SD-WAN Interface Settings
Interface Nameis set to
sdwan. In the adjacent field, enter a numeric suffix (1 to 9,999) to identify the virtual SD-WAN interface.
Enter a user-friendly description for the interface, such as
to Western USA hub. Your comments will make it easier to identify interfaces rather than trying to decipher auto-generated names in logs and reports.
If you want to export unidirectional IP traffic that traverses an ingress interface to a NetFlow server, select the server profile or define a new
Netflow Profile(see Device > Server Profiles > NetFlow). Select
Noneto remove the current NetFlow server assignment from the interface.
If the firewall supports multiple virtual systems and that capability is enabled, select a virtual system (vsys) for the interface or define a new
Select a security zone for the interface or define a new
Noneto remove the current zone assignment from the interface. The virtual SD-WAN interface and all of its interface members must be in the same security zone to ensure that the same security policy rules apply to all paths from the branch to the same destination.
Select the Layer 3 Ethernet interfaces (for Direct Internet Access [DIA]) or virtual VPN tunnel interfaces (for hub) that constitute this virtual SD-WAN interface. The firewall virtual router uses this virtual SD-WAN interface to route SD-WAN traffic to a DIA or a hub location. The interfaces can have different tags. However, if you enter more than one interface, they must all be the same type (either VPN tunnel or DIA).