This article contains the Controlled Availability (CA) release notes for on-prem Kubernetes and Docker deployments. This software is updated continuously, giving customers access to the latest features and improvements. Software updates are released every few weeks.
Note: The features listed below apply to on-prem deployments only. Cloud customers receive the same features through a separate release cycle - see the Cloud release notes for cloud-specific updates.
As an alternative to the Controlled Availability release, on-prem customers who prefer the most stable Generally Available release can find the 25.7 software release notes here. The Generally Available release contains a fixed feature set and receives updates for security and bug fixes only.
For customers using our cloud-based offering instead of on-prem software, the latest Cloud release notes are available here.
Use Case | Supported in Cloud Continuous Delivery Release | Supported in On Prem Continuous Delivery Controlled Availability Release | Supported in 25.7 Generally Available Release |
|---|---|---|---|
CNC/NSO Integration | No, but expected in 2026 | Yes | Yes |
Sensor Management for Assurance Sensors | Partial - Sensor Agents and Sensor Capture only. Hardware Sensors require 24.09 legacy orchestrator | Yes | Yes |
Segment Routing - Controlled Availability | Yes | Coming in 2026 | No |
Cisco® Crosswork Assurance User Experience - Controlled Availability | Yes | Coming in 2026 | No |
Telemetry - IOS XE and IOS XR | Yes | Yes | Yes |
Telemetry - 3rd Party (requires development quote from CX or partner) | Yes | Yes | Yes |
Week of July 17, 2026
New Features
Support for Large Sizing
This release enables the option for the Large Deployment Sizing setting. A Large deployment is currently supported with 130,000 sessions reporting at 5 minute intervals. There are upcoming improvements around the ingestion of latent data as well as further increasing session limits.
Fixes and Enhancements
Deployer: 26.7.14
Sensor Collector: 0.723.0
Capture: 25.7.21
ID | Area | Type | Description |
|---|---|---|---|
1215277269010027 | Platform | Enhancement | Added support for routing alerts to external systems in addition to Workato and Splunk. |
1215348760374651 | Ingestion | Fix | Fixed an issue where the Sensor Collector disconnected after updating the connector configuration. |
1216161017873473 | Platform | Enhancement | Updated email notification branding from Provider Connectivity Assurance to Crosswork Assurance. |
1215728050914678 | Analytics | Enhancement | (Kubernetes only) The Custom type is now available in the Telemetry Collector UI without requiring a feature flag. |
1214028929926534 | Analytics | Fix | Fixed inconsistent naming of the Sensor Collector data port in the Telemetry Collector configuration screen. |
1215865952628286 | Analytics | Fix | Fixed an issue where categorical session count metrics were incorrectly available as data sources in widget configuration. |
1216042964249521 | Analytics | Fix | Fixed an issue where the bin modal could be submitted without completing all validation checks when multiple bin entries shared the same error handler. |
1216036586007946 | Analytics | Fix | Fixed an issue where timeseries widget data using confidence weighting incorrectly dropped to zero at the end of the time range. |
1216036586007939 | Analytics | Fix | Fixed a cache collision issue between table and timeseries widgets when data confidence was enabled on some widgets but not others. |
1216029442241833 | Analytics | Fix | Fixed an issue where grouped timeseries widgets displayed incorrect data. |
1216042964249510 | Analytics | Fix | Fixed an issue where timeseries series with no data incorrectly displayed a drilldown option. |
1216213648730114 | Analytics | Fix | Fixed an issue where labels on geo widgets did not hide overflow text. |
1216240364797121 | Analytics | Fix | Fixed an issue where reverse geocode locations were not correctly applied to geo widgets. |
Week of June 29, 2026
Fixes and Enhancements
Deployer: 26.6.43
Sensor Collector: 0.721.0
Capture: 25.7.21
ID | Area | Type | Description |
|---|---|---|---|
1215963525106733 | Analytics | Fix | Fixed an issue where Tenant Admins lost access to dashboards that weren't explicitly shared with them. |
