>
    Strata Copilot
    Known Issues in Prisma SD-WAN ION Release 6.4
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN ION Device Release 6.4
    4. Known Issues in Prisma SD-WAN ION Release 6.4
    Download PDF
    Prisma SD-WAN

    Known Issues in Prisma SD-WAN ION Release 6.4

    Table of Contents

    Known Issues in Prisma SD-WAN ION Release 6.4

    Learn about the known issues in Prisma SD-WAN ION Release 6.4.
    Review a list of known issues for Prisma SD-WAN ION Release 6.4.

    Known Issues in Prisma SD-WAN ION Device Release 6.4.3

    The following table lists the known issues in Prisma SD-WAN ION Device Release 6.4.3.
    Issue IDDescription
    CGSDW-36321The DHCP-relay forwards the DHCP server reply to an incorrect destination. This issue occurs when the network configuration contains overlapping IP addresses across multiple VRF instances.
    CGSDW-33589 This issue is resolved in ION version 6.3.7.The device does not add aggregated routes learned via BGP to the FIB. This occurs when the system receives a BGP aggregate that contains connected subnets or VLANs.
    CGSDW-35622 This issue is resolved in ION version 6.4.3 and 6.5.3.Data traffic is leaving out of controller port of the DC ION because the controller prefix was not getting updated with the core peer IP.
    CGSDW-30883 This issue is resolved in ION version 6.3.6.rtr_mgr_api exception observed due to timing issue in handling wanpaths update & delete.
    CGSDW-28329 This issue is resolved in ION version 6.1.9, 6.1.11, 6.3.5, and 6.5.1.A timing mismatch between route withdrawal and the coalesce timer caused backup data center IONs to continue advertising branch prefixes when a VyOS peer flapped.

    Known Issues in Prisma SD-WAN ION Device Release 6.4.2

    The following table lists the known issues in Prisma SD-WAN ION Device Release 6.4.2.
    Issue IDDescription
    CGSDW-30788 This issue is resolved in ION version 6.4.3 and 6.5.3.fp-rte corefile is generated in asymmetric LAN flow with specific policy.
    CGSDW-27241 This issue is resolved in ION version 6.4.2 and 6.5.1.After enabling logs for the flow controller, the logs are not rolling over correctly, thus using up all the space in the log directory.
    CGSDW-24273 This issue is resolved in ION version 6.3.4 and 6.4.2.Manually shutting down an interface fails to remove the IPv6 default route from the FIB.
    CGSDW-22192 This issue is resolved in ION version 6.3.3, 6.3.4, and 6.4.1.A core.fp-rte process failure occurs when client-side traffic is abruptly started and stopped.
    CGSDW-34703 This issue is resolved in ION version 6.2.4.A memory leak occurs when a bwm_server worker thread becomes indefinitely stuck on a recv_msg call.
    CGSDW-32037 This issue is resolved in ION version 6.3.6.Specific traffic patterns triggered critical memory exhaustion leading to OOM states.
    CGSDW-27387 This issue is resolved in ION version 6.3.5.Traffic originating from a Standard VPN was not correctly routed to branches across the fabric.
    CGSDW-25738 This issue is resolved in ION version 6.3.4 and 6.4.2.An issue occurred within the IPFIX socket connection logic where the socket bound exclusively to the device interface.

    Known Issues in Prisma SD-WAN ION Device Release 6.4.1

    The following table lists the known issues in Prisma SD-WAN ION Device Release 6.4.1.
    Issue IDDescription
    CGSDW-30069 This issue is resolved in ION version 6.3.6.ADEM probes for private applications fail when traffic routes over the secure fabric.
    CGSDW-31654FC crashes at pan_sml_vm_set_field_flag() within the ml7 library.
    CGSDW-24973 This issue is resolved in ION version 6.4.1.Some advertised prefixes are not displayed for a DC ION device after changing site mode.
    CGSDW-23582OSPF routes are still advertised even when the WAN paths are deleted.
    CGSDW-24482 This issue is resolved in ION version 6.2.4, 6.3.4, and 6.4.1.An HMAC integrity failure occurred during the device upgrade process.
    CGSDW-24112 This issue is resolved in ION version 6.3.4 and 6.4.1.The HMAC integrity check was bypassed for several software packages during boot up.
    CGSDW-24099 This issue is resolved in ION version 6.3.4 and 6.4.2.Interfaces failed to program IP rules when the system scaled to 2,000 VRFs.
    CGSDW-23397 This issue is resolved in ION version 6.3.4.The snmp_network_discovery service restarted every hour on idle machines.
    CGSDW-23098 This issue is resolved in ION version 6.3.4 and 6.4.1.The system failed to detect overlapping IP subnets across different VRF instances.
    CGSDW-22281 This issue is resolved in ION version 6.3.3, 6.3.4, and 6.4.1.The app-probe process crashed on certain branch devices when multiple duplicate requests were received.
    CGSDW-21868 This issue is resolved in ION version 6.3.2 and 6.4.1.Outbound SSH6 connections failed to establish on ION devices.
    CGSDW-21025 This issue is resolved in ION version 6.3.2.The system failed to correctly update the performance policy cache during interface state changes.
    CGSDW-31944 This issue is resolved in ION version 6.3.6.The snmpd process consumed excessive memory on low-end hardware models.
    CGSDW-27498 This issue is resolved in ION version 6.3.5 and 6.5.1.Subinterfaces failed to retain the default route following a system reboot on PA-9200.
    CGSDW-26226 This issue is resolved in ION version 6.1.10, 6.2.4, 6.3.4, and 6.4.2.The DC HUB device failed to advertise /25 routes to the core in specific learning scenarios.
    CGSDW-25586 This issue is resolved in ION version 6.1.10, 6.3.4, and 6.4.2.The emif process crashed on ION devices when GRE was utilized with FIPS mode enabled.

    © 2026 Palo Alto Networks, Inc. All rights reserved.