1. SASE deployment does not support an Admin Server that utilizes the NetWitness NAT capability.

  2. Nebula-rpm is not automatically updated if newer version on subsequent upgrades (use nw-create-cloud-hybrid --upgrade-overlay-network to upgrade).

  3. Certificate/PKI infrastructure independent of NetWitness PKI:

  4. Full Overlay Network Certificate reissue is automated with nw-create-cloud-hybrid --reissue-all-certs.

  5. The nw-create-cloud-hybrid --restore-cloud-node command uses the active sase-deployment-models.yml and host-models.yml files located in /root/.sase/ directory. The --restore-cloud-node command restores the cloud nodes based on their respective backup tar files located in /root/.sase/backups directory. This directory also contains the sase-deployment-models.yml and host-models.yml files which were also backed up at the time the --backup-cloud-nodes command was executed. The sase-deployment-models.yml and host-models.yml files in the /root/.sase/backups directory must be used when executing the --restore-cloud-node command. To resolve, do the following:

    1. Make a copy of the active sase-deployment-models.yml and host-models.yml files located in /root/.sase/ directory and name them sase-deployment-models.yml.orig and host-models.yml.orig:

      - cp /root/.sase/sase-deployment-models.yml /root/.sase/sase-deployment-models.yml.orig

      - cp /root/.sase/host-models.yml /root/.sase/host-models.yml.orig

    2. Override the sase-deployment-models.yml and host-models.yml files located in /root/.sase/ with the ones in /root/.sase/backup directory:

      - yes | cp /root/.sase/backup/sase-deployment-models.yml /root/.sase/

      - yes | cp /root/.sase/backup/host-models.yml /root/.sase/

    3. Execute restore command(s):

      - nw-create-cloud-hybrid --restore-cloud-node --uuid <uuid of cloud node>

    4. Restore original sase-deployment-models.yml and host-models.yml files:

      - yes | cp /root/.sase/sase-deployment-models.yml.orig /root/.sase/sase-deployment-models.yml

      - yes | cp /root/.sase/host-models.yml.orig /root/.sase/host-models.yml