1215900911753915 | Analytics | Fix | Fixed a BadRequestError that occurred when changing feature flag status via the UI or API. |
1215394567854308 | Analytics | Enhancement | Users can now delete archived alert policies through the UI. |
1215781235584594 | Analytics | Enhancement | Added display support for nanosecond (ns) time unit. |
1215386625675359 | Analytics | Fix | Fixed an issue where the "Manage" button was incorrectly visible in the linked dashboard editor. |
1215458867283010 | Analytics | Fix | Fixed an issue where Crosstab widget column width modifications weren't persisted. |
1215470913158349 | Analytics | Fix | Fixed an issue where users couldn't zoom in the Geo widget while a dashboard was open. |
1215470913158354 | Analytics | Fix | Fixed an issue where saved bounds in the Geo widget were occasionally not consumed. |
1215470913158362 | Analytics | Fix | Fixed an issue where consumed bounds in the Geo widget were slightly off from the saved bounds. |
1214643953021851 | Analytics | Enhancement | Increased the maximum decimal count from 4 to 15 for improved data precision. |
1215450397814424 | Analytics | Fix | Fixed an issue where creating a new aggregate widget in dashboard authoring mode caused the application to freeze. |
1215593951061201 | Platform | Fix | (Kubernetes only) Fixed an issue where the installer refused to proceed if swap was present in multi-node deployments. |
1214846501322852 | Platform | Fix | (Kubernetes only) Fixed an issue where the generated TLS certificate changed CA after refresh. |
1215427659053813 | Platform | Fix | (Kubernetes only) Fixed an issue where the Prometheus URL was incorrect in Grafana. |
1214322185345709 | Platform | Fix | (Kubernetes only) Fixed an issue where Dgraph backups were failing to reach MinIO. |
Week of June 8, 2026
New Features
High Availability Sensor Collector and Telemetry Collector
(Kubernetes environments only; not available in Docker)
This feature provides node-level resiliency so that if a node fails, the Kubernetes native self-monitoring capabilities are leveraged to monitor and react to the failure, automatically bringing Sensor Collector and/or Telemetry Collector back up on a healthy node. The instructions for enabling High Availability are included in the following article:
Kubernetes deployment instructions.
Note the cluster must be configured as per the pre-requisites outlined in this article:
Sensor Collector System Requirements for Kubernetes.
Custom Telegraf Workflow Improvements
This feature provides easy upload capabilities in the user interface for creation of Telemetry Collectors, so that CX and Partners creating custom telemetry ingestion pipelines can upload their custom Telegraf configuration with an easy file upload option, simplifying the work involved in building and deploying custom telemetry collectors.
Instructions are outlined in the following article:
Custom Telemetry Collectors
A solution guide for using this feature to augment the out-of-the-box Telemetry Collectors with additional sensor paths is provided in this article:
Advanced Topic: Adding Sensor Paths to the Default Offering.
Ingestion Staging Feature: Usability Improvements
Crosswork Assurance offers an Ingestion Staging feature to empower CX and Partners to more easily curate telemetry in Crosswork Assurance. This feature is essentially an editor that allows users to curate exactly how they want data to be represented in Crosswork Assurance. Several usability improvements were made this release to the ingestion staging feature. The user interface now includes a "drag and drop" feature for mapping incoming metrics to the ingestion dictionary. Users can download the ingestion specification from the user interface for editing locally and uploading. Instructions are outlined in the following article:
Telemetry Curation
Service Accounts
Service Accounts enable machine-to-machine authentication for automated workflows and API integrations. Administrators can create service accounts with Personal Access Tokens (PATs) for secure, non-interactive access to Crosswork Assurance APIs. This feature supports automation scripts, CI/CD pipelines, and third-party integrations without requiring interactive user credentials.
