Systems and Interfaces

HTTP/HTTPS Proxy Server for Cisco vManage Communication with External Servers

Cisco vManage uses HTTP/HTTPS to access some web services and for some REST API calls. Beginning Cisco vManage Release 20.5.1, you can channel the HTTP/HTTPS communication through an HTTP/HTTPS proxy server.

Authorization and Accounting

This feature provides for the configuration of authorization, which authorizes commands that a user enters on a device before the commands can be executed, and accounting, which generates a record of commands that a user executes on a device.

Role-Based Access Control By Resource Group

This feature introduces role-based access control (RBAC) based on sites or resource groups. It is a method of authorizing system access for users based on a combination of user groups and resource groups.

For large Cisco SD-WAN deployments across multiple geographical locations, this feature helps you to split the network administration among different regional administrators.

Migrate Single-Tenant Cisco SD-WAN Overlay to Multitenant Cisco SD-WAN Deployment

You can migrate a single-tenant Cisco SD-WAN overlay to a multitenant deployment using a sequence of Cisco vManage API calls.

Routing

Increased OMP Path Limit for Cisco vSmart Controllers

With this feature, the number of paths that can be exchanged between Cisco vSmart Controllers is increased to 128 limit.

Policies

Next Hop Action Enhancement in Data Policies

This feature enhances match action conditions in a centralized data policy for parity with the features configured on Cisco vEdge devices. When you are setting up next-hop-loose action, this feature helps to redirect application traffic to an available route when next-hop address is not available.

Best of the Worst Tunnel Selection

This feature introduces a new policy action fallback-to-best-path to pick the best path or color out of the available colors.

When the data traffic does not meet any of the SLA class requirements, this feature allows you to select the best tunnel path criteria sequence using the Fallback Best Tunnel option under each SLA class to avoid packet loss.

Configure Dampening on Data Plane Tunnels

This feature introduces a configurable delay (dampening) mechanism on data plane tunnels to minimize the effects of tunnel flapping on the WAN links. The dampening process removes a tunnel from the SLA class until it stops flapping and becomes stable.

Security

Enable Layer 7 Health Check (Automatic Tunnels)

This features integrates the Layer 7 Health Check feature with automatic tunnels to SIGs. When you create an automatic tunnel using the Cisco Secure Internet Gateway (SIG) template to Zscaler or Cisco Umbrella, a tracker is also created to monitor and load balance or failover tunnels. You can customize the parameters based on which the tracker load balances or fails over tunnels.

Support for Zscaler Automatic Provisioning

This feature automates the provisioning of tunnels from Cisco SD-WAN routers to Zscaler. Using your Zscaler partner API credentials, you can automatically provisions tunnels to Zscaler Internet Access (ZIA) Public Service Edges. You can choose Zscaler in the Cisco Security Internet Gateway (SIG) and SIG credentials feature templates to automate tunnel provisioning.

High Availability

Disaster Recovery for a Single Node Cisco vManage Cluster

This feature provides support for disaster recovery for a Cisco vManage deployment with a single primary node.

Cloud OnRamp

RMA Support for Cisco CSP Devices (Cloud onRamp for Colocation)

This feature allows you to replace a faulty CSP device by creating backup copies of the device, and then restoring the replacement device to a state it was in before the replacement. The VMs running in HA mode operate uninterrupted with continuous flow of traffic during device replacement.

Clone Service Groups in Cisco vManage (Cloud onRamp for Colocation)

This feature allows you to create copies of service groups for different RBAC users, without having to enter the same configuration information multiple times. By cloning a service group, you can easily create service chains by leveraging the stored service chain templates.

Colocation Multitenancy Using Role-Based Access Control (Cloud onRamp for Colocation)

This feature enables a service provider to manage multiple colocation clusters and share these clusters across tenants by using multiple colocation groups. In a multitenant setup, service providers don't need to deploy a unique colocation cluster for each tenant. Instead, the hardware resources of a colocation cluster are shared across multiple tenants. With multitenancy, service providers ensure that tenants view only their data by restricting access based on roles of individual tenant users.

Monitor and Maintain

View Loss Percentage, Latency, Jitter, and Octet Information for Tunnels

This feature provides a single chart option in Cisco vManage for viewing tunnel information, such as packet loss, latency, jitter, and octets.

Enhanced Security Monitoring on Cisco SD-WAN Devices

This feature enhances the monitoring of Unified Threat Defense (UTD) features on Cisco SD-WAN devices. The feature allows you to view the CPU, memory, and traffic usage on your device. You can also view the health of individual UTD features.

Optimization of Alarms

This feature optimises the alarms on Cisco vManage by automatically suppressing redundant alarms. This allows you to easily identify the component that is causing issues. You can view these alarms in Monitor > Alarms.

vEdge Packet Tracer

This feature is used to debug any packet loss on Cisco vEdge devices in the forwarding plane.

SNMP

Support for SNMPv3 AES-256 bit Authentication Protocol

Support introduced for AES-256 bit Authentication Protocol called SHA-256.