Prisma SD-WAN ION Device Release Notes
  • Prisma SD-WAN ION Device Release Notes
  • Prisma SD-WAN Documentation
  • All Documentation
>
Known Issues in Prisma SD-WAN ION Releases
Focus
Download PDF
Focus
  1. Home
  2. Prisma SD-WAN
  3. Prisma SD-WAN ION Device Release 6.5
  4. Known Issues in Prisma SD-WAN ION Releases
Download PDF
Prisma SD-WAN

Known Issues in Prisma SD-WAN ION Releases

Table of Contents
Learn about the known issues in Prisma SD-WAN ION Releases.
This table lists known issues across Prisma SD-WAN ION releases. Starting with 6.5.0 release, a separate Known Issues document will no longer be published. Refer to this document for 6.5.0 and any supported release.
Releases marked with an asterisk (*) have reached End-of-Life (EoL). Review the hardware and software End-of-Life (EoL) information for products and releases that have reached End-of-Life (EoL) status.
Issue IDDescriptionKnown in Release/(s)
CGSDW-29960If overlapping IP addresses are configured on a branch site, syslogs are not visible on the DC ION.6.5.1
CGSDW-29923The SNMPWALK command from the DC server does not work if overlapping IP addresses are configured on the branch site.6.5.1
CGSDW-27241
This issue is resolved in ION version 6.4.2.
After enabling logs for the flow controller, the logs are not rolling over correctly, thus using up all the space in the log directory.6.4.2
CGSDW-26342Prefixes received from a DC on the WAN path are being distributed back to the DC via the Standard VPN path causing a traffic loop. The workaround is to configure a prefix list which explicitly denies the prefixes coming from the DC on the Standard VPN.6.5.1
CGSDW-26096A standby DC ION in a DC cluster does not forward the received traffic on the intra-cluster tunnel. 6.5.1
CGSDW-24973Some advertised prefixes are not displayed for a DC ION device after changing the site mode from Control to Disabled and then back to Control.6.4.1
CGSDW-23582OSPF routes are still advertised to the core BGP router even when the WAN paths for OSPF are deleted.6.4.1
CGSDW-23395
This issue is resolved in ION version 6.3.4.
After upgrading to device software version 6.3.2-b5, the backup ION device continues to attempt to establish a connection with the controller. If controller port of the device next hop is pointing to ION device LAN interface then use the following workaround for this issue:
  • On the active device, add a static arp entry on the LAN interface which points to the controller interface IP address of the backup device.
  • On the backup device, add a static arp entry on the LAN interface which points to the controller interface IP address of the active device.
6.3.2
CGSDW-22659The system does not display the correct interface speed for interfaces where no link is detected, i.e. when the operational status is down.6.1.10
CGSDW-21451
This issue is resolved in ION version 6.4.1.
After being assigned to a site, the ION device does not receive the VRF context in time. This causes incorrect mapping between interfaces and VRFs.6.3.1
CGSDW-21409
This issue is resolved in ION version 6.4.1.
FC crashes when many app-map entries are being created, modified, or deleted in parallel. Resolved an issue where the FC was crashing when many app-map entries were being created, modified, or deleted in parallel.
CGSDW-20864
This issue is resolved in ION version 6.4.1.
If the only prefix of a VRF at a branch site is deleted, then the entries leaked to the DC site for the specific VRF are also deleted. The workaround is to configure at least one dummy global prefix for the VRF at the branch site.6.3.1
CGSDW-20671
This issue is resolved in ION version 6.3.2.
Incidents related to RADIUS server are raised even when a RADIUS server is not configured.6.3.1
CGSDW-20649The SNMP daemon process was slowly consuming the memory in the ION device suggesting a possible memory leak.6.3.1
CGSDW-19707
This issue is resolved in ION version 6.1.7.
The Standard VPN path is not displayed in the list of paths when configured through easy onboarding.6.1.6
CGSDW-19357When a DC ION receives routes for a /32 prefix from both the underlay and overlay, the DC ION tries to split the route and thus the BGP route selection process fails.6.1.9, 6.1.8, 6.1.7, 6.1.6
CGSDW-19237
This issue is resolved in ION version 6.1.7.
FC crashes due to stack corruption in ION 5200.6.1.
CGSDW-18905First flow of direct VNC traffic gets denied as the server port in the ION app-def is 0-0.6.1.9, 6.1.8, 6.1.7, 6.1.6
CGSDW-16922Potential fp-rte crashes during the upgrade to ION device version 6.1.5-b7 may lead to longer upgrade durations. However, it does not impact systems that are already up and running.6.3.1, 6.1.9, 6.1.8, 6.1.7, 6.1.6
CGSDW-16031There is a delay in bringing down the BGP peer of a data center ION device when the remote end of the interface is shut down.6.1.4
CGSDW-16005
This issue is resolved in ION version 6.1.5.
Resolved an issue where the app-engine was crashing on an ION 2000 device during continuous traffic flow.6.1.4
CGSDW-15988On upgrading the device software, a parent interface with more than 20 subinterfaces flaps, resulting in flapping of the IP addresses of the subinterfaces.6.1.4
CGSDW-15970When rebooting the active device in an HA configuration on the 2000 platform, the bypass pair of the active device does not pass traffic during reload.6.1.4
CGSDW-15967
This issue is resolved in ION version 6.3.2 and 6.1.7.
High memory consumption by the ADEM process causes ION device reboot.
CGSDW-15868
This issue is resolved in ION version 6.1.5.
Resolved an issue wherein high memory consumption by the ADEM process was causing other processes to crash and device to reboot.6.1.4
CGSDW-15257
This issue is resolved in ION version 6.1.5.
Resolved an issue wherein previously reachable prefixes from a DC ION device became unreachable after upgrading the device software to version 6.1.2.6.1.4
CGSDW-15027
This issue is closed.
Incorrect SNMP interface bandwidth reported after a software upgrade from ION device version 5.6.6.3.2, 6.1.6
CGSDW-14980
This issue is resolved in ION version 6.1.4.
Custom applications with L3/L4 prefixes are not detected when used in security policies.6.1.3
CGSDW-14456The fp-rte process crashes when fetching information on security policy counters and app stats.6.1.3
CGSDW-14432The fp-rte process crashes when fetching information on security policy counters and app stats.6.1.5, 6.1.4, 6.1.1
CGSDW-14344
This issue is resolved in ION version 6.1.3 and 6.2.2.
FC process crashes when traffic is initiated on an idle ION device.6.2.1
CGSDW-13397
This issue is resolved in ION version 6.1.6.
Core files seen during TCP SYN scan which is using up memory and causing FC to crash.
CGSDW-12733DPD with IKEv2 on Standard VPN does not bring the tunnel down based on the configuration on the DPD timer.6.1.3
CGSDW-12698
This issue is resolved in ION version 6.1.5.
Network reachability for WAN to LAN traffic failing for non-CGNX sites.6.1.3, 6.1.1
CGSDW-12113Branch backup ION device displays as partially online following Hood maintenance.6.1.3
CGSDW-10819On Prisma SD-WAN switching platforms, multicast packets, such as an LLDP packet, received on one interface of a bypass pair will loop between the two interfaces of the bypass pair. The workaround is to upgrade the device to version 6.1.2 or higher.6.1.1
CGSDW-8389Prisma Access tunnels configured manually will not support ADEM.6.1.1
CGSDW-7806
This issue is resolved in ION version 6.1.9.
The DHCP Relay chooses the secondary IP address instead of the primary IP address for sending a DHCP request.

Technical Documentation

Company

Legal Notices

© 2025 Palo Alto Networks, Inc. All rights reserved.