@Pablo_PL on the deny rule use ip group instead of ip port group on source and destination. on the other two use ip group on source and ip port group on destination and the first rule is not needed...

@ZoloNN it sounds more like there is something misconfigured in your SD-WAN. HUB must have public IP, Spoke Device can have private IP. Try deleting SD-WAN and configuring it again. remember that...

@KBhuva yes you can make a post about it under controlers

@KBhuva it looks like you have version 5.xx in the menus, they haven't been upgraded to version 6.xx. the menu on the far left hasn't been upgraded it seems

@KBhuva yes I see it, it's not the same at all, this is what my overview looks like. I don't know what it is, it seems like they don't have the same function on hardware controllers and software...

@KBhuva It looks like your console is completely different from the ones I have, that was strange.