| CGSDW-35936 This issue is resolved in ION version 6.5.3 | Both Data Center ION devices advertise duplicate prefixes. This
occurs when two branch sites can advertise the same prefix set to
the DC cluster. |
| CGSDW-30069 This issue is resolved in ION version 6.3.6 | ADEM probes for private applications fail when
traffic routes over the Secure Fabric. The system incorrectly sends
probe traffic to the direct internet path. |
| CGSDW-33282 This issue is resolved in ION version
6.3.6, 6.4.3, and 6.5.3. | After any process crash or ION device reboot, the
system fails to zip and save the logs directory, leading to
unmanaged log accumulation. |
| CGSDW-33237 This issue is resolved in ION version 6.3.6 | After upgrading to ION device 6.x with DPDK, higher
control plane latency is observed, primarily because deeper Rx MAC
and Intercore FIFOs introduce head-of-line blocking, particularly
impacting applications during high-rate scan traffic. |
| CGSDW-32621 This issue is resolved in ION version 6.3.6 | After upgrading from 6.1.x to 6.3.5-b4, standby ION
devices are losing connectivity to the controller because a local
route entry for the LAN-IP, sharing the same subnet as the
controller interface gateway, prevents packets from being locally
terminated on the standby ION device. |
| CGSDW-32177 | After debug logging and filters are enabled, they are
not disabled, leading to critical issues and customer
outages. |
| CGSDW-31958 This issue is resolved in ION version 6.3.5 | After upgrading to 6.3.5-b4, Virtual Interfaces are experiencing
"recvmsg() No buffer space Available" and "fp_drain_exec Resource
temporarily unavailable" errors, leading to connectivity loss on ION
devices, specifically observed with VPN and HA communication
failures, which resulted in a split-brain scenario. |
| CGSDW-31862 This issue is resolved in ION version
6.3.6. | After an fp-rte process crash on 6.3.5-b4, a three-minute
split-brain scenario occurrs because the HAM process waits for the
fp-rte core dump creation to complete, leading to customer traffic
impact. |
| CGSDW-31861 | After configuring enterprise DNS servers on the controller
interface, app-probes are being sent relentlessly, leading to
continuous CPU spikes and packet drops on lower-end ION devices,
indicating a need for a timeout or limit on probe frequency until a
genuine client DNS request fails. |
| CGSDW-30747 | After adding or removing Prisma Access tags from site
configurations, or removing circuit tags from physical interfaces,
the charon process restarts, unexpectedly triggering an HA
switchover, which disrupts customer operations, particularly when
rebuilding PA tunnels or migrating branches between regions. |
| CGSDW-30067 This issue is resolved in ION version 6.4.3 and 6.5.3 | After deploying ION 3200 devices in L2 mode on 6.3.4-b2,
core.dpdk-ctrl-port issues are observed at ixgbe_dev_clear_queues,
indicating a problem with DPDK control plane operations on the
ION device. |
| CGSDW-27527 | After experiencing fast path CPU utilization at 100%, ION device
performance degrades for active sessions, exhibiting high latency
followed by complete traffic loss and a forwarding system outage, as
seen with custom AppMix traffic which recovers only after an ION device
reboot. |
