|
| 1 | +--- |
| 2 | +title: What's new in Azure Virtual WAN? |
| 3 | +description: Learn what's new with Azure Virtual WAN such as the latest release notes, known issues, bug fixes, deprecated functionality, and upcoming changes. |
| 4 | +author: cherylmc |
| 5 | +ms.service: virtual-wan |
| 6 | +ms.topic: conceptual |
| 7 | +ms.date: 09/23/2022 |
| 8 | +ms.author: cherylmc |
| 9 | +--- |
| 10 | + |
| 11 | +# What's new in Azure Virtual WAN? |
| 12 | + |
| 13 | +Azure Virtual WAN is updated regularly. Stay up to date with the latest announcements. This article provides you with information about: |
| 14 | + |
| 15 | +* Recent releases |
| 16 | +* Previews underway with known limitations (if applicable) |
| 17 | +* Known issues |
| 18 | +* Deprecated functionality (if applicable) |
| 19 | + |
| 20 | +You can also find the latest Azure Virtual WAN updates and subscribe to the RSS feed [here](https://azure.microsoft.com/updates/?category=networking&query=Virtual%20WAN). |
| 21 | + |
| 22 | +## Recent releases |
| 23 | + |
| 24 | +| Type |Area |Name |Description | Date added | Limitations | |
| 25 | +| --- |---|---|---|---|---| |
| 26 | +|Feature |ExpressRoute | [ExpressRoute circuit page now shows vWAN connection](virtual-wan-expressroute-portal.md)|| August 2022|| |
| 27 | +|Feature | Site-to-site VPN | [BGP dashboard](monitor-bgp-dashboard.md)| Using the BGP dashboard, you can monitor BGP peers, advertised routes, and learned routes. The BGP dashboard is available for site-to-site VPNs that are configured to use BGP. |August 2022| | |
| 28 | +|Feature|Branch connectivity/Site-to-site VPN|[Multi-APIPA BGP](virtual-wan-site-to-site-portal.md)| Ability to specify multiple custom BGP IPs for VPN gateway instances in vWAN. |June 2022|Currently only available via portal. (Not available yet in PowerShell)| |
| 29 | +|SKU/Feature/Validation | Routing | [BGP end point (General availability)](scenario-bgp-peering-hub.md) | The virtual hub router now exposes the ability to peer with it, thereby exchanging routing information directly through Border Gateway Protocol (BGP) routing protocol. | June 2022 | | |
| 30 | +|Feature |Branch connectivity/Site-to-site VPN|Custom traffic selectors|Ability to specify what traffic selector pairs site-to-site VPN gateway negotiates|May 2022|Azure negotiates traffic selectors for all pairs of remote and local prefixes. You can't specify individual pairs of Traffic selectors to negotiate.| |
| 31 | +|Feature|Branch connectivity/Site-to-site VPN|[Site-to-site connection mode choices](virtual-wan-site-to-site-portal.md)|Ability to configure if customer or vWAN gateway should initiate the site-to-site connection while creating a new S2S connection.| February 2022| |
| 32 | +|Feature|Remote User connectivity/Point-to-site VPN|[Global profile include/exclude](global-hub-profile.md#include-or-exclude-a-hub-from-a-global-profile)|Ability to mark a point-to-site gateway as "excluded", meaning users who connect to global profile won't be load-balanced to that gateway.|February 2022| | |
| 33 | +|Feature|Branch connectivity/Site-to-site VPN|[Packet capture](packet-capture-site-to-site-portal.md)|Ability for customer to perform packet captures on site-to-site VPN gateway. |November 2021| | |
| 34 | +|Feature |Network Virtual Appliances (NVA)/Integrated Third-party solutions in Virtual WAN hubs| [Versa SD-WAN](about-nva-hub.md#partners)|Preview of Versa SD-WAN.|November 2021| | |
| 35 | +|Feature|Remote User connectivity/Point-to-site VPN|[Forced tunneling for P2S VPN](how-to-forced-tunnel.md)|Ability to force all traffic to Azure Virtual WAN for egress.|October 2021|Only available for Azure VPN Client version 2:1900:39.0 or newer.| |
