This page lists unsupported capabilities, release restrictions, limited functions and features that are off by default. Each entry gives an alternative or explanation.
Each row on this page has a status word:
| Status | Meaning |
|---|
| Not supported | Devexana has no code for this |
|---|
| Onboarding | Devexana builds this read-only connector for your instance during onboarding |
|---|
| Not in this release | The capability is not available to customers in this release |
|---|
| Limited | The capability exists in a narrower form than the name suggests |
|---|
| Off by default | The capability exists. An administrator turns it on |
|---|
| Not published | Devexana has not published this figure or result |
|---|
| Not completed | The test or certification process has not been completed |
|---|
Changes to your systems
Sources only read. In this release, changes to network-device configuration are disabled in code.
| Limit | Status | What to do or read |
|---|
| In this release, changes to network-device configuration are disabled in code. Devexana cannot propose or apply a network-device change | Not in this release | Make device changes with your own change process. See Change proposals and human approval for the change-proposal design |
|---|
| Separate features, not sources, can write to business systems: HTTP actions, Laserfiche filing, Lansweeper helpdesk notes and Routine results. Each one is inactive until an administrator sets it up | Off by default | Read-only sources lists each write path and its default. Routines (scheduled reports) describes Routines |
|---|
| Helpdesk sources do not reply to tickets or update them | Not supported | Work tickets in your helpdesk |
|---|
Logs and security events
| Limit | Status | What to do or read |
|---|
| Devexana does not take in data from a SIEM such as Splunk, Graylog, Elastic, QRadar or Wazuh | Not supported | Send syslog from the network devices to a Devexana listener. Syslog, SNMP traps and NetFlow |
|---|
| Devexana can forward its own audit events to a SIEM as CEF or JSON over syslog or HTTP | Off by default | Audit log and the auditor evidence pack |
|---|
| Devexana keeps raw syslog lines for 30 days. You can filter them by host and by source address. There is no full-text search over raw log lines | Limited | Keep long-term raw logs in your own log store. Data retention defaults |
|---|
| Detailed classification of log lines into alerts is built for Barracuda CloudGen firewalls. Devexana stores lines from other vendors. You can filter them by host and source | Limited | Firewall alerts and the daily brief |
|---|
| Devexana does not decode sFlow, the contents of SNMPv3 traps, or syslog sent over TLS | Not supported | Send SNMP v1 or v2c traps and plain syslog to the listener. Syslog, SNMP traps and NetFlow |
|---|
| An uploaded .log or .txt file becomes a searchable document. Devexana does not parse it as syslog | Limited | Send live syslog to a listener. Import files, port maps and DHCP leases |
|---|
Monitoring
| Limit | Status | What to do or read |
|---|
| Devexana is not a network monitoring system. It does not poll every network device continuously, and it does not schedule up or down checks for network devices | Not supported | Keep your monitoring system for availability alarms |
|---|
| By default, Devexana reads each switch's running configuration once a day. A wider set of read commands is an installation setting | Limited | Switches over SSH and SNMP |
|---|
| Interface error counters and CPU load come only from network devices that Devexana reads through NAPALM | Limited | Switches over SSH and SNMP |
|---|
| A connector for a monitoring system other than PRTG, such as AKiPS, Nagios or Observium, is built during onboarding | Onboarding | Supported vendors and protocols |
|---|
| Devexana keeps a configuration history from its daily read of each switch running configuration. It does not run a separate backup job, and it does not restore a configuration to a device | Limited | Keep your current configuration backup tool for restores |
|---|
Vendors
Supported vendors and protocols lists each supported vendor and its support tier.
| Limit | Status | What to do or read |
|---|
| A connector for Fortinet, Palo Alto Networks, Check Point, SonicWall, pfSense, OPNsense, Ubiquiti UniFi, MikroTik or Juniper Mist is built during onboarding | Onboarding | Supported vendors and protocols |
|---|
Firewall analysis
Maps
Answers and AI
| Limit | Status | What to do or read |
|---|
| A citation shows which stored record the model was given. It does not prove that the record supports every sentence of the answer | Limited | Open the citations before you rely on an answer. Cited answers, Check an answer against its sources |
|---|
| Devexana publishes no accuracy figure for the current release | Not published | Check answers against their sources. Check an answer against its sources |
|---|
| The shipped models do not read images and do not take speech input | Not supported | Ask in text |
|---|
| Answers come from retrieval and prompting over your stored records. Devexana does not offer model training on your data | Not supported | Where the AI runs |
|---|
| By default, Devexana produces answers with models that run on the appliance. A deployment can run with no cloud model. In production, customers do not bring their own model keys. If a deployment uses a cloud model, Devexana provides it through Devexana's zero-data-retention (ZDR) agreement on AWS. The optional networking assistant uses a cloud model only when Devexana has set up the cloud connection for that deployment. Other cloud features are off by default. Devexana records each networking assistant request in the egress log on the appliance | Limited | Where the AI runs, Outbound connections: the complete list |
|---|
Security and access
Delivery and operations
| Limit | Status | What to do or read |
|---|
| The operating system needs a one-time online package install with network access during installation | Limited | Plan this network access with Devexana. How Devexana is delivered |
|---|
| The supported hardware is the NVIDIA DGX Spark. Jetson and general x86 computers are not supported | Not supported | How Devexana is delivered |
|---|
| If the health check fails after an update, the appliance automatically rolls back the code. Devexana support restores the database when a restore is necessary | Limited | How Devexana is delivered |
|---|
| Devexana has not published the result of a restore drill | Not published | How Devexana is delivered |
|---|
Not in this release
These capabilities are not available to customers in this release:
- Mobile app
- Records retention, legal hold and disposition screens
- Alert-rule editor
- Ticket correlation and drafted ticket notes
- Campus atlas map and the network sign-ins page
- Public API
- No-code builder for new sources
- Fleet or multi-site cloud management
Edition differences
On the Government/Education edition, OSCAL export and scheduled audit reports have no screen of their own. The OSCAL package is included in the auditor evidence pack. Editions compares the editions.
Applies to Devexana release 0.3.182. Page updated 2026-10-20. Questions or corrections: support@devexana.com.
