OS Version 4.6.3

Summary

Release Date: September 29, 2026

The EOS 4.6.3 release focuses on bug fixes and continued security improvements.

Deprecations

Per-flow transfer rate in Current Session Statistics: The transfer rate for each traffic flow in the Web GUI's Current Session Statistics is no longer measured. Transfer rate is now measured only per link.

Resolved Issues

285 – The Web GUI's VFI Probe Session Reports and Session Statistics were not populated, even though traffic was actively flowing through the unit. This was affecting devices running on OS 4.6.0 and later.
286 – Fixed where the download/upload usage fields in the output of the sh gmac summary command were not being updated.

287 – Resolved an issue where after upgrading to v4.6.0 and later, SitePath traffic received on the WAN port was not forwarded on the LAN port, breaking SitePath functionality.

To avoid encountering this issue, it is highly recommended that all devices in the SitePath setup are running the same version of EOS v4.6.3 or later.

291 – Resolved an issue on v4.6.0 through v4.6.2, where configuring a static ARP entry via the arp CLI command was sometimes incorrectly rejected with an "entry already exists" error, if a dynamically-learned entry already existed for that IP.
297 – In HA deployments, rebooting the master device cleared the VFI module configuration on both devices in the setup.
300 – The transfer rate for each traffic flow in the Web GUI's Current Session Statistics was no longer measured and displayed as "Undefined."
303 – TCP polling packet replies not processed as polling packets when SitePath is enabled.
304 – The Incoming Usage field in the sh spath summary and sh spath command output remained at 0 and was not updated, while Outgoing Usage updated as expected.
307 – Resolved an issue where ACL NAT entries using protocol ip did not match tunnel or routing protocol traffic (e.g., GRE, IPsec ESP/AH, OSPF, EIGRP). This would cause the packets to silently fall to the default behavior.
309 – SitePath statistics were not populated in the Web GUI, even when active traffic was passing over the site path.

Caveats

225 – The FPI engine is sometimes unable to identify traffic for certain applications such as Youtube or TikTok. As a result, policies intended to block Youtube or TikTok are not enforced consistently, and the application may bypass configured restrictions.
254 – When enabling the netconsole feature on the CPE, ensure that a serial console cable is not connected to the device. Enabling netconsole increases the logging level and could overwhelm the CPU of the CPE, causing its network interfaces to be reset.
260 – Upgrading a CPE from a remote web GUI session is not supported. Attempting to do so will result in the upgrade to fail. Web GUI upgrades from a local LAN connection are, however, supported.

Supported Devices

Hardware Devices

E-40
E-60
E-80
Core
Core-MK2

Virtual Devices

Virtual Edge Series