| 36 | +|Feature|Remote User connectivity/Point-to-site VPN|[macOS Azure VPN client](openvpn-azure-ad-client-mac.md)|General Availability of Azure VPN Client for macOS.|August 2021| | |
| 37 | +|Feature|Network Virtual Appliances <br><br>(NVA)/Integrated Third-party solutions in Virtual WAN hubs|[Cisco Viptela, Barracuda and VMware (Velocloud) SD-WAN](about-nva-hub.md#partners) |General Availability of SD-WAN solutions in Virtual WAN.|June/July 2021| | |
| 38 | +|Feature|Branch connectivity/Site-to-site VPN<br><br>Remote User connectivity/Point-to-site VPN|[Hot-potato vs cold-potato routing for VPN traffic](virtual-wan-site-to-site-portal.md)|Ability to specify Microsoft or ISP POP preference for Azure VPN egress traffic. For more information, see [Routing preference in Azure](../virtual-network/ip-services/routing-preference-overview.md).|June 2021|This parameter can only be specified at gateway creation time and can't be modified after the fact.| |
| 39 | +|Feature|Remote User connectivity/Point-to-site VPN|[Remote RADIUS server](virtual-wan-point-to-site-portal.md)|Ability for a P2S VPN gateway to forward authentication traffic to a RADIUS server in a VNet connected to a different hub, or a RADIUS server hosted on-premises.|April 2021| | |
| 40 | +|Feature|Remote User connectivity/Point-to-site VPN|[Dual-RADIUS server](virtual-wan-point-to-site-portal.md)|Ability to specify primary and backup RADIUS servers to service authentication traffic.|March 2021| | |
| 41 | +|Feature|Routing|[0.0.0.0/0 via NVA in the spoke](scenario-route-through-nvas-custom.md)|Ability to send internet traffic to an NVA in spoke for egress.|March 2021| 0.0.0.0/0 doesn't propagate across hubs.<br><br>Can't specify multiple public prefixes with different next hop IP addresses.| |
| 42 | +|Feature|Branch connectivity/Site-to-site VPN|[NAT](nat-rules-vpn-gateway.md)|Ability to NAT overlapping addresses between site-to-site VPN branches, and between site-to-site VPN branches and Azure.|March 2021|NAT isn't supported with policy-based VPN connections.| |
| 43 | +|Feature|Remote User connectivity/Point-to-site VPN|[Custom IPsec policies](point-to-site-ipsec.md)|Ability to specify connection/encryption parameters for IKEv2 point-to-site connections.|March 2021|Only supported for IKEv2- based connections.<br><br>View the [list of available parameters](point-to-site-ipsec.md). | |
| 44 | +|SKU|Remote User connectivity/Point-to-site VPN|[Support up to 100K users connected to a single hub](about-client-address-pools.md)|Increased maximum number of concurrent users connected to a single gateway to 100,000.|March 2021| | |
| 45 | +|Feature|Remote User connectivity/Point-to-site VPN|Multiple-authentication methods|Ability for a single gateway to use multiple authentication mechanisms.|March 2021|Only supported for OpenVPN-based gateways.| |
| 46 | + |
| 47 | +## Preview |
| 48 | + |
| 49 | +The following features are currently in gated public preview. After working with the listed articles, you have questions or require support, reach out the contact alias that corresponds to the feature. |
| 50 | + |
| 51 | +|Type of preview|Feature |Description|Contact alias|Limitations| |
| 52 | +|---|---|---|---|---| |
| 53 | +|Managed preview |Routing intent and policies enabling inter-hub security |This feature allows you to configure internet-bound, private, or inter-hub traffic flow through the Azure Firewall. For more information, see [Routing intent and policies ](how-to-routing-policies.md). |For access to the preview, contact [email protected]|Not compatible with NVA in a spoke, but compatible with BGP peering.< br>< br>For additional limitations, see [How to configure Virtual WAN hub routing intent and routing policies ](how-to-routing-policies.md#key-considerations). | |
