Citrix SD-WAN

Release Notes

This release note describes fixed issues and known issues applicable to Citrix SD-WAN software release 11.1 version 2 for the SD-WAN Standard Edition, WANOP, Premium Edition appliances, and SD-WAN Center.

For information about the previous release versions, see the Citrix SD-WAN documentation.


Citrix SD-WAN 11.1.2c release addresses the security vulnerabilities described in and replaces release 11.1.2.

Fixed Issues

SDWANHELP-1299: When a branch establishes a dynamic virtual path with another branch and if WAN-to-WAN forwarding is enabled on the branch, then the branch forwards the routes received over the dynamic virtual path to other sites. When the dynamic virtual path goes down, the learned routes are not removed from the other sites.

SDWANHELP-1326: After upgrading SD-WAN to 11.1.0/11.1.1 version, on some platforms PPPoE links fail to get connected.

SDWANHELP-1332: In rare cases, the SD-WAN service might crash during NetFlow statistics collection.

SDWANHELP-1337: For AWS’s Elastic Compute Cloud (EC2), the SD-WAN instance having more than 32 GB memory, the virtual instance falls back to the default value of 16 static Virtual Paths. This leads to undefined behavior and possible crash scenarios when more than 16 static Virtual Paths are configured.

SDWANHELP-1365: In a High Availability GEO MCN setup with WAN-to-WAN forwarding enabled, an internet service down event might trigger an erroneous scenario wherein routes learned from the Secondary GEO MCN take higher precedence than the Primary GEO MCN.

SDWANHELP-1385: The SD-WAN device serial number information might be lost and reset to Default string due to an issue in BIOS firmware v1.0b on SD-WAN 210 platform.

SDWANHELP-1403: Exporting a new configuration with Zscaler is not retrieving the Zscaler mappings properly on the SD-WAN Center.

NSSDW-28799: Creating a new Custom dashboard provides you an option to set it as a primary dashboard. If you check and save the dashboard, you land on that saved dashboard by default with every login or when you navigate to the dashboard page.

NSSDW-28971: Once you log into the SD-WAN appliances and virtual machines, you might gain root shell access with the 11.x based image using a hardcoded password. The affected SD-WAN platforms are 110 and VPXs provisioned with 11.x images. This is a CLI related issue and not applicable for the GUI.

Known Issues

NSSDW-26315: Unable to access the new User Interface (UI) on the SD-WAN 110 appliance after upgrade from 11.1.0 to 11.1.1 release.

  • Workaround: After upgrading from 11.1.0 to 11.1.1 release, open a new browser tab to access the new UI on the SD-WAN 110 appliance.

NSSDW-27205: After the SD-WAN 110 appliance is rebooted, it redirects to the legacy SD-WAN UI in the browser.

  • Workaround: Open a new browser tab and navigate to https://<management-ip> to access the new UI on SD-WAN 110 appliance.

NSSDW-27329: On the SD-WAN 110 appliance, the parentheses () are not supported in the package names for uploading via Local Change Management in the new UI.

NSSDW-27341: In Citrix SD-WAN Center, you cannot perform the configuration for the Notification Settings that are Email Alerts, SNMP traps, Syslog, and HTTP.

NSSDW-27727: Networks with VPX and VPXL instance using the IXGBEVF driver, used for certain Intel 10 GB NICs when SR-IOV is enabled, must not be upgraded to 11.1.1. This might result in a loss of connectivity. This issue is known to impact AWS instances with SR-IOV enabled.

NSSDW-28747: The local virtual IP of the interface is retrieved if the client mode is configured as DHCP. For this, the site management IP must be reachable from SD-WAN Center.

SDWANHELP-1323: MCN High Availability (HA) device shows not connected if the wire from the first HA interface is not plugged in (when multiple HA interfaces are defined).

  • Workaround: Remove the HA interface from the configuration if it is not physically connected.
Release Notes