Crosswork Cloud Trust Insights

New Feature

CCTI-6498

You can now configure the Crosswork Cloud Trust Insights policies ( > Configure > Policies) to monitor device integrity:

• Data Gateway Connectivity—Detects when the on-premise Crosswork Data Gateway used for dossier collection is not reachable and dossier collection may be interrupted.

• Device Connectivity—Detects when Crosswork Cloud cannot reach a monitored Cisco IOS XR device for dossier collection.

• Hardware Integrity Validation—Detects a hardware integrity validation failure on a Cisco IOS XR device.

• Package Validation—Detects when a software package has an unknown installation or running signature.

• Unknown Files—Detects unknown files that do not match known Cisco IOS XR signatures or user defined Known Good Values (KGV).

• Mismatched Files—Detects files with signatures that do not match known Cisco IOS XR artifacts of user defined KGV.

• Dossier Collection Failure—Detects when Crosswork Cloud has failed to collect a dossier from a monitored Cisco IOS XR device.

• Device Enrollment Certificate Violation—Detects when the certificate used to enroll and validate a Cisco IOS XR device has failed validation.

• Expired Device Certificate—Detects when the certificate used to enroll and validate a Cisco IOS XR device has expired.

• Device Certificate Expiring—Monitors pending expiration status and is triggered when the number of days prior to expiration reaches the time you specify (7, 30, 60, or 90 days).

• Device SSH Host Key Violation—Detects when the SSH host key for a monitored Cisco IOS XR device has changed and dossier collection has not been completed.

Crosswork Cloud

Bug Fix

CCLD-9750

The Alarm details page (Monitor > Alarms > alarm-name) now displays the Snoozed Until information at the top of the page (next to the alarm name) for snoozed alarms.

Crosswork Cloud Network Insights

Bug Fix

CCNI-9540

The Origin ASNs field is now marked as a Required field, when creating a policy with AS Origin Violation - My Peers rule ( > Configure > Policies > Add Policy > Prefix Policy > Add Rule > AS Origin Violation - My Peers).

Crosswork Cloud Network Insights

Bug Fix

CCNI-9804

The ASN Path is now displayed correctly in the Path Topology page ( > Tools > Path Topology).

Crosswork Cloud

Bug Fix

CCLD-9558

You will no longer receive an error message if you add a space at the start or end of the description in the Notes field.

Crosswork Cloud Network Insights

New Feature

CCNI-8123

Added AS Path as a filter option in the Add Filter dialog box of the following BGP Updates pages:

• Global BGP Updates page ( > Monitor > BGP Updates)

• ASN BGP Updates page ( > Monitor > ASNs > ASN-Name > BGP Updates tab)

• Prefix BGP Updates page ( > Monitor > Prefixes > Prefix-IP > BGP Updates tab)

• Peer BGP Updates page ( > Monitor > Peers > Peer-IP > BGP Updates tab)

Crosswork Cloud Traffic Analysis

Bug Fix

CCTA-6762

Traffic Drilldown tool ( > Tools > Traffic Drilldown): When you reduce the Device column to its smallest size, the column header and values are now aligned properly.

Crosswork Cloud Network Insights

Bug Fix

CCNI-9620

Added the Last Updated field in the following ROA pages:

• > Monitor > ASNs > ASN-Number > ROA tab

• > Monitor > Prefixes > Prefix-IP > ROA tab

Crosswork Cloud

New Feature

CCLD-7750

Added the /api/v1/users API call. For more information, see the v1 Users API document.

Crosswork Cloud Traffic Analysis

Bug Fix

CCTA-9324

The Ignored tab on the Peer Prospecting page no longer displays all ASNs when the Clear All Filters option is selected ( > Tools > Peer Prospecting > Ignored tab > > Clear All Filters).

Crosswork Cloud Network Insights

New Feature

CCNI-7807

You can now see the RIPE RPSL data (Source and Origin ASN values) on the following RPSL pages:

• > Monitor > Prefixes > Prefix-IP > RPSL tab.

