26.4.0 - Apr 21
Released: 2026-04-21
We are happy to announce the following enhancements to NQE as part of release 26.4.0.
See the full release notes for Forward Enterprise version 26.4.0.
What’s New
- FWD-52376 -
locationIdis now a field of bothDeviceandLocation. - FWDN-12300 -
uuidis now a field of
AclEntry.
What's Improved
- FWD-47249 - The function isEmpty now
accepts
Bags,Lists, andStringin addition toSets. - FWD-50274 - Support for IPv6 subnets now exists for the function ipAddressSet and all of the operations on sets.
- FWD-51330 - Queries that access the
cveFindingsfield ofDevicenow execute faster. In one case, five times faster. - FWD-52643 - Queries that access the
bgpRibfield ofDevicenow execute faster. In one case, 13 times faster. - FWD-50542 - Some queries will have fewer
bag-for-list warnings.
- The type of the field
configofFilesis strengthened fromBag<ConfigLine>toList<ConfigLine>. Same for the fieldsconfigPolicyandconfigTemplateofPanosFiles, and same for the return type of the function parseConfigBlocks. - Similarly, the functions blockDiff,
blockMatches,
hasBlockMatch, and
patternMatches now accept either a
List<ConfigLine>or aBag<ConfigLine>as their first parameter, but passing aBag<ConfigLine>will emit a warning.
- The type of the field
What's Fixed
- BUG-23698 - For backwards compatibility, certain operations that nominally require a
Listalso accept aBagwhile emitting a warning. However, thisBag-to-Listcoercion was not happening for the top-level function of a parameterized query. This coercion now happens. - BUGX-2963 - Devices with
OSvalueDELL_SONICnow have LLDP neighbors correctly populated into thelldpfield ofIfacein more cases. - FWD-51355 - Devices with
OSvalueF5now include more items in the fieldcomponentsofPlatform. - BUG-23516 - The regular expression
[\s\S]now correctly matches any character. This fixes a regression that was introduced in 26.2.0. - FWD-51977 - The regular expression
\sno longer matches the Unicode vertical whitespace characters u0085, u2028, and u2029. This reverts a change that was introduced in 26.2.0.
Command Changes
- FWD-51231 - The
CommandwithCommandTypevalueCONFIGwas modified for theOSvalueF5in some cases by addinglist net ipsec ike-peerin theOutputsof aDevice. - FWD-50372 - The
CommandwithCommandTypevalueCONFIGwas modified for theOSvalueF5in some cases by addinglist sys icontrol-soapin theOutputsof aDevice. - BUGX-2955 - The
CommandwithCommandTypevalueINVENTORYwas modified for theOSvalueASAin some cases by addingshow chassis detailin theOutputsof aDevice. - BUGX-3011 - The
CommandwithCommandTypevalueBGP_PEERSwas modified for theOSvalueIOS_XRin some cases by addingshow bgp vrf {} {} neighbors {} advertised-countin theOutputsof aDevice. - BUGX-3184 - The
CommandwithCommandTypevalueCONFIGwas modified for theOSvalueFORTINETin some cases by addingshow system external-resourcein theOutputsof aDevice.
Deprecations
Some elements of NQE are deprecated. They will be removed or forbidden in a major release.
Fields
-
CloudAccountfirewallRulespublicUnallocatedIps
-
Cvecriteriadescriptionseverity
-
EthernetnegotiatedPortSpeed
-
ExternalSourcescliSourceshttpSourcessnmpSources
-
SystemuptimeSeconds
-
VpcDatacloudType
Functions
- The built-in functions
blockDiff_alpha1,blockMatches_alpha1, andhasBlockMatch_alpha1are deprecated. They will be removed in a major release. For each function, use the function without the_alpha1suffix instead. - Passing a
Bag<>to a function that expects aList<>is deprecated. A warning is currently given. A future major release will elevate this to an error.
Operations
- The operations
==,!=,<,<=,>=, and>between aBag<>andList<>are deprecated. A warning is currently given. A future major release will elevate this to an error.
Types
Number- TheNumbertype is deprecated. In its place, useInteger. Any use ofNumberwill be replaced byIntegerduring pretty printing. A warning is given for each use ofNumber.