Skip to content

IP Fabric v7.12

Upgrade Version Policy

We support the following upgrade paths:

  • The latest version in the previous major line → any version in the current major line (for example: 7.12.5 → 8.0.1).
  • Any version in the current major line → any newer version in the current major line (for example: 8.0 → 8.1).
  • An upgrade to 8.1 can be only performed from version 7.12.5 or newer.

Clearing Browser Cache

After upgrading IP Fabric to a newer version, you should see the Your application has been updated and must be refreshed dialog in the main GUI.

It is usually sufficient to just click the Refresh button.

However, in case of issues with the main GUI or if you did not see the mentioned dialog, please force refresh your browser cache.

The key combination for doing this depends on your operating system. In your browser window with your IP Fabric appliance’s URL open, use one of the following key combinations:

  • Windows: Ctrl + F5
  • macOS: Command + Shift + R
  • Linux: Ctrl + F5

This will only affect the browser cache for the IP Fabric appliance.

Known Issues

Cosmetic “Unknown Feature Flag” Error in the Dashboard

Users who previously enabled the New Discovery Settings preview may see an Issue found pop-up in the dashboard referencing an unknown feature flag in local storage:

Unknown feature flag in local storage featureFlags: ENABLE_NEW_DISCOVERY_SETTINGS

Unknown feature flag cosmetic bug

This issue is purely cosmetic and does not affect platform functionality. Stale browser data referencing a feature flag that no longer exists causes it.

Workaround

  • Hard refresh the browser or clear your browser cache.
  • Or, click OK, stop reporting that in the notification to dismiss the message.

v7.12.5 (July 17th, 2026; GA)

SHA256 (ipfabric-update-7-12-5+0.tar.zst.sig) = 9879fc734130149cb841fd9c023b498919414167607ab73e1a45a319594d0c4e
MD5 (ipfabric-update-7-12-5+0.tar.zst.sig) = 8bdd5bed904a9d7d9863d40d4cfc6053
SHA256 (ipfabric-7-12-5+0.qcow2) = 33d5441cb8240aa7f6af8d92cad867a72fe672656131cf7b6c0d2ef0f277c156
MD5 (ipfabric-7-12-5+0.qcow2) = 23270c9c637645a64a1a143c1f006729
SHA256 (ipfabric-7-12-5+0.vmdk) = 5acd56162021f3dce5ae7148f2a6d65978c63ccc140f0344aead0edd27c7e446
MD5 (ipfabric-7-12-5+0.vmdk) = 3dc3815f9419de04af16842bc6363eed
SHA256 (ipfabric-7-12-5+0.vhdx.zst) = e93fbced3d74a150aac2246a6deab36a7aa991c655ae11d2df48ad242450a460
MD5 (ipfabric-7-12-5+0.vhdx.zst) = e918d5b66f4809984f4b6d70c5355868
SHA256 (unsupported-ESXi6.7U2-ipfabric-7-12-5+0.ova) = be3e00dd07f7ac3bede1bf55690382cfc0af10bf58733331cbec3d558b744b63
MD5 (unsupported-ESXi6.7U2-ipfabric-7-12-5+0.ova) = 1de13e1ed9b485ec99e885abc7a175c1
SHA256 (unsupported-ESXi7.0-ipfabric-7-12-5+0.ova) = eede99e97e8957f2cf2bb52bca81ed5986a8d07c6fc3e2044dbc5be529455a5e
MD5 (unsupported-ESXi7.0-ipfabric-7-12-5+0.ova) = fd69e74cf3078e99070c16f0f35e2448
SHA256 (ESXi8.0-ipfabric-7-12-5+0.ova) = b9b1922e7fc4ea2fab02279eb185fd4f90af6599fe5beb158a34fb28483eeaa8
MD5 (ESXi8.0-ipfabric-7-12-5+0.ova) = 3a3baed0c32022aec823d21e5c9a616d

Improvements

  • Improved BGP Neighbours table load performance by optimizing an inefficient query that could cause slow loading times.

Bug Fixes

  • Updated the OpenAPI specification for tables/networks/path-lookup-checks to include all available return columns and the parameters field.
  • Fixed a Tasker heap allocation failure occurring immediately after Scanner start during discovery.
  • Fixed parsing of SD-WAN PBR address objects with route tags on Fortinet FortiGate devices.
  • Fixed missing route information parsing for Check Point R82 and newer versions.
  • Resolved an issue where an Azure VNet was missing BGP routes for the second subnet.
  • Path Lookup:
    • Corrected firewall rule matching to select the appropriate rule for TCP/443 traffic.
    • Fixed VRF leak not being applied, causing traffic to transit incorrectly instead of reaching the intended load balancer.
  • D-Link:
    • Fixed paging handling for the show packet ports command on DES-3200-28P and DES-3028P switches where output would not stop if the last port was active.
    • Resolved ABParseError: Unable to validate STP instance "undefined" caused by invalid bridgeId parsing.
    • Fixed ABParseError: Unable to validate LLDP neighbor caused by reading trim of undefined.
  • F5:
    • Fixed a regression causing wrong NAT handling in VELOS deployments affecting F5 backend flows during end-to-end Path Lookup.
    • Fixed IPv4-to-IPv4 NAT pre-routing rule evaluation to include all pool members for TCP/443 traffic.

v7.12.4 (July 3rd, 2026; GA)

Improvements

  • Optimized Path Lookup performance for Aruba IAP by removing an unnecessary wireless data query.
  • Improved access controls for selected API endpoints as part of ongoing security hardening.
  • API token values are now masked in Settings → Integrations → API Tokens for enhanced security.

