You onboard your SD-WAN edge devices using a remote network connection between the edge device at the branch site, HQ, or hub to Prisma Access. Use Prisma Access to create a remote network and configure IPSec and IKE Crypto profiles; then, set up an IPSec tunnel between the SD-WAN edge device and Prisma Access, using the same crypto profiles you used in Prisma Access.

The following table documents the IKE/IPSec crypto settings that are supported with Prisma Access and HPE Aruba Networking EdgeConnect SD-WAN (formerly Silver Peak). A check mark indicates that the profile or architecture type is supported; a dash (—) indicates that it's not supported. Default and Recommended settings are noted in the table.