Cisco Cisco Intelligent Automation for Cloud 4.1 Release Notes

Although you can enter up to three (3) email addresses in the list of notification recipients for any alarm 
that you set, only the first recipient will actually receive the notification email.

Use only one email address for now.

The Cisco IAC 4.1 upgrade is not supported for customers that have CMAK installed. Instructions to 
help with CMAK upgrade will be provided post 4.1.

CMAK users should wait for instructions.

Any user-created firewall rule that denies traffic (such as VDC and VM firewall rules) for unprotected 
networks on advanced network services (ANS) VDCs will not take full effect in organizations with only 
a provisioned Cloud Services Router (CSR). 

The explicit permit statement created as part of creating the unprotected network takes precedent over 
user-created rules.

When a rule is applied to an organization (and matching VDC topology) with a CSR and Virtual Security 
Gateway (VSG) both provisioned, it will provide basic functionality.

In cases where you need to apply firewall rules to an unprotected network, be sure the organization and 
VDC topology type both have CSR and VSG provisioned.

In the current implementation we use a naming convention for VSG nodes in an HA configuration. The 
VSGNAME attribute in SISECURITYGATEWAYTARGET is built as:

[Tenant.Acronym]VSG[RequisitionID] for ACTIVE node

[Tenant.Acronym]VSG

HA

[RequisitionID] for STANDBY node