Health Status, Certificate Rotation, Security Attributes, and Session Metrics Updates for Network Firewall

Firewall Health Status (API Only)

The Network Firewall APIs now support a new health status indicator that provides an overall view of firewall health. The status value returns one of the following: OK, WARNING, CRITICAL, or UNKNOWN, and is available through the GetNetworkFirewallHealthStatusAPI.

Zero-Downtime Certificate Rotation for Ingress Traffic Decryption (API Only)

The Network Firewall APIs now support multiple certificates with overlapping validity within a decryption rule, enabling zero-downtime certificate rotation. This removes the need for manual policy updates and reduces traffic disruption. Decryption rules also support traffic inspection for servers that host multiple domains, where each domain uses a different certificate.

Security Attributes for Zero Trust Packet Routing (API Only)

The Network Firewall APIs now support security attributes as an optional parameter to enhance security controls and support Zero Trust Packet Routing (ZPR). You can add or remove security attributes while creating or updating a firewall.

Session Metrics for Network Firewall

Network Firewall now provides session metrics that show the number of sessions opened on the firewall to support traffic. This gives you visibility into firewall activity and helps you monitor traffic load and usage patterns.