| 54 | +|Managed preview |Checkpoint NGFW |Deployment of Checkpoint NGFW NVA in to the Virtual WAN hub |[email protected], [email protected]|Same limitations as routing intent.< br>< br>Doesn't support internet inbound scenario. | |
| 55 | +|Managed preview |Fortinet NGFW/SD-WAN |Deployment of Fortinet dual-role SD-WAN/NGFW NVA into the Virtual WAN hub |[email protected], [email protected]|Same limitations as routing intent.< br>< br>Doesn't support internet inbound scenario. | |
| 56 | +|Public preview/Self serve |Virtual hub routing preference |This feature allows you to influence routing decisions for the virtual hub router. For more information, see [Virtual hub routing preference ](about-virtual-hub-routing-preference.md). |For questions or feedback, contact [email protected]|If a route-prefix is reachable via ER or VPN connections, and via virtual hub SD-WAN NVA, then the latter route is ignored by the route-selection algorithm. Therefore, the flows to prefixes reachable only via virtual hub. SD-WAN NVA will take the route through the NVA. This is a limitation during the preview phase of the hub routing preference feature. | |
| 57 | +|Public preview/Self serve |Hub-to-hub traffic flows instead of an ER circuit connected to different hubs (Hub-to-hub over ER) |This feature allows traffic between 2 hubs traverse through the Azure Virtual WAN router in each hub and uses a hub-to-hub path, instead of the ExpressRoute path (which traverses through the Microsoft edge routers/MSEE). For more information, see the [Hub-to-hub over ER ](virtual-wan-faq.md#expressroute-bow-tie) preview link. |For questions or feedback, contact [email protected]| |
| 58 | + |
| 59 | +## Known issues |
| 60 | + |
| 61 | +|#|Issue|Description |Date first reported|Mitigation| |
| 62 | +|---|---|---|---|---| |
| 63 | +|1|Virtual hub router upgrade: Compatibility with NVA in a hub.|For deployments with an NVA provisioned in the hub, the virtual hub router can't be upgraded to VMSS.| July 2022|The Virtual WAN team is working on a fix that will allow Virtual hub routers to be upgraded to VMSS, even if an NVA is provisioned in the hub. After upgrading, users will have to re-peer the NVA with the hub router’s new IP addresses (instead of having to delete the NVA).| |
| 64 | +|2|Virtual hub router upgrade: Compatibility with NVA in a spoke VNet.|For deployments with an NVA provisioned in a spoke VNet, the customer will have to delete and recreate the BGP peering with the spoke NVA.|March 2022|The Virtual WAN team is working on a fix to remove the need for users to delete and recreate the BGP peering with a spoke NVA after upgrading.| |
| 65 | +|3|Virtual hub router upgrade: Spoke VNets in different region than the Virtual hub.|If one or more spoke VNets are in a different region than the virtual hub, then these VNet connections will have to be deleted and recreated after the hub router is upgraded|August 2022|The Virtual WAN team is working on a fix to remove the need for users to delete and recreate these VNet connections after upgrading the hub router.| |
| 66 | +|4|Virtual hub router upgrade: More than 100 Spoke VNets connected to the Virtual hub.|If there are more than 100 spoke VNets connected to the virtual hub, then the virtual hub router can't be upgraded.|September 2022|The Virtual WAN team is working on removing this limitation of 100 spoke VNets connected to the virtual hub during the router upgrade.| |
| 67 | + |
| 68 | +## Next steps |
| 69 | + |
| 70 | +For more information about Azure Virtual WAN, see [What is Azure Virtual WAN](virtual-wan-about.md) and [frequently asked questions- FAQ](virtual-wan-faq.md). |
0 commit comments