• > Monitor > ASNs > ASN-Number > RPSL tab.

Crosswork Cloud Traffic Analysis

New Feature

• CCTA-9380

• CCTA-9381

Made the following changes in the Traffic Analysis Configure Policies page ( > Configure > Policies):

• Updated the field names of "Last Gateway To Lose Connection" and "Last Device To Lose Connection" to "Last Active Alarm Gateway" and "Last Active Alarm Device" respectively.

• The "Last Active Alarm Gateway" and "Last Active Alarm Device" fields now display the values which were missing in some cases when the user navigated away and returned to the Configure Policies page.

Crosswork Cloud Network Insights

Bug Fix

CCNI-9348

The Violation Peers map now appears properly on the Subprefix Advertisement alarm page ( > Monitor > Alarms > Subprefix Advertisement alarm name > Overview tab).

Crosswork Cloud Network Insights

Bug Fix

CCNI-8540

The Test button is now disabled when the Sample AS Paths field is left blank in the AS Path Pattern Configuration page.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8541

Updated the help text of the Contact Email field on the Add Peer page ( > Configure > Peers > Add Peer) to convey the correct message.

Crosswork Cloud Traffic Analysis

New Feature

CCTA-9322

To differentiate between Trust Insights and Traffic Analysis Data Gateways, Trust Insights and Traffic Analysis tags have been added to the Data Gateway column name in the Customize Columns page ( > Configure > Devices > > Customize Columns).

Crosswork Cloud Traffic Analysis

Bug Fix

CCTA-9447

Updated the help links to more appropriate topics in the following Traffic Analysis Policies pages:

• Configure Policies page ( > Configure > Policies)

• Create New Policy page ( > Configure > Policies > Add Policy)

• Edit Policy page ( > Configure > Policies > Policy-Name)

Crosswork Cloud

Bug Fix

CCLD-8771

The token status is now displayed correctly in the Status column on the Bearer Tokens page (click your user initials at the top right corner and then choose API Key/Tokens > Bearer Tokens tab).

Crosswork Cloud Traffic Analysis

New Feature

• CCTA-7331

• CCTA-7727

• CCTA-7831

• CCTA-9815

You can now configure Crosswork Cloud Traffic Analysis policies ( > Configure > Policies) to monitor traffic utilization:

• Gateway Connectivity—If the Crosswork Data Gateway loses connection to Crosswork Cloud (fails to communicate with Crosswork Cloud within its reporting interval), an alarm is triggered. This policy is automatically created and can be modified.

• Device Connectivity—If any of the connections (SNMP or BGP) between the device and the Crosswork Data Gateway is down, an alarm is triggered. This policy is automatically created and can be modified.

• Interface TX/RX Utilization—These alarms monitor traffic information and is triggered when interface TX or RX utilization is outside the threshold range you define.

• Prefix Utilization—This alarm monitors the capacity of a prefix and is triggered when the maximum percentage of total capacity of a single prefix on a monitored interface is exceeded.

Crosswork Cloud

New Feature

CCLD-8129

Crosswork Cloud now supports Streaming API.

Crosswork Cloud

New Feature

CCLD-9306

Notification endpoint configuration has been moved to > Global > Notifications.

Bug Fix

• CCNI-9205

• CCNI-9228

The following updates have been made when adding a notification endpoint ( > Global > Notifications > Add type Endpoint):

• The Save button is now disabled if the length of the endpoint name is less than 3.

• You will no longer receive an error message if there is a space at the start or end of the endpoint name.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8099

Updated the ASN RPSL page (ASNs > ASN-ID > RPSL tab) to include infinite scroll instead of pagination view.

Crosswork Cloud Network Insights

Bug Fix

CCNI-6389

Upper limit for the Days to Trigger Before Expiration field (Policies > Add Policy > Prefix Policy > Add Rules > ROA Expiry) is now set to 4294967295.

