Skip to main content

26.6.0 - Jun 16

Released: 2026-06-16

We are happy to announce the following enhancements to NQE as part of release 26.6.0.

See the full release notes for Forward Enterprise version 26.6.0.

What's New​

  • FWD-51285 - The cloudAccounts field of Network now includes IBM Cloud objects. Also, IBM is now a value of CloudType, floatingIps is now a field of CloudAccount holding the new FloatingIp type, and floatingIpIds is now a field of CloudIface.
  • FWD-48611 - ZSCALER is now a value of Vendor, and ZSCALER_ZPA and ZSCALER_APP_CONNECTOR are now values of OS. Previously, Zscaler ZPA and App Connector devices were reported as UNKNOWN, so queries could not filter on them.
  • FWD-54700 - OMP is now a value of OriginProtocol. Previously, the origin protocol of an OMP route was reported as UNKNOWN.
  • BUGX-2892 - EVALUATE is now a value of AclAction. It models Check Point's inline-layer feature. Previously, Check Point rules that delegate evaluation to another rulebase were omitted from the AclEntrys in the aclEntries field of a Device.
  • BUGX-3260 - UNSUPPORTED_DEVICE_TYPE is now a value of DeviceCollectionError.

What's Improved​

  • FWD-54591 - The in and not in operators when the first argument is null and the second argument is a non-null with type IpSubnet or Set<IpAddress> now return the appropriate boolean instead of terminating in a runtime error. For more information, see the documentation guides for IP Subnets and Sets.
  • FWD-54253 - The substring and suffix functions now always return a string instead of sometimes terminating with an error on out-of-bounds indices. Their behavior now matches that of the prefix function. For more details, see the documentation for the substring and suffix functions.

What's Fixed​

  • BUG-23215 - Two PatternBlocks types can now be unified over their type parameters. For example, the types PatternBlocks<{a: String, b: String}> and PatternBlocks<{a: String}> now unify to PatternBlocks<{a: String}>. Previously, there was an error saying that these types did not unify.
  • BUG-26046 - It is now possible to index into a list obtained via pattern matching with a function like blockMatches in all cases. Previously, this only worked when the list was the entire matched type; otherwise the query terminated with an error.

Command Changes​

  • FWDN-12480 - The Command with CommandType value CONFIG was modified for the OS value FORTINET in some cases by adding show log syslogd setting, show log syslogd2 setting, show log syslogd3 setting, and show log syslogd4 setting in the Outputs of a Device.
  • FWD-53457 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding list net self-allow in the Outputs of a Device.
  • FWD-49289 & VUL-7711 - The Command with CommandType value CONFIG was modified for the OS value FORTINET in some cases by adding show firewall proxy-policy, show full-configuration system accprofile, and show web-proxy explicit in the Outputs of a Device.
  • FWDN-12479 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding show running-config sys dns; in the Outputs of a Device.
  • VUL-7259, VUL-7275, VUL-8167, & VUL-7280 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding list apm aaa, list asm policy, list ltm profile classification, and list ltm profile http-proxy-connect in the Outputs of a Device.
  • FWD-53723 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding list apm acl all-properties in the Outputs of a Device.
  • FWD-53832 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding list apm profile vdi, list gtm listener, list gtm wideip all-properties, and list net self in the Outputs of a Device.
  • VUL-8586 - The Command with CommandType value CONFIG was modified for the OS value F5 in some cases by adding list sys service in the Outputs of a Device.
  • FWDN-12462 - Commands with CommandType values ACL_CONFIG and SLA_IP_TRACKING_STATE now exist for the OS value NXOS in the Outputs of a Device.
  • FWD-54975 & FWD-54976 - ROUTING_PROTOCOL_CONFIG is now a possible value of CommandType. Also, a Command with CommandType value ROUTING_PROTOCOL_CONFIG now exists for the OS value F5 in the Outputs of a Device.

Deprecations​

Some elements of NQE are deprecated. They will be removed or forbidden in a major release.

Fields​

  • CloudAccount
    • firewallRules
    • publicUnallocatedIps
  • Cve
    • criteria
    • description
    • severity
  • Ethernet
    • negotiatedPortSpeed
  • ExternalSources
    • cliSources
    • httpSources
    • snmpSources
  • System
    • uptimeSeconds
  • VpcData
    • cloudType

Functions​

  • The built-in functions blockDiff_alpha1, blockMatches_alpha1, and hasBlockMatch_alpha1 are deprecated. They will be removed in a major release. For each function, use the function without the _alpha1 suffix instead.
  • Passing a Bag<> to a function that expects a List<> is deprecated. A warning is currently given. A future major release will elevate this to an error.

Operations​

  • The operations ==, !=, <, <=, >=, and > between a Bag<> and List<> are deprecated. A warning is currently given. A future major release will elevate this to an error.

Types​

  • Number - The Number type is deprecated. In its place, use Integer. Any use of Number will be replaced by Integer during pretty printing. A warning is given for each use of Number.