Identity-Based Microsegmentation Guide
LAST UPDATED: September 27, 2021

May 28, 2020

Resolved issues

  • #188: When host protection is enabled, the enforcer no longer allows traffic on port 65535 by default.
  • #193: The Compute suggestions button in the Suggest policies panel of the Platform pane now returns policy suggestions if you have some flows.
  • #222: Creating a network policy that allows a protected host to accept inbound TCP connections on port 22 no longer occasionally causes the host to accept inbound connections on all ports.

Known issues

  • #146: RHEL 8 and RHEL CoreOS 8 (used by OpenShift 4) have deprecated iptables in favor of nftables. Before installing Aporeto in these environments, you must enable iptables, such as via the following commands:

    modprobe ip_tables
    modprobe iptable_nat
  • #1302: RHEL 8+ requires special configuration to work with the SSH access control feature. If you require this distribution, contact us for assistance.