>
    Strata Copilot
    Addressed Issues in Prisma SD-WAN ION Release 5.6
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN ION Device Release 5.6
    4. Addressed Issues in Prisma SD-WAN ION Release 5.6
    Download PDF
    Prisma SD-WAN

    Addressed Issues in Prisma SD-WAN ION Release 5.6

    Table of Contents

    Addressed Issues in Prisma SD-WAN ION Release 5.6

    Learn about the issues addressed in Prisma SD-WAN ION device release 5.6.
    Learn more about the issues addressed in Prisma SD-WAN ION device release 5.6.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.19

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.19.
    Issue IDDescription
    CGSDW-13559
    Resolved an issue where periodic flapping of the cellular data session was observed when using Verizon Wireless Network, Telstra, and possibly other carriers with direct to internet traffic on the ION 1200 devices.
    CGSDW-16003
    Resolved an issue where the FC was crashing due to an ADEM application probe.
    CGSDW-19542
    Assessed that the ION device is not vulnerable to a Terrapin attack (CVE-2023-48795).
    CGSDW-23390Added the latest ADEM package to device software version 5.6.19.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.17

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.17.
    Issue IDDescription
    CGSDW-11327Resolved an issue where old records in the ARP table were not being removed.
    CGSDW-17125Resolved an issue where the controller ARP entry was missing on the ION device gateway.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.15

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.15.
    Issue IDDescription
    CGSDW-14132Resolved an issue where the prefix filters for security policies were missing after upgrading the device.
    CGSDW-15201Resolved an issue where the ingress capacity bandwidth calculation was displaying as zero for some WAN links.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.13

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.13.
    Issue IDDescription
    CGSDW-2614Resolved an issue where the memory usage was increasing when the device did not have connectivity with the controller.
    CGSDW-8227Resolved an issue that caused the system routes to disappear during a switchover in a branch high availability (HA) deployment.
    CGSDW-10086Resolved an issue in the Rtr-mgr, which was causing the system to eventually run out of memory.
    CGSDW-10332Resolved an issue where GRE tunnels were not being established on hardware platforms with Zscaler endpoints.
    CGSDW-12127Resolved an issue causing intermittent packet drops for ICMP/PING flows in WAN to LAN traffic from Prisma Access mobile users to a Prisma SD-WAN remote branch LAN host.
    CGSDW-12189Resolved an issue where the DHCP server could not configure the bootfile for devices without a PXEClient VCI.
    CGSDW-12663Resolved an issue in which the HA switchover took place only after restarting the flow controller (FC).
    CGSDW-12977Resolved an issue that was causing a missing ARP entry for the controller gateway after upgrading to version 5.6.11.
    CGSDW-13551Resolved an issue where asymmetric routing between DIA and GRE tunnels was not working for TCP traffic.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.11

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.11.
    Issue IDDescription
    CGSDW-8754Resolved an issue in which the BGP status for a backup ION device displayed as unsynchronized on the web interface.
    CGSDW-10791Resolved an issue where the controller port was stuck with an incorrect ARP entry and went offline.
    CGSDW-10905Resolved an issue where a standard VPN tunnel may flap during the IKE rekey process.
    CGSDW-11041Resolved an issue where both the data center ION devices were advertising prefixes.
    CGSDW-11147Resolved an issue wherein the data center ION device were dropping fragmented packets for MTUs greater than 1376.
    CGSDW-11241Resolved an issue where a large number of UDP packets were being sent from the data center ION device to the branch ION device.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.9

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.9.
    Issue IDDescription
    CGSDW-8622Resolved an issue where multihop BGP routes were incorrectly parsed.
    CGSDW-9063Resolved an issue where the device manager was crashing.
    CGSDW-9256Resolved an issue where the static routes with reachability probes were working incorrectly.
    CGSDW-9379Resolved an issue wherein remote login to the ION device for CLI access was failing.
    CGSDW-9873Resolved an issue that was causing device manager process restart.
    CGSDW-10086Resolved an issue where the Rtr-mgr process would leak memory and eventually run out of memory.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.7

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.7.
    Issue IDDescription
    CGSDW-6956Resolved an issue where traffic stopped flowing between branch ION devices and GCP data center ION devices on release 5.6.x.
    CGSDW-7761Resolved an issue wherein all the VPNs for a data center ION device went down.
    CGSDW-7776Resolved an issue where the element manager process deleted interfaces on process reload or restart.
    CGSDW-7845Resolved an issue where graceful restart capability was not advertised to BGP peers.
    CGSDW-7866Resolved an issue where multiple DHCP processes were running for a single DHCP relay configuration.
    CGSDW-9692Resolved an issue wherein downloading large files over service links was slow, along with TCP retransmissions. This applies to private Layer 2 deployments.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.5

