No I haven't identified the root cause or opened a ticket with support,
but it's on the list of things to do.The current work around that I'm
using is to clear the stuck session that's sending traffic out the
physical interface instead of the tunnel ...
I have spoke sites experiencing the same issue. FG-81E's connected back
to the hub (VM01, 601E, 501E) via IPsec interface tunnels, OSPF routing.
Issue appeared after upgrading to 6.4, not all sites affected. Same work
around, cleared sessions with th...