Bug Fixes

  • Path Lookup:
    • Resolved an exception occurring on MPLS devices at the end of the Path Lookup calculation.
    • Fixed Path Lookup not completing when traffic passed through an Aruba AP that was not represented in the path.
    • Corrected VRF selection after decapsulation in scenarios with two IPsec tunnels.
    • Fixed Multicast E2E Path Lookup on Cisco IOS-XR devices incorrectly reporting “DROP: Multicast route between source IP and group IP not found.”.
  • VeloCloud:
    • Fixed structured logs showing the same command and timestamp across multiple devices instead of only under the correct device.
    • Corrected interface status collection returning ARP data instead of interface status data.
    • Resolved missing routing and ARP tables when using API workers.
  • Azure:
    • Fixed Virtual Machine Scale Set mapping error “TypeError: Cannot read properties of undefined (reading ‘name’)”.
    • Restored missing Azure ExpressRoute routes (e.g., 10.0.0.0/8) after upgrade to 7.12.3.
  • Fixed Network Diagram showing IPsec point-to-point tunnels terminating in transit instead of directly between routers.
  • Fixed unreadable dropdown overflows in Discovery Settings components caused by Z-order issues.
  • Resolved an issue where the Neighbors identification list settings dropdown was not clickable due to incorrect field priority.
  • Resolved an unknown number of WAN interfaces for the Meraki MX68CW-WW model.
  • Adjusted the logging level for snapshot topology calculations to prevent excessive log output.

v7.12.3 (June 19th, 2026; GA)

Bug Fixes

  • Fixed an issue where the BGP Community filtering table always displayed 1 in the # of communities column.
  • Fixed an issue where the Add Devices to Snapshot worker attempted device connections more times than expected.
  • Fixed an issue in Azure E2E Path Lookup where traffic incorrectly entered transit.
  • Fixed FortiGate prompt detection when processing the “end” command during discovery.
  • Fixed a migration failure from 7.11 to 7.12 caused by a duplicate entry in vSslCertificates.

v7.12.2 (June 15th, 2026; GA)

New Features

  • Path lookup now supports disabling regex matching for the Application value, allowing you to use a plain string instead.

Improvements

  • Added a new Device Configuration Collection API job type that becomes visible when Configuration Management runs its next update.
  • Discovery or snapshot load jobs no longer block downloading snapshots, toggling MCP, or exporting appliance configurations.
  • Updated licensing documentation to clarify that AWS VPC endpoints (vpce) do not use a license.
  • Fixed an issue where discovery could remain stuck in the Discovery onDone started state due to CLI log compression running at the end of discovery. CLI logs for successfully discovered devices are now compressed immediately, reducing end-of-discovery processing overhead.

Vendor Support

  • D-Link
    • Added support of basic discovery for D-Link DES-3000 family switches (DES-3028, DES-3052, DES-3200) and DGS-1210/ME. See Feature Matrix for more details.
    • Covered features include:
      • Platform & system: init, device information
      • Configuration
      • Interfaces: Layer 2 interfaces, Layer 3 interfaces, port-channel
      • Network data: ARP, MAC table, LLDP
      • Routing & switching: routing table, STP, VLAN
      • Management: AAA, NTP, SNMP, logging
  • Meraki
    • VRF
      • Added support for VRF on Meraki Catalyst switches.
      • The ARP table, routing table, and L3 interfaces now reflect this support.
    • Filtering Options
      • Added support for discovery filtering options in Meraki REST Vendor API configuration. You can now limit Meraki discovery to specific networks, platforms, or tags using equal, not equal, and regex operators combined with And / Or logic.
  • Extreme VOSS
    • IS-IS
      • Added support for IS-IS on VOSS family. See Feature Matrix for more details.
  • Alcatel AOS
    • IS-IS
      • Added support for IS-IS on AOS family. See Feature Matrix for more details.
  • Azure
    • IP Fabric now reads the management group hierarchy to build resource context.
    • This requires a second custom role with Microsoft.Management/managementGroups/read and Microsoft.Management/managementGroups/descendants/read assigned at the management group scope. See Azure – Management Group Access.

  • GCP

    • Added Load Balancer SSL Certificate Visibility support.

    New GCP Permissions Required

    Add new permissions to your GCP IAM role to enable this feature.

Cloud Table Column Deprecation

As part of upcoming changes to the cloud data model, several columns in the existing /technology/cloud/... tables are deprecated in v7.12. A future release will remove them.

The affected tables describe cloud resources (subnets, VPC endpoints, scaling groups, etc.), not network devices. The device-centric columns inherited from the old model are no longer meaningful:

  • Hostname and Serial Number (sn) – Deprecated in all existing cloud tables, with the exception of /technology/cloud/nodes/inventory.
  • Device interface – Deprecated in /technology/cloud/endpoints/virtual-machines-interfaces.

Automation Concerns

Update all scripts, automations, intent rules, and reports that reference these columns before upgrading to the release that removes them.