: Addressed Issues in Prisma SD-WAN ION Device Release 6.3.4
Focus
Focus

Addressed Issues in Prisma SD-WAN ION Device Release 6.3.4

Table of Contents

Addressed Issues in Prisma SD-WAN ION Device Release 6.3.4

Learn about the issues addressed in Prisma SD-WAN ION device release 6.3.4.
The following table lists the issues addressed in Prisma SD-WAN ION Device Release 6.3.4.
Issue IDDescription
CGSDW-19833Disabled NR5G SA mode and enabled NR5G NSA mode for 5G IPv6 connectivity.
CGSDW-20234Resolved an issue where a virtual interface with sub-interfaces was not passing traffic.
CGSDW-20824Reduced the downtime in tunnel establishment, such that the ION device re-initiates a new SA with the peer as soon as three tunnel probes fail.
CGSDW-21115Resolved an issue where the FEC action was not being displayed in the Flow Browser for inbound (DC to branch) traffic.
CGSDW-21176Resolved an issue where the SVI interface did not pass traffic.
CGSDW-21320Resolved an issue where the ION device did not respond to DHCP until it was rebooted or there was a change in configuration.
CGSDW-21512
Enabled default behavior for the bypass pair latch only in the following scenarios:
  • The device is a backup device in an HA group.
  • The device is powered off.
CGSDW-22072Resolved an issue where the rtr_mgr_api process was holding a lot of memory.
CGSDW-22192Resolved an issue where core files were being generated and the device was losing connectivity with the controller when traffic on the client side was abruptly stopped and restarted.
CGSDW-22259Resolved an issue where SNMPv3 was not polling all the interfaces on the ION 9200 platform.
CGSDW-22389Resolved an issue where the app probe remained operational after a firewall was removed from the active path.
CGSDW-22633Fixed memory issues that were being caused due to security policy configuration.
CGSDW-22700Resolved an issue where the branch ION device acting as a DHCP relay in a custom VRF configuration was not forwarding requests to the DHCP server at the DC ION device.
CGSDW-23098Resolved an issue where overlapping IP addresses were not working as expected in VRF.
CGSDW-23221Resolved an issue where the ionhwd process was consuming a lot of memory.
CGSDW-23395Resolved an issue in which the backup ION device continued to attempt to establish a connection with the controller on an upgrade.
CGSDW-23397Resolved an issue where the snmp_network_discovery service was restarting every hour on a device which had an attached SNMP discovery profile with an SNMPv3 configuration.
CGSDW-23429Resolved an issue where the remote terminal connection was failing with the used_for_controller interface.
CGSDW-23493Added CPLD reset reasons to the device reboot reasons for better troubleshooting.
CGSDW-23534Resolved an issue where the Ingress displayed a zero value for Bandwidth Utilization.
CGSDW-23608Optimized security policies to prevent the generation of core files for fp-rte.
CGSDW-23705Resolved an issue where stale entries for VPN paths were being retained in the lqm_results.state database.
CGSDW-23881Resolved an issue for a potential DDoS vulnerability wherein the flows now time out correctly.
CGSDW-23921Resolved an issue where BGP sessions were not being re-established after a LAN switch reset for the ION 1200-S platform.
CGSDW-23928Resolved an issue where the snmpwalk command was returning incorrect information.
CGSDW-24099Increased the VRF scale for device interfaces.
CGSDW-24112Resolved an issue where some packages were being skipped for HMAC integrity check during boot up.
CGSDW-24262Resolved an issue where a route, which was not necessarily the best route, was getting selected as the reachable route.
CGSDW-24269Resolved an issue where the APPLICATION_CUSTOM_RULE_CONFLICT incident was being raised for system applications.
CGSDW-24273Resolved an issue where the v6 default routes for Internet and Private WAN were not being removed from the FIB entries even after powering down the interface.
CGSDW-24400Resolved an issue where the User ID agent was crashing when there were IPv6 entries in NGFW.
CGSDW-24482Resolved an issue where HMAC integrity check was failing for the controller_ca_chain.pem.
CGSDW-24485Resolved an issue of FC crashing for flows with path type LAN_TO_PRIVATE_DIRECT.
CGSDW-24501Resolved issues of higher switchover periods in an HA setup.
CGSDW-24875Fixed an issue where the LQM service was crashing.
CGSDW-25152Resolved an issue where custom L3/L4 applications were not being detected properly for UDP traffic after an HA switchover.
CGSDW-25179Resolved an issue wherein the LAN interface on a standby ION device in an HA configuration was sending ARPs causing LAN disruption.
CGSDW-25586Resolved an issue where the GRE tunnel was not being established when in FIPS mode.
CGSDW-25658Resolved an issue of the fp-rte process restarting which was leading to HA fail-over and instability of the device.
CGSDW-25738Resolved an issue for IPFIX, wherein the socket connect was always binding to the device instead of the IP address for non-used-for-controller interfaces.
CGSDW-26226Resolved an issue in which the BGP on a DC ION device did not advertise the /25 route to the core router after multiple VPN flaps (due to switchover in the branch).
CGSDW-26247Resolved an issue where the FC control thread was taking a lot of time to populate fib-leak entries in FIB scale.