The read-only Interface Name is set to sdwan. In the adjacent field, enter a numeric suffix (1 to 9,999) to identify the virtual SD-WAN interface.

Auto VPN create SD-WAN interfaces numbered .901, .902, and so on. Hence, if you want to create the SD-WAN interfaces manually, don't use the sdwan.90x format for an SD-WAN interface name. Similarly, Auto VPN creates an SD-WAN interface numbered .9016 for an IPv6 interface, so don't use sdwan.9016 for an SD-WAN interface name.

The best practice is to enter a user-friendly description for the interface, such as to internet or to Western USA hub. Your comments will make it easier to identify interfaces rather than trying to decipher auto-generated names in logs and reports.

Tag on an SD-WAN link; for example, Cheap Broadband or Backup.

Assign a virtual router to the interface, or select Virtual Router to define a new one (see Network > Virtual Routers). Select None to remove the current virtual router assignment from the interface.

If the firewall supports multiple virtual systems and that capability is enabled, you must select vsys1 for the interface.

Select a security zone for the interface, or select Zone to define a new zone. Select None to remove the current zone assignment from the interface. The virtual SD-WAN interface and all of its interface members must be in the same security zone, thus ensuring the same security policy rules apply to all paths from the branch to the same destination.