable SAP-services discovery at any time from the CoPilot > Settings > Configuration page.

For more information, see Setting CoPilot UI Preferences.

You can now select the Packets Drop Rate option or Packets Drop Rate(%) option for:

The Metric API authentication allows you to retrieve network metric data across your Aviatrix data plane. The metric API key is used to authenticate service requests for your Aviatrix services.

To use the Metric API authentication feature, you must first enable it by going to the CoPilot > Settings > Configuration > License page. Once enabled, you can download your Metric API specification from the CoPilot > Settings > Configuration > General page.

For more information, see Monitoring with Network Insights API.

The Global Control Plane Health and Global Network Health alert types are introduced in this release:

The Global Control Plane Health alert monitors the health of your Controller and CoPilot instances, sending an alert if their respective virtual machines are low in CPU, memory, and disk space.

You must set the recipients for this alert type by editing its default configuration if you want to receive notifications via email or webhook.

For more information, see Global Control Plane Health Alert.

The Global Network Health alert monitors the health of your Aviatrix Gateway instances, sending an alert if their respective virtual machines exceed a given packets per second drop rate or are in a down status.

You must set the recipients for this alert type by editing its default configuration if you want to receive notifications via email or webhook.

For more information, see Global Network Health Alert.

You can use the CoPilot > Administration > User Access page to set user account permissions for CoPilot and the Controller. For each CoPilot navigation menu item, you can set permissions that control what pages and tabs users can see. You can also create Controller user groups from this page as well as add, edit, and remove users. This feature does not change the allocation of user groups in Controller. The user groups are the same; this new feature enables you to create the groups from the CoPilot UI.

For instructions on how to assign user permissions for controlling CoPilot user visibility, see CoPilot User Access & Visibility

You can now use the CoPilot > Security > Egress page to set egress-traffic rule conditions for selected VPC/VNets.

For information about setting egress-traffic rules in CoPilot, see Securing and Controlling Egress Traffic.

A separate CoPilot > Monitor > Notifications > Recipients page is introduced for defining alert notification channels (email or webhook). When defining webhook templates, you can preview the webhook payload to check your in-progress configuration.

CoPilot > Billing & Cost > Aviatrix Billing shows the billing information on a subscription level.

Topology rendering speed is optimized.

ThreatIQ blocking and CostIQ scale characteristics are improved.

Tasks are more efficient and resilient to outages.

In the new alert UI, we standardized comparators for metrics' thresholds to be either "more than (>)" or "less than (<)".

Alerts using ">=" and "<=" were migrated to "more than (>)" and "less than (<)", respectively.

To preserve behavior, we adjusted the threshold for metrics tracking small integer values.

Metrics tracking large integers (bytes and bps) or continuous values (percent) are not adjusted.

For example, "dropped packets >= 10" would be migrated to dropped packets  9, while "cpu >= 80%" would be translated directly to cpu  80%.

The dark mode button is now an option under the application bar’s User Profile icon.

3.7.1 offers a new Alert UI that provides a more streamlined workflow for configuring alerting for monitored hosts in your Aviatrix platform.

Pre-existing alert configurations continue to alert on events as before.

For pre-existing alert configurations migrated to CoPilot 3.7.1, note the following:

For information about setting an Evaluation Period for alerts, see Setting an Evaluation Period for an Alert.

For information about alerting on Controller and CoPilot health status, see Global Control Plane Health Alert.

In the new Alert UI, the comparators for metrics' thresholds were standardized to be either "more than (>)" or "less than (<)". For more information, see Metric Threshold Comparators.

3.7.1 offers a new Alert UI that provides the ability to configure multi-metric conditions for alerts. Existing webhooks were for single condition alerts.

The Webhook Format contains the following new fields:

Pre-existing webhooks are migrated to contain the new format. Existing webhook high level objects remain the same.

The Webhook Format contains the following modifications on some old fields:

Any existing webhooks (for single condition alert) created prior to release 3.7.1 will have no changes to existing fields, and only new fields would be added. Newly added multi-metric alerts will have modifications to the two old fields as they are explained above.

CoPilot includes a page for launching specialty (regular) and edge gateways in CoPilot > Gateways. This page requires Controller version 7 and the enablement of the feature.

CoPilot includes a page for establishing S2C and external connections. This page requires Controller version 7 and the enablement of the feature.

When migrating CoPilot data from one CoPilot instance to another, you can now select the time from which to migrate data indices.

The CoPilot > Monitor > Performance page is improved.

The workflow for creating SmartGroups is improved.

When defining alert configurations, specify multiple conditions for triggering alerts.

To reduce the number of clicks needed for accessing functional pages, the CoPilot navigation menu has the following changes:

In the Gateways > Scaling configuration page and the Distributed Firewalling configuration page, the field Wait Time is renamed Evaluation Period.

You can now create a Scheduled Scaling policy to add gateway high availability (HA) instances (scale out) or remove HA instances (scale in) at configured time periods. Scheduled (time of day) scaling applies to horizontal scaling only.

If you are running in Private Mode, you can now configure HTTP or HTTPS proxy settings if you want to run CoPilot only on internal IPs, and use a proxy to pass updates back to those IPs. You configure the proxy server settings in CoPilot > Settings > Configuration.