For more information, see the following article:
Service Accounts
External Identity Provider: LDAP and OIDC Support
Crosswork Assurance now supports LDAP and OIDC as external identity provider (IdP) types, in addition to the existing SAML support. Administrators can configure LDAP or OIDC IdPs using the Crosswork Assurance APIs to integrate with corporate directories and SSO systems. A password reset flow is also introduced: when an admin removes a user's IdP association, the UI surfaces a single-use Onboarding link to allow the user to set a new local password.
For configuration instructions, see Configure an External Identity Provider (IdP).
Fixes and Enhancements
Deployer: 26.6.3
Sensor Collector: Sensor Collector Upgrade Procedure Version: 0.719.0 - New this release, upgrade required
ID | Area | Type | Description |
|---|---|---|---|
1215963525106733 | Analytics | Fix | Fixed an issue where Tenant Admins lost access to dashboards that weren't explicitly shared with them. |
1215900911753915 | Analytics | Fix | Fixed a BadRequestError that occurred when changing feature flag status via the UI or API. |
1215394567854308 | Analytics | Enhancement | Users can now delete archived alert policies through the UI. |
1215781235584594 | Analytics | Enhancement | Added display support for nanosecond (ns) time unit. |
1215386625675359 | Analytics | Fix | Fixed an issue where the "Manage" button was incorrectly visible in the linked dashboard editor. |
1215458867283010 | Analytics | Fix | Fixed an issue where Crosstab widget column width modifications weren't persisted. |
1215470913158349 | Analytics | Fix | Fixed an issue where users couldn't zoom in the Geo widget while a dashboard was open. |
1215470913158354 | Analytics | Fix | Fixed an issue where saved bounds in the Geo widget were occasionally not consumed. |
1215470913158362 | Analytics | Fix | Fixed an issue where consumed bounds in the Geo widget were slightly off from the saved bounds. |
1214643953021851 | Analytics | Enhancement | Increased the maximum decimal count from 4 to 15 for improved data precision. |
1215450397814424 | Analytics | Fix | Fixed an issue where creating a new aggregate widget in dashboard authoring mode caused the application to freeze. |
Week of May 18, 2026
Fixes and Enhancements
Deployer: 25.7.491
Capture: 25.7.21
Sensor Collector: 0.708.0
ID | Type | Area | Description |
|---|---|---|---|
1213798608114566 | Fix | Alerts | Resolved an issue where duplicate alert entries appeared, with one showing "in progress" and another showing "recovered" |
1214064525817483 | Fix | UI - Widget - Distribution | Fixed TypeError when reading undefined 'intl' properties |
1214110127268092 | Fix | UI - Widget - Distribution | Fixed error when calling lastNode() during LiveBlockList initialization |
1207590860321779 | Fix | UI - Dashboard | Added option to disable filters being carried through when using dashboard linking |
1214064605931791 | Fix | UI - Widget - Distribution | Fixed error when calling firstNode() during LiveBlockList initialization |
1212344552683351 | Fix | UI - Widget - Table/Crosstab | Widgets now prevent supporting color rules AND post-aggregation bins simultaneously |
1214034497985061 | Fix | UI - Repeat Offenders | Widget now displays "no data" instead of showing "0 repeat offenders" oddly |
1209125470752062 | Fix | UI - Metrics | Display Value now shows raw data correctly |
1213893652896572 | Fix | UI - Widget - Timeseries | Fixed slider not working on first drag |
1213418364137467 | Fix | UI - Support Chat | Support Chat now moves correctly with the rest of the menu while authoring dashboards |
Week of April 17, 2026
Software Versions and Upgrade Procedures
PCA Platform Software - Deployer: 25.7.465
Capture: 25.7.21
Sensor Collector: Sensor Collector Upgrade Procedure Version: 0.702.0-fips
Telemetry Collector: Telemetry Collector Upgrade Procedure
Fixes and Enhancements
Crosswork Assurance Platform
ID | Type | Area | Description |
|---|---|---|---|
1214021598662930 | Fix | UI - Distribution | Clicking settings in Distribution widgets no longer causes the application to break |
1213961610574141 | Fix | UI - Inventory - Sessions | Alert chart in session details now displays severities correctly on both the sidebar and alert tab |
1213865799097727 | Fix | UI - Inventory - Sessions | Alert timeseries labels are now hidden correctly in compact mode |