Crosswork Cloud

Bug Fix

CCLD-9252

Corrected the startTime format in the Usage Examples for Get all BGP updates ( > Documentation > APIs > Usage Examples section on the ASNs, BGP, and Prefixes pages).

Bug Fix

CCLD-9183

The sample Crosswork Cloud client script on the Cisco Crosswork Cloud REST API page ( > Documentation > APIs) now renders correctly in Google Chrome.

Crosswork Cloud Network Insights

New Feature

CCNI-7793

You can now configure Google Storage as a notification endpoint ( > Notification Endpoints > Google Storage tab). For more information, see Configure Google Storage Endpoints.

Bug Fix

CCLD-9151

The correct alarm count now appears in SMS notifications.

New Feature

NA

The new Cisco Crosswork Cloud Quick Start Guide provides high-level workflows to quickly set up and start using Cisco Crosswork Cloud.

Cisco Crosswork Cloud

Bug Fix

CCLD-9087

The correct URL now appears in SMS notifications.

Bug Fix

CCTA-9014

Traffic Drilldown tool: You will no longer receive an error message while adding filter to the Utilization column (Traffic Analysis > Tools > Traffic Drilldown > device-name > Utilization column).

Crosswork Cloud Network Insights

Bug Fix

CCNI-8813

The Edit Tags action is no longer available for unsubscribed prefixes and unmonitored ASNs.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8948

You will no longer receive an error message while getting the RPSL data for ASNs with large number of prefixes (External Routing Analysis > Monitor > ASNs > ASN-name > RPSL tab).

Crosswork Cloud

New Feature

CCLD-7517

Added the /api/v1/prefixes API call. For more information, see the v1 Prefixes API document.

Crosswork Cloud

New Feature

CCLD-7633

Added the /api/v1/asns API call. For more information, see the v1 ASNs API document.

New Feature

CCNI-8015

Added the following API calls to return data on BGP updates for either a named ASN or Prefix:

• /api/v1/asns/{asn}/bgp-updates

• /api/v1/prefixes/{prefix}/bgp-updates

Crosswork Cloud

You can no longer use white space as a tag to filter ASNs or Prefixes.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8798

The Ignore Prefix Mask Length Threshold slider for Subprefix Advertisement rule on the Policy Configuration page (External Routing Analysis > Configure > Policies > Add Policy > Prefix Policy > Add Rule > Subprefix Advertisement) no longer appears broken.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8800

The Subprefix Advertisement violation peers map no longer appears smaller in Mozilla Firefox browser (112.0 (64-bit) version) running on Mac.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8373

You can now see a banner on the Relevant BGP Updates page (External Routing Analysis > Monitor > Alarms > alarm-name > Relevant BGP Updates tab) which indicates that the updates older than allowed number of days (derived from historical data look-up of current subscription tier) are not displayed.

Crosswork Cloud Network Insights

The look and feel of the tables in the following pages have been updated to be consistent with other Crosswork Cloud tables.

• Monitor > Prefixes > Prefix-IP > Looking Glass tab

• Monitor > Prefixes > Prefix-IP > Overview tab > Upstream section

• Monitor > Prefixes > Prefix-IP > Overview tab > Origins section

Crosswork Cloud Network Insights

New Feature

CCNI-7304

There is a new Prefix policy category available with certain subscriptions called My Peers. A My Peers rule will follow BGP updates only from your peers, whereas a All Peers rule will follow BGP updates from your peers and global peers. To configure Prefix policies with these rules, see Add Policies.

Cisco Crosswork Cloud

New Feature

CCLD-8240

• The Tier Information page ( > Purchase > Tier Information tab) has been updated to include a Premium Alarms category. The new prefix My Peers alarms are under this category.

• All the non My Peers alarms are now available for all the tiers. Also, the As Path Length Violation, Advertised Prefix Count, Prohibited IP Prefix, DNS Root Prefix Withdrawal alarms are now categorized as basic alarms.

