We just hit this same issue attempting an upgrade of a 201E from 5.6.x
to 6.0.3. Even though the spoke sites had been upgraded already, when we
upgraded the hub site to match, it killed VPN performance across the
board. Throughput dropped by a factor...