1210868245217378 | Fix | UI - Data | Metric decimal count now matches the values provisioned in the settings page |
Week of April 10, 2026
New Features
Event Explorer feature provides users with a capability to view Faults in the PCA. For more information see: Event Explorer
Gateway sensor collectors now allow TLS certificates to be configured via the User Interface for easier management and deployment. For more information see: Configure Sensor Collector
Software Versions and Upgrade Procedures
PCA Platform Software - Deployer: 25.7.460
Sensor Collector: Sensor Collector Upgrade Procedure Version: 0.700.0-fips - New this release, upgrade required
Telemetry Collector: Telemetry Collector Upgrade Procedure Version: ca (0.94.0) - New this release, upgrade required
Fixes and Enhancements
Telemetry Collector and Sensor Collector
ID | Type | Area | Description |
|---|---|---|---|
N/A | Enhancement | Telemetry Collector | Enhanced logging in Telemetry Collector |
N/A | Fix | Telemetry Collector | KPI Name corrected in telemetry logs |
N/A | Enhancement | Sensor Collector | Gateway sensor collectors now require TLS certificates to be configured via the UI and deployed automatically rather than being manually configured via docker compose or helm configuration. |
N/A | Documentation | Sensor Collector | Deploying Sensor Collector in Kubernetes, Upgrading Sensor Collector and Configure Sensor Collector have been updated |
N/A | Documentation | Telemetry Collector | Deploying Telemetry Collector in Kubernetes, Upgrading Telemetry Collector and Configure Telemetry Collector have been updated |
N/A | Fix | Telemetry Collector | KPI name now displaying correctly in logs |
Crosswork Assurance Platform
ID | Type | Area | Description |
|---|---|---|---|
1213718948381748 | Fix | UI - Widget - Distribution | Header selection in distribution widgets now correctly selects all available values |
1213417709414382 | Fix | UI - Widget - Baseline | Improved wording for baseline percentage binning labels |
1211443152320689 | Fix | UI - Dashboard | Improved dashboard loading performance |
1213316659369716 | Fix | UI - Onboarding | Error message text now displays correctly across all browser environments |
1207591315602757 | Fix | UI - Widget - Aggregate | Aggregate widgets now display all expected values even when partial failures occur |
1213307801774644 | Fix | UI - Sensors - Collectors | Resolved duplicate telemetry collectors appearing in the list view |
1213640027840616 | Fix | Reports | Scheduled reports now execute reliably as configured |
1213504308864857 | Fix | Reports | Monthly reports now display the correct next scheduled date |
1213353350437519 | Fix | Reports | Scheduled reports to user groups now trigger consistently |
1213200611455537 | Fix | UI - Notification Centre | Deleted notifications are now properly removed from the Notification Centre |
1213591936383823 | Enhancement | Platform | Updated accept terms URI for improved user experience |
1213591674807877 | Enhancement | Platform | Updated SMTP status URI for improved configuration |
1213887697927606 | Fix | Analytics Pipeline Data Streaming | Fixed an issue that sometimes prevented dynamic metadata fields from being populated in metrics. This issue was also causing streamed metrics via the Kafka export feature to be excluded in the output streams. |
N/A | Fix | UI - Dashboard | Fixed an issue that was preventing the live data tracing from receiving metric data in dashboard and inventory views |
N/A | Fix | Platform | Fixed an issue that was preventing WebHDFS from being able to access files in a dual stack environment |
Fix | Platform | Discrepancies in VNF alert data towards OSS | |
1213824126129011 | Known Issue | Platform | There is a known issue where upon a node restart, the embedded-cluster-operator pod may hang. To workaround the issue, delete any leases the pod is blocked on. |
1212531289902460 | Enhancement | Installation | Added a new Access Type to the deployer for kube-vip support |
Known Limitations
Limitation | Description | Workaround |
|---|---|---|
(Crosswork Assurance Installation) | Dual stack deployments failed preflight checks when nameserver in /etc/resolve.conf resolves to an IPv6 address. | This can be worked around by putting a placeholder IPv4 address to pass the preflight check. |
Week of March 23, 2026
New Features
Exporting of session performance metrics and OTEL events now allows for filtering by metadata category values or OTEL resource attributes.
