| CGSDW-33589 | Resolved an issue where BGP aggregated routes were not added to
the forwarding table, preventing traffic from reaching connected
subnets under the aggregated prefix. This occurred because the prefix
length validation incorrectly rejected connected route
supersets. |
| CGSDW-37535 | Resolved an issue where the traceroute command with the -I option
defaulted to UDP instead of using ICMP. This occurred because the
ICMP traceroute feature was disabled in the build
configuration. |
| CGSDW-37642 | Resolved an issue where Layer 7 system applications were randomly
identified as SSL even when application mapping cache was present.
This occurred because SSL detection from the application engine
overrode previously cached DNS-based application identification when
TLS 1.3 traffic lacked Server Name Indication (SNI). |
| CGSDW-38087 | Resolved an issue where device certificate renewal failed. This
occurred because TPM key creation failed during the renewal
process. |
| CGSDW-38388 | Resolved an issue where Data Center virtual ION devices stopped
advertising BGP prefixes to Branch Gateways, causing connectivity
loss. This occurred because BGP prefix advertisements were not
properly maintained during virtual ION operational state
changes. |
| CGSDW-38511 | Resolved an issue where the ION device became unresponsive after
unexpected power loss and reboot. This occurred because the
authentication daemon process terminated unexpectedly during system
recovery. |
| CGSDW-38747 | Resolved an issue where Data Center hub devices took over one hour
to process interface queues during VPN failover events at 6,000 VPN
scale, receiving prefixes from only one site per minute. This
occurred because interface programming operations were processed
sequentially without batching optimization. |
| CGSDW-38824 | Resolved an issue where SSH authentication logs for successful
login sessions were missing the source IP address (rhost field). This
occurred because the authentication daemon did not properly log remote
host information for successful SSH sessions. |
| CGSDW-38944 | Resolved an issue where both active and standby ION devices in a
high availability pair responded to ARP requests after LACP
reconvergence, causing duplicate ARP responses. This occurred because
kernel ARP filter rules were removed during LAG interface changes but
not reapplied after LACP reconvergence completed. |
| CGSDW-38947 | Resolved an issue where the ION device went offline and did not
reconnect to the controller. This occurred because internal management
processes entered an unrecoverable state requiring a manual
reboot. |
| CGSDW-38948 | Resolved an issue where the system application twitter-base was not
detected for new sessions after deleting a custom application with the
same domain name. This occurred because the application mapping cache
was not properly invalidated when custom applications were
deleted. |
| CGSDW-39293 | Resolved an issue where the ASE process repeatedly restarted on
active ION devices after replacing ION 3000 devices with ION 3200
devices using the RMA wizard. This occurred because the deprecated ASE
process was not properly decommissioned on upgraded devices. |
| CGSDW-39585 | Resolved an issue where Layer 2 mode VLAN interfaces became
operationally down even though they were configured as
administratively up. This occurred because interface state
synchronization failed during device initialization, requiring manual
interface state changes to restore connectivity. |
| CGSDW-39695 | Resolved an issue where DHCP relay stopped working after device
upgrade or reboot in deployments with 10 or more sub-interfaces
configured. This occurred because DHCP relay service initialization
did not properly restore relay configurations for all VLAN
interfaces. |