Crosswork Cloud Network Insights

New Feature

CCNI-8260

Removed limitation where subprefix alarms were limited to subnets within 10 bits of a configured prefix.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8503

You can now configure multiple tags while adding/editing peers, even if no tags were previously configured for that peer.

Crosswork Cloud Network Insights

New Feature

CCNI-8492

The Prefix Type column has been removed from the BGP Updates page (External Routing Analysis > Monitor > BGP Updates).

Crosswork Cloud Network Insights

Bug Fix

CCNI-8504

The following Customize Column option names have been updated to maintain consistency:

• The Update Table Settings option has been renamed to Save Table Settings.

• Remove Table Settings has been moved to the end of the list items.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8523

You will no longer receive the Unexpected Error message when you click the Cancel button on the Import Peers from BGPMon page (Monitor > Peers > Peermon Import).

Crosswork Cloud

Bug Fix

CCLD-8575

Tag length has been increased to 64 characters.

Crosswork Cloud Traffic Analysis

Bug Fix

Added the Updated At field to the Traffic Data information on the device Status page (Monitor > Devices > device-name > Status tab > hover over the Traffic Data arrow between Data Gateways and Devices).

Crosswork Cloud Traffic Analysis

Bug Fix

CCTA-8414

The checklist symbols on the Traffic Analysis Setup Checklist page (Configure > Setup Checklist) are now displayed correctly.

Crosswork Cloud

Due to the newly added /api/v1/alarms API call, the JSON format of S3 notification messages for alarms has been updated.

Crosswork Cloud Network Insights

Bug Fix

CCNI-7618

The snoozed alarms now move to Acknowledged state after the snooze time expires.

Crosswork Cloud Network Insights

A Get Started pop-up window appears in External Routing Analysis when policies and prefixes are not configured. The Get Started pop-up window provides you with some help to start using the product.

You can use the Express Setup button on the page to configure the policies. Also, you can get additional help by clicking the Get Help or Provide Feedback button.

Crosswork Cloud Network Insights

Bug Fix

CCNI-6769

BGP Updates table: The Peer column in the exported CSV file now displays IP addresses for peers owned by that organization instead of Peer IDs.

Crosswork Data Gateway 4.5 includes the following new features:

• Data collection from an Amazon Elastic Compute Cloud web service

• Ability to configure a dedicated vNIC (vNIC03) to route custom traffic such as SSH

• Improvements to the Interactive Console

• Enhancements to the AMI image format to include DHCP support. After the image is booted, it enables registration with Crosswork Cloud.

• Enhancements to the internal REST API

For more information, see Supported Cisco Crosswork Data Gateway Version.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8179

Updated the description to Expected ROA records in the Expected section of the ROA Not Found page (Monitor > Alarms > ROA Not Found alarm > Overview tab).

Crosswork Cloud Network Insights

Bug Fix

CCNI-8149

The Custom Timeframe on the BGP Updates page now allows you to select the same start and end time values when the selected dates are different.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8181

You will no longer receive the Unexpected Error message when linking the peer to the Peer Policy.

Crosswork Cloud Network Insights

Bug Fix

CCNI-8146

The Alarm History page (External Routing Analysis > Alarms > History tab) no longer displays any error message when you select the Last 90 Days option from the Timeframe drop-down list.

Cisco 8000 Series Routers

Release 7.9.x

Release 7.8.x

Release 7.7.x

Release 7.5.x

Release 7.3.x

All releases

Cisco NCS 5500 Series Routers

Release 7.9.x

Release 7.8.x

Release 7.7.x

Release 7.6.x

Release 7.5.x

Release 7.4.x

Release 7.3.x

All releases

Cisco NCS 540 Series Routers

Release 7.9.x

Release 7.8.x

Release 7.7.x

Release 7.6.x

Release 7.5.x

Release 7.4.x

Release 7.3.x

All releases

Cisco ASR 9000 Series Routers

Release 7.9.x

Release 7.8.x

Release 7.7.x

Release 7.6.x

Release 7.5.x

Release 7.4.x

Release 7.3.x

All releases