Fixes and Enhancements
Deployers: 25.7.423
Telemetry Collector: ca (0.84.0)
Sensor Collector: 0.677.0-fips
Week of February 23, 2026
New Features
Kafka Exporter
Exporters enable real-time streaming of performance metrics, OTEL events, and threshold alerts to external systems via Kafka integration. Available exclusively for on-prem deployments.
This feature provides the following capabilities:
Tenant Admins can configure up to five Kafka exporters, each supporting up to 100 export topics.
Users can stream session performance data, fault management events, and alerts to their Kafka clusters with configurable authentication and heartbeat monitoring for service status verification.
For more information, refer to the following articles:
Installation Improvements for Integration
Improved installation steps in the admin console enhance the setup experience for on-prem deployments with streamlined configuration processes.
This improved the following installation steps:
IP address configuration
DNS support
Streamlined CNC/NSO integration configuration
For more information, refer to the following articles:
Installation on Virtual Machines
Troubleshoot On-Prem Installation Failures
Fixes and Enhancements
Deployers: 25.7.364
Telemetry Collector 25.07_0.79.0
Sensor Collector: 0.659.0
ID | Type | Area | Description |
|---|---|---|---|
N/A | Fix | Telemetry Collector | Extended authentication token expiration beyond 14 days |
N/A | Fix | Sensor Collector | Enabled sensor collector to start successfully when using an HTTP proxy |
N/A | Fix | Sensor Collector | Enabled sensor collector to connect to PCA installs using generated certificates without manual CA configuration |
N/A | Enhancement | Sensor Collector | Enabled FIPS compliance for sensor collector |
N/A | Fix | Sensor Collector | Prevented creation of duplicate sensor collectors during updates |
N/A | Enhancement | Platform | Implemented various performance and scale improvements |
N/A | Enhancement | UI | Applied various UI improvements throughout the platform |
Week of December 7, 2025
Deployer: 25.7.223
Capture: Not applicable - no On-Prem support
Telemetry Collector 25.07_0.61.0
New Features
Support for exporting fault monitoring data (collected from alerts generated by Crosswork Assurance) onto an external Kafka
More information can be found here ? Exporting to an external KafkaConfiguration option to disable Sensor Management for use cases not requiring Assurance Sensors
Introduction of an automatic IP discovery and new loadbalancer option as part of the deployment configuration
Not currently compatible with Sensor Management - customers using Sensor Management should continue using manual IP configuration
Week of November 9, 2025
Deployer: 25.7.164
Capture: Not applicable - no On-Prem support
Telemetry Collector 25.07_0.56.0
New Features
Support for Air-Gapped environments
Support for exporting performance monitoring data (collected from either Telemetry Collectors or Assurance Sensors, or both) onto Kafka
Available Features
The following features have been available since July 2025:
Lab-sized deployments
Support for 500 Sessions and/or Telemetry Objects
Small-sized deployments
Support for 10,000 Sessions and/or Telemetry Objects
Deployable to a single Virtual Machine or multi-node hardware configuration
Support for Fault ingestion
Support for Telemetry ingestion via Telemetry Collector and Sensor Collector
Support for Assurance Sensors: Sensor Control, SFPs, and modules
© 2026 Cisco and/or its affiliates. All rights reserved.
For more information about trademarks, please visit: Cisco trademarks
For more information about legal terms, please visit: Cisco legal terms