22.4 enhancements and patches

22.4

Support for TLSv1.3 handshake protocol

Network Automation supports the TLSv1.3 handshake protocol for communication between the application server and client browser.

For more information, see Configuring-enhanced-security.

Revert configuration on the device via SNMP v2

You can use the new external script action, Revert Device Configuration Via SNMP to make configuration changes on a device via the SNMP protocol. This action is useful if you are unable to connect to a device using Telnet or SSH.

For more details, see Changing-the-running-configuration-of-a-device-using-SNMP-protocol.

Support for realm substitution parameters

Use the realm substitution parameters to substitute attributes from a realm. 

Syntax: ${realm.parameter}

For more information about the substitution parameters syntax, see About-substitution-parameters.

Assign a target configuration to a device by using a file

You can assign target configuration to a device directly by uploading a file to the device instead of running the Assign Target action through a job. Use the Upload Target link to upload a file containing target configuration.

The rights required for the Upload Target feature are the same as required for the Edit Target function. For more information, see Editing-devices.

Upgrade or downgrade OS images on the Cisco IOS XR Router devices

This release includes the new predefined job, Cisco IOS XR Version Upgrade/Downgrade, which you can run to upgrade or downgrade an OS image on a Cisco IOS XR router device. The predefined job includes the following actions:

• Add and activate packages on IOS XR
• Commit the active software set on IOS XR

For more details, see Upgrading and downgrading OS images on Cisco IOS XR router devices.

Select multiple realms when running an action

When creating jobs, predefined jobs, or policies, select multiple realms while running an action.

For more information, see Creating-a-job.

Improved purge performance

The logic to purge jobs and historical configurations has been improved, leading to performance improvement in purge feature. 

Out-of-the-box Cisco ACI injection templates

This release provides the following out-of-the-box injection templates for Cisco ACI and Cisco ACI-Tenant:

• Add tenant: Adds a tenant with the tenant name as the runtime parameter.
• Delete tenant: Deletes a tenant with the tenant name as the runtime parameter.
• Add tenant application profile: Adds the application profile under a tenant with the application profile name and tenant name as runtime parameters.
• Delete tenant application profile: Deletes the application profile under a tenant with the application profile name and tenant as runtime parameters.

You can refer to these templates as an example of injection templates for other vendors. For more information about injection templates, see About-device-configuration-management.  

Support for Cisco Secure Firewall Management Center

This release supports Cisco Secure Firewall Management Center (formerly FMC) version 6.1 and later.

The Cisco Secure Firewall Management Center backups are very large and can take up a lot of database space. Use the Create Cisco FMC backup and store on the device custom action, which stores the backup on the device rather than in Network Automation. The administrator user credentials you provide must have root privileges.

For the complete list of supported device types and actions, see the Device Adapter Capabilities report.

Support for additional operating systems

Network Automation and Multi-Server Administration support the following operating systems:

For the complete list of supported operating systems, see OS support.

Support for additional databases

Network Automation supports the following databases:

• PostgreSQL version 14.4 
• Oracle Database 21c Innovation Release

For the complete list of supported databases, see Database support.

Third-party software support

This version of Network Automation is bundled with the following third-party software:

• AdoptOpenJDK version 11.0.17
• Apache Tomcat web server version 9.0.68

Upgrading

You can upgrade to version 22.4 from the following versions of TrueSight Network Automation: 

• 22.1
• 21.08
• 20.02.x

If you are upgrading the application server, you must also upgrade all the remote device agents to the same version as TrueSight Network Automation.

For upgrade instructions, see Upgrading.