Skip to main content

NQE Updates for 25.9.0

Related products:NQE
  • September 30, 2025
  • 0 replies
  • 12 views

kevinbrasher
Employee

Released: 2025-09-16

We are happy to announce the following enhancements to NQE as part of release 25.9.0.

See the full release notes for Forward Enterprise version 25.9.0.


What’s New

  • STIG parameters are now available in the data model, including device role and connectivity attributes (e.g., device.isProviderEdge, interface.connectivity.toCoreLayer, interface.connectivity.toCustomerEdgeDevice, interface.connectivity.toDodinBackbone, and interface.pseudowireVirtualCircuitId). These parameters appear under StigPolicy and DefaultStigParameters, with usage data exposed through parameterUsages in StigDatabase.

  • Velocloud support has been expanded, with VELOCLOUD_EDGE and VELOCLOUD_GATEWAY added as values of the OS type.


What's Fixed

  • Duplicate MAC entries in NetworkInstanceFdb.macEntries have been eliminated, ensuring unique results.

  • The Iface.description field is now correctly populated for Huawei devices.

  • Query performance has been improved for cases involving type annotations, reducing execution time.

  • IpAddress set handling has been enhanced:

    • The subnet limit for representing set contents has increased from 10,000 to 20,000.

    • When the limit is exceeded, queries now fail gracefully with an HTTP 200 response instead of returning a 500 error.


Command Changes

  • For F5 devices, list ltm profile tcp was added to the outputs of CONFIG commands to improve visibility into TCP profile configurations.

  • For Checkpoint devices, VERSION commands now include cat /etc/cp-release && cpinfo -y all (or sometimes cpinfo -y all alone), providing more complete version details.


Deprecations

The following fields and functions are deprecated and will be removed in a future major release:

  • Fields:

    • CloudAccount.publicUnallocatedIps

    • Cve.criteria, Cve.description, Cve.severity

    • Ethernet.negotiatedPortSpeed

    • ExternalSources.cliSources, ExternalSources.httpSources, ExternalSources.snmpSources

    • System.uptimeSeconds

    • VpcData.cloudType

  • Functions: blockDiff_alpha1, blockMatches_alpha1, and hasBlockMatch_alpha1 (use the versions without the _alpha1 suffix).