Summary
New features and enhancements in EdgeOne 2.7, EdgeIPS Pro 2.3, and EdgeIPS 2.3. The tables below explain what changed and how each update can help with monitoring, troubleshooting, and daily management.
EdgeOne 2.7
Related article: News & Releases - EdgeOne 2.7
Security Monitoring and Asset Visibility
| Feature | What changed | How it helps |
|---|---|---|
| Security Alert View | Adds IPS, CPSDR, and VSAR indicators, with alert details for individual assets. | Helps you review security alerts and prioritize investigation from one view. |
| Asset View | Separates system-detected information from user overrides for bookmarks, OT layer, Internet exposure, and lifecycle stage. Updates the asset information layout. | Lets you adjust asset information using your knowledge of the environment. |
| Network Graph | Adds filters for Edge type, vulnerable assets, Internet exposure, and Edge serial number, along with duplicate-asset information and breadcrumb navigation. | Helps you find relevant assets and investigate large network topologies. |
| OT Layer View | Adds communication information, navigation to Network Graph, and a bookmarked-asset filter. Navigation to Network Graph is also available from Edge Deployment View. | Makes it easier to explore connections across different views. |
| Vulnerability View | Adds OS information in the CVE-based view, a Legacy OS tag, embedded OS detection, and risk mitigation information. | Helps you review OS details alongside vulnerability information. |
| Dashboard | Adds the Top Hit Count by Edge Group widget. | Helps you identify groups with frequent rule matches for further review. |
| Reports | Adds Outdated Firmware and New Vulnerability report content. | Helps you track firmware status and newly identified vulnerabilities. |
| Logs | Adds Edge Type and Edge Group columns, links to assets, events, and rules, and sortable columns. | Makes it easier to find related information during an investigation. |
Security Policies and Protection
| Feature | What changed | How it helps |
|---|---|---|
| Emergency Mode | Adds Emergency Mode controls for multiple devices across groups and device types, with new port statuses. | Provides centralized controls when troubleshooting an incident. |
| Policy Enforcement | Adds Hit Count and Total Hit Count information. | Helps you review rule activity when assessing security policies. |
| Policy Rule Auto-Learning | Adds a preview of learning results, including IPS and antivirus profiles and review status. | Lets you review learned results before adopting them. |
| Antivirus | Adds SHA-256 file exceptions. | Allows you to identify file exceptions using SHA-256 hashes. |
| IPS Profile | Adds European Vulnerability Database (EUVD) information and multi-term search. | Provides additional vulnerability references and helps you find relevant rules. |
Device and System Management
| Feature | What changed | How it helps |
|---|---|---|
| Virtual EdgeIPS Management | Adds management for Virtual EdgeIPS 02/04/08-VA and a Virtual Licenses tab. | Lets you manage supported virtual devices and view their licenses centrally. |
| MCP Service | Adds an internal, read-only MCP service using bearer-token authentication. | Supports AI-agent access to information through the internal service. |
| System Administration | Adds a login message, secondary NTP server, reorganized Applications menu, and logout pop-up. | Provides additional administration and time synchronization options. |
| Periodic Backups | Adds selection of target Edge devices for periodic backups. | Lets you choose which devices are included in scheduled backups. |
| SNMP Notifications | Adds SNMPv3 SHA-224, SHA-256, SHA-384, and SHA-512 support. | Provides more authentication algorithm options for SNMPv3. |
VShell Changes
VShell updates include pwd-expiry, va, db, disk, and dx address/traceroute. The env exip command has been removed.
Review any operating procedures that use the removed command before upgrading.
EdgeIPS Pro 2.3
Related article: News & Releases - EdgeIPS Pro 2.3
| Feature | What changed | How it helps |
|---|---|---|
| Emergency Mode | Adds Emergency Mode on the device. | Provides an additional control for incident troubleshooting. |
| AI Engine Package | Adds OS recognition for Windows, Linux, and embedded systems. | Helps improve asset inventory and vulnerability matching. |
| IP and Service Objects | Increases object capacity from 512 to 1,024. | Supports larger object configurations. |
| Protection Profiles | Adds SHA-256 antivirus exceptions, EUVD information, and eight additional OT protocols. | Expands file exception options, vulnerability references, and protocol coverage. |
| Policy Rule Auto-Learning | Adds PEA/PFA aggregation. | Helps reduce duplicate profiles and the time needed to review learning results. |
| Raw PCAP Recording | Adds raw packet capture recording and a PCAP File List. | Lets you collect and review packet captures for troubleshooting. |
| Connection Timeouts | Adds TCP and UDP connection timeout configuration through the CLI. | Lets you adjust timeout settings to suit your environment. |
| Disk Diagnostics | Adds hard disk S.M.A.R.T. information. | Provides additional information for checking disk health. |
| USB Storage | Removes the USB vendor ID check. | Expands compatibility with USB disks from different vendors. |
| Administration | Adds or enhances eight UI languages, login protection, Login Message, and Direct Remote Access. | Provides more options for administration and access management. |
| SNMP | Adds SNMPv3 SHA-224, SHA-256, SHA-384, and SHA-512 support. | Provides more authentication algorithm options for SNMPv3. |
| Asset View | Adds a System Detected option when editing asset information. | Lets you select system-detected information when updating asset details. |
EdgeIPS 2.3
Related article: News & Releases - EdgeIPS 102 2.3 and EdgeIPS 103 2.3
Features and Enhancements
| Feature | What changed | How it helps |
|---|---|---|
| Emergency Mode | Adds Emergency Mode on EdgeIPS 102 and 103. | Provides an additional control for incident troubleshooting. |
| IP and Service Objects | Increases object capacity from 256 to 512. | Supports larger object configurations. |
| Protection Profiles | Adds EUVD information and eight additional OT protocols. | Expands vulnerability references and protocol coverage. |
| Raw PCAP Recording | Adds USB-based raw packet capture recording and a PCAP File List. | Lets you collect packet captures for troubleshooting. |
| Connection Timeouts | Adds TCP and UDP connection timeout configuration through the CLI. | Lets you adjust timeout settings to suit your environment. |
| Administration | Adds or enhances eight UI languages, login protection, Login Message, and Direct Remote Access. | Provides more options for administration and access management. |
| USB Storage | Adds support for USB disks from multiple vendors. | Expands USB storage compatibility. |
| SNMP | Adds SNMPv3 SHA-224, SHA-256, SHA-384, and SHA-512 support. | Provides more authentication algorithm options for SNMPv3. |
Features Available on EdgeIPS 103 and 103F Only
| Feature | What changed | How it helps |
|---|---|---|
| AI Engine Package | Adds the AI Engine Package. | Improves OS recognition for asset information. |
| Policy Rule Auto-Learning | Adds PEA/PFA functionality. | Helps reduce the time needed to review learning results. |
| Asset View | Adds the System Detected option. | Lets you select system-detected information when updating asset details. |
EdgeIPS LE Compatibility
Related article: News & Releases - EdgeIPS LE 2.3
EdgeOne 2.7 supports management of EdgeIPS LE version 2.1.27 or later, including version 2.3.
Feature availability varies between EdgeIPS LE, EdgeIPS, and EdgeIPS Pro. Check the applicable product documentation for supported functions and model-specific limitations before deployment.
Additional Information
For licensing questions, refer to FAQs - Advanced.
Before upgrading, review the release notes and User Guide for your product and version, including supported upgrade paths, compatibility requirements, and known limitations.