Skip to content

IP Fabric v7.10

Upgrade Version Policy

We support the following upgrade paths:

  • The latest version in the previous major line → any version in the current major line (for example: 6.10.7 → 7.3.25).
  • Any version in the current major line → any newer version in the current major line (for example: 7.0.15 → 7.3.25).
  • An upgrade to 7.5 can be only performed from version 7.3.25 or newer.
  • An upgrade to 7.10 can be only performed from version 7.5.14 or newer.

Clearing Browser Cache

After upgrading IP Fabric to a newer version, you should see the Your application has been updated and must be refreshed dialog in the main GUI.

It is usually sufficient to just click the Refresh button.

However, in case of issues with the main GUI or if you did not see the mentioned dialog, please force refresh your browser cache.

The key combination for doing this depends on your operating system. In your browser window with your IP Fabric appliance’s URL open, use one of the following key combinations:

  • Windows: Ctrl + F5
  • macOS: Command + Shift + R
  • Linux: Ctrl + F5

This will only affect the browser cache for the IP Fabric appliance.

Known Issues

VRF Routes Not Collected on Cisco NX-OS

VRF routes are not collected on Cisco NX-OS devices if the BGP route download limit is not enabled.

Workaround

Enable Limit download BGP routes and set a sufficiently high threshold (e.g., 100000 or higher) to allow full route collection.

v7.10.3 (March 19th, 2026; GA)

SHA256 (ipfabric-update-7-10-3+0.tar.zst.sig) = 917e1957e123983909be4be226992672aad56bbaf171a74c3fc7eb38d11dd19b
MD5 (ipfabric-update-7-10-3+0.tar.zst.sig) = e724f25316cb93cd3b0283b9186cde05
SHA256 (ipfabric-7-10-3+0.qcow2) = b39d3a82ad043a2b1e7a1cdfa4a2f97312f2d547854250a89755c624ae153fc3
MD5 (ipfabric-7-10-3+0.qcow2) = b629f6e4498c65179d165a4731efa716
SHA256 (ipfabric-7-10-3+0.vmdk) = 7e845dd7c337a96d66a045a256a3c195823bfb412b64c8e97d9dd792b8cc4395
MD5 (ipfabric-7-10-3+0.vmdk) = 43a6229bcb979b05aaf3059a859b85d9
SHA256 (ipfabric-7-10-3+0.vhdx.zst) = efce888e7060115fd59e445d4c6808f46f455882eccc982b90684c691c955b3d
MD5 (ipfabric-7-10-3+0.vhdx.zst) = edd2479210eeada2c71977ab16e871e0
SHA256 (unsupported-ESXi6.7U2-ipfabric-7-10-3+0.ova) = 6b9bf76432e4337bb0b2fc732b0075dd819e25033dab2034de2b2b08427de1c4
MD5 (unsupported-ESXi6.7U2-ipfabric-7-10-3+0.ova) = 99593a48fb0e25d2de0e3a11aac662d6
SHA256 (unsupported-ESXi7.0-ipfabric-7-10-3+0.ova) = c8fd67a763e0ec46c1f9b4aefb1b0138f36ceb36f7066e8c9d4c9f58dbb3997a
MD5 (unsupported-ESXi7.0-ipfabric-7-10-3+0.ova) = b3be22f7e55a35b16718b200c07e5f02
SHA256 (ESXi8.0-ipfabric-7-10-3+0.ova) = 829dea47df1a6643f6748194cfb1335315ad37979e6a4952117a370c6acf99be
MD5 (ESXi8.0-ipfabric-7-10-3+0.ova) = 99473782640aa11979e5182c5a281a77

Improvements

  • Improved PSQL query getUnscannedPrefixes performance to resolve discovery issues post-upgrade.
  • Enhanced sys-resize-disk.sh for NVMe drive pvresize in AWS and Azure.
  • Enhanced F5OS CLI discovery to avoid long execution times from the show system command.

Bug Fixes

  • Resolved sporadic discovery failures due to ‘Error during publishing to scanner queue - Knex: Timeout acquiring a connection’.
  • Fixed ambiguous command issue on Cisco IOS by using show vlan-switch brief for devices like ISR2900 and C800.
  • Corrected GCP firewall evaluation errors for traffic behind Cloud NAT incorrectly denied.
  • Fixed Check Point VSX discovery to prevent multiple simultaneous context/VDOM discoveries.
  • Corrected parsing issues for Alcatel AOS commands under commands/alcatel/_aos/ipInterface.
  • Fixed Huawei VRP OS version detection for CE5882-48T4S-F switches by correcting display version parsing.
  • Corrected Palo Alto PAN-OS DHCP relay parsing to handle /32 subnet mask server IPs.
  • Fixed missing Unmanaged Neighbors table entries where devices were not listed as Unmanaged despite appearing so in All Neighbors.
  • Addressed AWS discovery error ‘The requested logger is not set yet’ to ensure successful logging.
  • Fixed API vendor discovery task issues where tasks were executed despite being disabled when using API+CLI.
  • Azure fixes: Resolved validation errors and association issues, including image details and NAT Gateway VNet association.

v7.10.2 (March 3rd, 2026; GA)

Improvements

SSH client now recognizes SSH protocol version 2.99 and is able to connect to affected Cisco IOS devices.

Performance Improvements

The following Technology Tables have been optimized to improve performance and reduce load times:

  • MAC Table (Technology → Addressing)
  • 802.1x Secure ports - Interfaces (Technology → Security)
  • Transceivers Statistics (Technology → Interfaces)
  • Switchport (Technology → Interfaces)
  • Inbound load (Technology → Interfaces → Current Rates - Data)
  • Outbound load (Technology → Interfaces → Current Rates - Data)
  • STP VLANs (Technology → Spanning Tree)
  • Wireless Radios & BSSID associated to the Access Points (Technology → Wireless → Radios/BSSID)
  • Managed IPv6 addresses (Technology → Addressing → Managed IP)
  • L3 Gateways (Technology → VLANs)

Security Hardening

Default permissions for newly created user home directories have been changed.

  • Previous default: 0755 (rwxr-xr-x) — Home directories readable and traversable by all local users.
  • Current default: 0700 (rwx------) — Home directories are now accessible only by the owning user.

For more details, see Home Directory Permissions.

Vendor Support

  • Fortinet – Added support for collecting NAT46 and NAT64 configurations on FortiGate devices. These configurations are now visible in the NAT technology table.
  • GCP
    • Added support for classic and modern passthrough load balancers.
    • Added support for HA VPN gateways.
  • Meraki — Added support for Switch Stacks
    • Inventory behavior (single logical entity):
      • In Inventory → Devices, IP Fabric represents the entire switch stack as a single logical device.
      • The displayed serial number corresponds to the master switch.
      • Individual stack members are not listed as separate devices in Inventory.
      • Detailed information about all physical stack members (including device details and interfaces) is available under Technology → Platforms → Stack.
    • Path Lookup & Network Diagram behavior:
      • In Path Lookup and Network Diagram, IP Fabric visualizes the switch stack as a single logical node.
      • Individual stack members are not displayed as separate nodes.
  • Azure
    • Improved routing for Azure Virtual Hub.
    • Added support for Azure Firewall in Virtual WAN
      • Routing Intent must be enabled in order for IP Fabric to retrieve firewall effective routes.

Miscellaneous

  • The ipf-checker now reports more accurate values. These changes do not affect any functionality (only increased values are observed).
  • Improved prompt detection when logging in to a specific cluster node on Check Point Gaia.