Onboard your cloud accounts in CoPilot by using the CoPilot > Cloud Resources > Cloud Accounts page. The Audit Settings options allow you to run regular background audits on the health of your cloud accounts and receive email notifications if issues are encountered.

Added a new field, "Amount for Time Period," to each Shared Service (CoPilot > Billing & Cost > CostIQ > Shared Services tab > select a Shared Service). You can enter the amount of your bill for the specified time period in this field to create a data visualization of the cost of this shared service for each resource defined in the cost center.

On the CoPilot > Settings > Configuration > General tab, you can now disable/enable SAP Discovery. SAP Discovery facilitates the selection of SAP instances to use in your SmartGroups or in AppIQ report queries. If you do not use SAP in your infrastructure, you can disable the option.

Enhancements were made for showing regular gateways in the topology map.

Zooming in on the topology map is improved for large networks.

Enhancements were made to the CoPilot Home > Monitor > Traffic & Latencies page.

CoPilot administration task server settings are now organized under the CoPilot Home > Settings > Tasks tab. In the Overview tab, you can click on the name of a task server setting to change the frequency of the task. In the History tab, you can see historical information about how tasks ran in your environment.

SAP SmartGroups and Traffic Flows were added to the Intelligent Cloud Analytics Dashboard.

CoPilot 3.5.2 includes general performance improvements.

An overview page is added to AirSpace > Gateways.

Aviatrix Gateways Overview allows for a quick view into the status and health of your Aviatrix Airspace. Visualize the most and least utilized instances and quickly diagnose issues by seeing gateways with the highest packet drop rates.

The Intelligent Cloud Analytics view in Monitor > AppIQ is a preview feature available in CoPilot 3.4.1.

The charts and visualizations of the Intelligent Cloud Analytics view help you pinpoint and troubleshoot possible application-to-application networking issues. You can create custom dashboards that give you the network visibility you need to diagnose issues in your business critical applications.

For information about AppIQ features, see Troubleshooting Application Connectivity Issues with AppIQ.

The Topology Builder is a preview feature available in CoPilot 3.4.1. The Topology Builder feature requires Controller 7.0 or later.

The Topology Builder enables you to build and deploy Aviatrix gateways whereby your design and build constructs are plotted visually on a topology map. The map dynamically updates to show your Aviatrix core network as you design it and as you build it out in the cloud provider environment. You can also convert your newly built topology into Terraform scripts.

The New Latency Monitor Experience view is added to Monitor > Traffic & Latencies.

The classic view and new view have the same feature capabilities. The New Latency Monitor Experience view allows you to select specific gateways to show their latencies on demand. For large environments, the new view reduces loading time when opening the Traffic & Latencies page. When the classic view is enabled, CoPilot will automatically attempt to load the full traffic and latency details for all gateways in your infrastructure when the Traffic & Latencies page is opened.

For information about using the Traffic & Latencies page, see Monitoring Latencies.

CoPilot 3.4.1 includes general performance improvements.

A new Gateways functional area that enables you to create and deploy the following Aviatrix constructs onto your network environments:

The Gateways table gives you a list view of all Aviatrix gateways deployed in your network environments.

The Scaling tab, enables you to set vertical scaling and horizontal scaling policies for scaling spoke gateways.

You must have Controller 7.0 or higher to use the feature.

You can manually increase or decrease the virtual machine size (CPU and memory) of spoke gateways in your Aviatrix-managed network based on specific network and system metrics monitored for spoke gateways (manual vertical scaling). You can also manually add or remove spoke gateways (spoke virtual machine instances) to/from your Aviatrix-managed network based on specific network and system metrics monitored for spoke gateways (manual horizontal scaling).

For more information, see the discussion about creating scaling policies in Performance Improvement with Gateway Scaling.

You must have Controller 7.0 or higher to use the feature.

You can set policies to automatically add or remove spoke gateways (spoke virtual machine instances) to/from your Aviatrix-managed network based on specific network and system metrics monitored for spoke gateways (automatic horizontal scaling).

For more information, see the discussion about creating scaling policies in Performance Improvement with Gateway Scaling.

You must have Controller 7.0 or higher to use the feature.

Intra VPC/VNet Distributed Firewalling, also referred to as virtual network micro-segmentation, is a preview feature available in 3.3.1.

For information about using the feature including the required Controller version, see the discussion about intra-VPC/VNet distributed firewalling in Virtual Network Micro-Segmentation.

The Aviatrix Gateway High Availability feature has been enhanced to enable you to deploy multiple high availability (HA) gateway instances for Spoke Gateway. Deploying multiple HA gateways serves to minimize and reduce network downtime and improve network stability and performance to mitigate packet loss.

For information about gateways and high availability, see Transit and Spoke High Availability.

The following top-level menu options are renamed or new:

The following pages are renamed:

The following pages have been moved:

Micro-segmentation is renamed Distributed Firewalling. Micro-segmentation is one facet of the broader Distributed Firewalling feature.

The term App Domain is deprecated and renamed SmartGroup.

The term ThreatGuard is deprecated; its associated functionality of blocking threat-IP traffic is still a facet of the broader ThreatIQ feature.

You can now run an AppIQ report for SAP instances using CoPilot in CoPilot Home > Troubleshoot > AppIQ.

This report can help SAP Basis engineers diagnose or rule out issues with SAP applications running in their networks.

See Troubleshooting Application Connectivity Issues with AppIQ.