Known Issues

Tufin Orchestration Suite R23-1 has these known issues:

Category

Reference ID

Description

SecureChange Reports

TOS-82429

When selecting 'export all data as csv' from the SecureChange Dashboard drill-down, only 100 results are exported

Rule Viewer

TOS-77880

Following upgrade from Aurora R22-2 to a version of R23-1 earlier than R23-1 PHF2.1.0, the last modified date in the Rule Viewer might be incorrect for some Stonesoft, Check Point and Fortinet devices. This is caused by a bug in the current or prior upgrade processes. We are working on a procedure to restore the correct values.

Automatic Policy Generator (Web interface) TOS-56648 For Check Point management devices, there is a known issue with loading the Automatic Policy Generation (APG) page when there is a special character in the inline-layer group name. There is no workaround for this issue. Avoid using special characters (such as #, %, &) when creating inline-layer groups.

Designer

TOS-71264

For Palo Alto devices, there is a known issue causing Designer to give a global object a name that already exists. (SR116185)

Device Monitoring

TOS-66508

For FortiManager devices, there is a known issue preventing revisions from being retrieved when there is a policy name containing an en dash (–) character. (SR110830)

Reports (Rule and Object Usage) TOS-56649 For Check Point management devices, there is a known issue with running Rule Usage reports when there is a double-quote mark in the inline-layer group name. There is no workaround for this issue. Avoid using a double-quote mark (") when creating inline-layer groups.
Ticketing TOS-48645

When an admin uses Rule Viewer to select rules and open a ticket for them, a new SecureChange tab opens in the browser with a draft of the ticket to be submitted. If the new tab does not display the relevant ticket, you will need to refresh the browser window to see the ticket. This issue occurs with the Rule Modification, Rule Decommission, and Rule Recertification workflows.

Verifier TOS-80597 Verifier fails for NSX-V objects with the message: Verifier could not calculate the traffic of the input objects in the access request. Contact Tufin support.