Quite often I come across with a Maestro installation that has some connectivity issues. Typically you cannot connect from the orchestrators to the SGMs or connection between the SGMs doesn't seem to work properly.
Reason is in incorrect configuration of the allowed clients or networks. Gaia allows limiting access per device basis using set allowed-client command. This works fine in regular gateways and cluster, but in Maestro that uses internal networks for connectivity, it can cause problems.
If you want to limit access with the allowed client or network command, always add the following networks:
198.51.10x.0/24 (x is the security group number)