The SD-WAN plugin 3.1.3 and later 3.1 releases provide four additional point-to-point private link types, Private Link1, Private Link2, Private Link3, and Private Link4 along with the existing three private link types (MPLS, Satellite, Microwave/Radio) to configure in the SD-WAN Interface Profile.

These private link types enable you to avail reliable providers for your remote regions to establish one to one connection with the overlay network and avoid provider outages.

The number of hubs to configure in a VPN cluster has been increased from 4 to 16. Only four of the 16 hubs can have the same hub priority within a VPN cluster due to ECMP.

The legacy routing engine now supports SD-WAN in a dual stack using IPv6 BGP loopback addresses for BGP peering; thus, you can establish IPv6 connectivity from the branch to the hub over an IPv4 SD-WAN tunnel. (IPv6 connectivity over DIA isn't supported.)

We have enhanced the SD-WAN plugin 3.1.0 to support logical routers for branches and hubs that use advanced routing engines. With SD-WAN plugin 3.1.0 configured with an advanced routing option, all SD-WAN related objects are automatically generated in logical routers rather than virtual routers. SD-WAN plugin 3.1.0 running PAN-OS 11.0 offers an advanced routing engine that relies on industry-standard configuration methodology, which facilitates the administrator tasks. It allows the creation of profiles that are used for different functions (such as, filtering, redistribution, and metric changes), all of which can be used across logical routers. These profiles provide finer granularity to filter routes for each dynamic routing protocol and improve route redistribution across multiple protocols.