The SD-WAN plugin requires unique interface numbers across different interface types. The commit all operation on managed firewalls fails if you mix the interface types (such as, Ethernet, Cellular) with the same interface number. For example, the configuration push or commit all operation fails if your SD-WAN configuration contains Ethernet and Cellular interface types with the same interface numbers, like ethernet1/1 and cellular1/1.

Workaround: Ensure that you don't use the same interface number for different interfaces for your firewalls. Always verify interface numbering when configuring SD-WAN interfaces to prevent deployment issues.

The commit all operation in Panorama fails when a branch or hub firewall is added to an existing SD-WAN cluster.

After installing SD-WAN plugin 2.2.7 version, the SD-WAN Devices page (PanoramaSD-WANDevices) does not load intermittently.

(SD-WAN Mesh topology only) BGP connectivity cannot be established between the SD-WAN branch and hub firewalls.

In Panorama, when you configure User-ID in the zone and push the configuration to the hub firewall, the configuration does not get enabled in the firewall.

(SD-WAN hub-and-spoke deployments only) DDNS validation fails on Panorama (throwing a commit error) when one or more SD-WAN branches are configured with dynamic IP addresses and hub configured with static IP address.

In an SD-WAN cluster, when the hub and branch firewalls (connecting to that hub) does not have a matching private link types, the plugin won't be able to generate the zone information. The SD-WAN plugin displays a warning message when no zone is associated with an interface.