vmanage GUI shows Tunnel down but sdwan router CLI shows up

[micbosh2006]

I have a situation were the status of ipsec sdwan tunnel shows up on the router CLI but when monitoring the tunnel from vmanage 20.3.3.1 GUI (SDWAN router ios-xe 17.3.4a) it shows down .... even though statistics and application monitoring are all being shown?!!! 

XXXX##show sdwan bfd sessions

6.6.6.1 6 up private1 mpls 172.16.6.22(DC1) 172.16.6.61(TongaIPLC) 12346 ipsec 7 1000 0:11:06:43 2

[Ha Dao]

Sometime I also get same error. You can try correct clock, time zones and reinstall certificate for all devices