NQE Updates for 25.7.0

Released: 2025-07-22

We are happy to announce the following enhancements to NQE as part of release 25.7.0.

For more details, see the full Forward Enterprise NQE 25.7.0 release notes.

What’s New

• IPv6 support in header modeling: ipv6Src and ipv6Dst are now available in the HeaderRegion and HeaderRewrite types. Additionally, ipv4Src and ipv4Dst will now be empty, rather than [0.0.0.0/0] when the IP type is IPv6.

• STIG modeling improvements: The StigDatabase type now includes policy, parameterUsages, and defaultParameters fields to support parameterized STIG checks.

Improvements

• Vendor-specific modeling:

  • DevicePart.support is now available for devices with vendor F5.

  • EDGE_CORE is now a supported Vendor, and EDGE_CORE_SONIC is now a supported OS.

  • HUAWEI is now a valid value for both Vendor and OS.

Command Changes

• Fortinet:

  • Over 30 new CONFIG-type commands have been added.

  • All existing commands with CommandType values such as INTERFACES_STATUS, FIREWALL_POLICIES, PORT_CHANNEL_MEMBERS, and SYSTEM_SETTINGS now use CONFIG.

  • Specific commands like show system gre-tunnel and show system interface have been reclassified from INTERFACES to CONFIG.

• F5:

  • Over 30 new CONFIG-type commands have been added.

  • Some CONFIG commands now combine multiple list sys db calls into a single command to reduce duplication.

Deprecations

The following fields and functions are deprecated and will be removed in a future major release:

Fields

• CloudAccount: publicUnallocatedIps

• Cve: criteria, description, severity

• Ethernet: negotiatedPortSpeed

• ExternalSources: cliSources, httpSources, snmpSources

• System: uptimeSeconds

• VpcData: cloudType

Functions

• blockDiff_alpha1

• blockMatches_alpha1

• hasBlockMatch_alpha1

Replace all _alpha1 functions with their stable counterparts (without the _alpha1 suffix).