Latest features & updates

November 2025 Update

• Updated POST Trigger ActiveChange for change request API

• Updated GET Risky Rules API

Updated POST Trigger ActiveChange for change request API

We have added a new request query parameter shouldPushOnlySubRequest to the POST /change-requests/traffic/{changeRequestId}/work-order/implement API endpoint that determines whether to trigger ActiveChange only to the specified sub-change request or to all sub-change requests under its parent. See Trigger ActiveChange for change request. (Released 11-November-2025)

Updated GET Risky Rules API

We have added a new request query parameter ruleType to the GET /api/v1/risks/riskyRules API endpoint that determines the amount of details included in the response. See Get risky rules . (Released 11-November-2025)

August 2025 Update

• New SAMA Regulatory Compliance Report

New SAMA Regulatory Compliance Report

We've added a dedicated report to support compliance with the Guidelines for the Saudi Arabian Monetary Authority (SAMA) Cyber Security Framework. See REGULATORY COMPLIANCE page. (Released 12-August-2025)

July 2025 Update

• Device Group Field Added to Application Dashboard

Device Group Field Added to Application Dashboard

We’ve enhanced the General Information area of the Application’s Dashboard tab to now include a new field: Device Group.

This field allows you to define the specific device group used when running Traffic Simulation Queries (TSQs) for the application—delivering more accurate and targeted connectivity analysis.

If no Device Group is explicitly defined for the application, the system will use the value set in the afa.tsq.custom_group user property. If that property is not configured, the default device group ALL_FIREWALLS is applied.

See Application DASHBOARD tab interface.

May 2025 Update

• New NCA Regulatory Compliance Report

New NCA Regulatory Compliance Report

We've added a dedicated report to support compliance with the National Cybersecurity Authority (NCA) regulations. The new report provides detailed visibility into network security policies, rule usage, and access controls, aligned with NCA requirements. See REGULATORY COMPLIANCE page. (Released: 13-May-2025)

February 2025 Update

• Filter Out Unsupported Objects in Change Requests

• Enhanced Covered Rules Report

• Check Point: Schedule Security Policy Rules

• Align flows with SNDC objects in AppViz

Enhanced Covered Rules Report

We’ve improved the Covered Rules Report so you can now submit Disable Rule or Remove Rule change requests directly from within it (feature availability may vary by device type). For more details, see Device Report Pages. (Released 11-February-2025)

Check Point: Schedule Security Policy Rules

We've introduced a new schedule property to the FireFlow hook SuggestPropertyValues for Check Point. This property enables you to use time objects with a fixed date, time range, or a recurring daily or weekly schedule that are defined on the device. For details, see SuggestPropertyValues. (Released 11-Feb-2025)

Display VNets with no virtual machines in the ASMS tree and map

By default, VNets without virtual machines don’t appear in the ASMS tree, which means they’re not shown on the map or included in Traffic Simulation Query results. This Early availability feature enables VNets without virtual machines to appear in the ASMS tree. For more details, see Display VNets with no virtual machines in the ASMS tree and map. (Released: 11-Feb-2025)

January 2025 Update

• Panorama and Fortimanager: Schedule Security Policy Rules

• General Availability: Azure Traffic Sensor Support for Application Discovery

• New DORA Regulatory Compliance report

Panorama and Fortimanager: Schedule Security Policy Rules

We've introduced a new schedule property to the FireFlow hook SuggestPropertyValues for Panorama and Fortimanager. This property enables you to use time objects with a fixed date, time range, or a recurring daily or weekly schedule that are defined on the device. For details, see SuggestPropertyValues. (Released 14-Jan-2025)

General Availability: Azure Traffic Sensor Support for Application Discovery

The Azure Traffic Sensor integrates with the Application Discovery Server to collect traffic data directly from Azure Traffic Analytics and is now generally available. This feature streamlines visibility and monitoring of network flows in Azure environments, offering enhanced insights and optimized security posture management. Setup remains minimal. For detailed prerequisites and setup instructions, refer to Set up the Azure Traffic Sensor. (Released: 14-Jan-2025)

New DORA Regulatory Compliance report

We've added the DORA compliance report. DORA applies across all European Union (EU) member states, ensuring a harmonized approach to operational resilience in the financial sector. See REGULATORY COMPLIANCE page. (Released: 14-Jan-2025)

December 2024 Update

• Align flows with SNDC objects in AppViz

Align flows with SNDC objects in AppViz

Network objects with the Same Name but Different Content (SNDC) can span multiple devices and flows. In AppViz, you can now align these objects to ensure consistency and uniformity across your network. SeeManaging Same Name Different Content (SNDC) Objects in application flows. (Released: 9-Dec-2024)

October 2024 Update

• Application awareness for Check Point R80+

Application awareness for Check Point R80+

Create tickets with seamless CKP application integration and receive detailed service and application insights in FireFlow's work order view. Quickly identify default services by hovering over the 'Application-default' column, making for a smoother change management workflow. (Released 10-October-2024)

September 2024 Update

• Best Practices for Ongoing Maintenance in ASMS

• Prevent users from modifying rules with user awareness for FortiManager

• Improved Traffic Simulation Query results

Prevent users from modifying rules with user awareness for FortiManager

By default, FireFlow allows users to modify rules with user awareness for FortiManager devices using FireFlow. This functionality can be disabled by setting FMGR_Disable_Rule_Modification_With_Users=yes in the FireFlow configuration. For more details, see Allow / prevent modifying rules with user awareness for FortiManager. (Released 10-September-2024)

Improved Traffic Simulation Query results

We've added a new parameter for checking if a cloud-connected device has a route to the TSQ destination when generating the TSQ results. This helps prevent potential inaccurate results when cloud-connected devices are onboarded. For more details, see CLOUD_DEVICES_CHECK_ROUTED. (Released 10-September-2024)