26.10.0 - Oct 20
Released: 2026-10-20
We are happy to announce the following enhancements to NQE as part of release 26.10.0.
See the full release notes for Forward Enterprise version 26.10.0.
What's New
- FWD-51213 - CIS (Center for Internet Security) benchmarks are now part of the NQE data model.
cisDatabaseis now a field ofNetworkwith typeCisDatabase, which contains the benchmarks implemented by Forward Networks.cisFindingsis now a field ofDevicewith typeBag<CisBenchmarkFinding>. EachCisBenchmarkFindingreports, for each rule of its benchmark, whether the device violates that rule. - FWD-46266 - The function trim now exists. It
removes all leading and trailing whitespace from a
String. - PLAN-3642 -
localAddressis now a field ofBgpNeighbor. When present, it is the local IP address that the device uses to connect with the BGP peer. - PLAN-2193 -
latitudeandlongitudeare now fields ofLocation.
What's Improved
- FWD-59961 - The documentation of the functions patternMatch, patternMatches, blockMatches, blockDiff, and hasBlockMatch now describes their results, matching rules, and behavior on null arguments in detail, and includes worked examples.
Command Changes
- FWDN-12723 - The
CommandwithCommandTypevalueSDWAN_OMP_ROUTESwas modified for theOSvalueIOS_XEin some cases by addingshow sdwan omp routes {}in theOutputsof aDevice. - FWDN-12739 - The
CommandwithCommandTypevalueSDWAN_OMP_IPV6_ROUTESwas modified for theOSvalueVIPTELAin some cases by addingshow tenant {} omp routes family ipv6in theOutputsof aDevice. - FWDN-12739 - The
CommandwithCommandTypevalueSDWAN_OMP_ROUTESwas modified for theOSvalueVIPTELAin some cases by addingshow tenant {} omp routesandshow tenant {} omp routes {}in theOutputsof aDevice. - FWDN-12784 - The
CommandwithCommandTypevalueF5_LTM_CONFIGwas modified for theOSvalueF5in some cases by addingshow running-config ltm traffic-matching-criteria all-properties;,show running-config net address-list all-properties recursive;, andshow running-config net port-list all-properties recursive;in theOutputsof aDevice. - FWD-60178 -
MACSECis now a possible value ofCommandType. Also, aCommandwithCommandTypevalueMACSECnow exists for theOSvalueVIASAT_ENCRYPTORin theOutputsof aDevice.
Deprecations
Some elements of NQE are deprecated. They will be removed or forbidden in a major release.
Fields
-
CloudAccountfirewallRulespublicUnallocatedIps
-
Cvecriteriadescriptionseverity
-
EthernetnegotiatedPortSpeed
-
ExternalSourcescliSourceshttpSourcessnmpSources
-
SystemuptimeSeconds
-
VpcDatacloudType
Functions
- The built-in functions
blockDiff_alpha1,blockMatches_alpha1, andhasBlockMatch_alpha1are deprecated. They will be removed in a major release. For each function, use the function without the_alpha1suffix instead. - Passing a
Bag<>to a function that expects aList<>is deprecated. A warning is currently given. A future major release will elevate this to an error.
Operations
- The operations
==,!=,<,<=,>=, and>between aBag<>andList<>are deprecated. A warning is currently given. A future major release will elevate this to an error.
Types
Number- TheNumbertype is deprecated. In its place, useInteger. Any use ofNumberwill be replaced byIntegerduring pretty printing. A warning is given for each use ofNumber.