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.5.
    Issue IDDescription
    CGSDW-2887Resolved an issue where the RTR Manager was taking long time to clear the interface messages after a switchover.
    CGSDW-4080Added support for displaying the SNMP engine ID using the CLI toolkit commands.
    CGSDW-4185Added support to disable less secure ciphers on Prisma SD-WAN for SSH.
    CGSDW-4410Resolved an issue when the ION device received an application definition update which improperly removed the mapping entries for the HTTP and SSL applications. The result of which could be, incorrect policy matches for generic HTTP and SSL traffic.
    Workaround: A one time reboot of the device or a restart of the app-engine process using the command debug process restart name=tcpproxy.
    CGSDW-4870Resolved an issue where BGP routes were not parsing properly because of repeated spaces between AS numbers.
    CGSDW-5020Resolved an issue where a prefix was advertising from both hub device as the VPNs were in active/true status on both the hubs when VPN keepalive timers are set with a high value.
    CGSDW-5057Resolved an issue where the ION 9000 device fan was making noise with DPDK.
    CGSDW-5102Resolved an issue where the hub was advertising same global prefix for multiple VPNs resulting in traffic failure.
    CGSDW-5416Resolved an issue where after tunnel and BGP creation by the Prisma Access Cloudblade, BGP was down and did not show any status on the portal and CLI.
    CGSDW-5603Resolved an issue where the BWM server was holding open connections in AWS deployment.
    CGSDW-6025Resolved an issue where latency is miscalculated when it is higher than 500ms for ICMP probe.
    CGSDW-6138Resolved an issue where the Internet Direct Reachability Down alarm triggered on the backup device was not getting suppressed.
    CGSDW-6194Resolved an issue where the Layer 7 application were not being detected correctly.
    CGSDW-6268Resolved an issue where the data center ION device was not sending traffic to the branch ION device.
    CGSDW-6355Resolved OpenSSL vulnerability CVE-2022-0778.
    CGSDW-6466Resolved an issue in the IPSEC crypto offloading process logic which affected Data Center ION 9000s running 5.6.1 or 5.6.3. As a result of this, customers may observe a degradation in throughput performance, erroneously reported link quality latency measurements, or VPN flaps due to missed keepalives.
    CGSDW-6724Resolved an issue where DHCP relay was not working, if the DHCP server was running on interface through which DHCP relay packet was sent out.
    CGSDW-6845Resolved an issue where, in rare cases, FC was restarted when there was branch to branch asymmetric traffic through the hub with both branches on different hubs transition to the same hub.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.3

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.3.
    Issue IDDescription
    CGSDW-1424Resolved an issue where multiple internal URLs were failing nslookup, causing NTP to be out of sync.
    CGSDW-2816Resolved an issue where static-route with higher AD was programmed on bypass pair FIB.
    CGSDW-3227Resolved an issue for SAML/SSO whereby '-' was not allowed in IdP domain names, this is supported now.
    CGSDW-3420Resolved an issue where the ADEM portal was not displaying the Prisma Access SPN name for Standard VPN interfaces.
    CGSDW-3521Resolved an issue where a large number of DCs assigned to a single DC group was causing the FC process to crash.
    CGSDW-3958Resolved an issue where the Site Summary screen was showing incorrect values for the current overall consumed bandwidth if the time range selected was not last one hour.

    Addressed Issues in Prisma SD-WAN ION Device Release 5.6.1

    The following table lists the issues addressed in Prisma SD-WAN ION Device Release 5.6.1.
    Issue IDDescription
    CGSDW-826Resolved an issue where the LAN side FIB had no prefixes present even though the LAN interfaces were Admin Up and had learned or configured prefixes present.
    CGSDW-955Resolved an issue where BGP peer status was not in sync with the CLI and the web interface.
    CGSDW-1081Resolved an issue where NAT_POLICY_STATIC_NATPOOL_OVERRUN alarm was raised but not displayed properly in the web interface.
    CGSDW-1634Resolved an issue where data center ION devices that have internet access via the internet labeled ports only fail to establish remote access sessions.
    CGSDW-1935Resolved an issue where the web interface was showing Layer 3 LAN forwarding configured, but not configured on the ION device, while the LAN interfaces are configured as Layer 3 on the ION device.
    CGSDW-2679Resolved an issue where the VPN marked as Admin Down did not remove the routes posted in the FIB associated with it.
    CGSDW-3193Resolved an issue where VPNs in a data center with 5.2.x and branch devices with 5.6.1 do not come up.
    CGSDW-3257dhcp lease command failed because of missing file in dhcp package.
    CGSDW-3725Resolved an issue where when setting an interface status to Admin Down on a DC ION device on the user interface, the same status was not reflected on the ION device.

    © 2026 Palo Alto Networks, Inc. All rights reserved.