>
    Strata Copilot
    Use Case 4 - Protect An Enterprise Voice Application
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma SD-WAN
    3. Prisma SD-WAN Administrator’s Guide
    4. Prisma SD-WAN Performance Policy
    5. Performance Policy Use Cases
    6. Use Case 4 - Protect An Enterprise Voice Application
    Download PDF
    Prisma SD-WAN

    Use Case 4 - Protect An Enterprise Voice Application

    Table of Contents

    Use Case 4 - Protect An Enterprise Voice Application

    Use Case 4: Protect An Enterprise Voice Application.
    Where Can I Use This?What Do I Need?
    • Prisma SD-WAN (Managed by Strata Cloud Manager)
    • Prisma SD-WAN
    In this scenario, the business uses a traditional VoIP system hosted in the corporate data center for their customer contact centers. The business has an SLA with a minimum acceptable MOS score of 3.6 and the packet loss cannot exceed 1% in either direction for contact center media traffic which is detected as RTP-Audio, RTP-Base, and SIP. There is a mix of internet and MPLS for active transport and Metered 5G as a path of last resort, which will only be used for this traffic.
    RTP-Audio, RTP-Base, and SIP are configured with these path policy rules:
    • Active Paths:
      • Prisma SD-WAN VPN on Primary Internet.
      • Prisma SD-WAN VPN on MPLS.
    • Backup Paths: None
    • L3 Failure Paths: Prisma SD-WAN VPN on Metered 5G.
    Performance Policy Intent
    • Use one of the Active Paths as long as at least one path is MOS and Packet Loss SLA compliant.
    • Use Link Quality Monitoring (LQM) information available from the Branch to Data Center VPNs to control Packet Duplication for any observed packet loss onto the active paths.
    • If neither of the Active Paths are compliant with the packet loss SLA, then begin to duplicate packets on to each of the active paths.
    • If one of the two Active Paths is down and the other is degraded, then perform single link packet duplication.
    • Use the Metered 5G L3 Failure Path if all of the Active Paths are down (not degraded).
    • If the Metered 5G path exceeds the loss, SLA tolerance then performs single link packet duplication.
    Configure the Policy Rule
    1. Select the desired policy set from ConfigurationPrisma SD-WANPoliciesPerformance.
    2. Select Add Rule and enter the Name as Protect Voice Traffic, Description (optional), and the Order Number (optional).
      More specific rules should be organized at the top of the Policy Set list, else a less specific policy rule may be matched first.
    3. In the Actions section, select Packet Duplication and Move Flows.
    4. In the Match Criteria section, under App Filters, select the applications RTP-Base, RTP-Audio, and SIP from the drop-down, select the category in Path Filters as Primary Internet and MPLS . Select the Path Type as Prisma SD-WAN VPN.
    5. In the Performance SLAs section, click Add New, and check the option Link Quality Metrics. Enter the SLA Name as Voice SLA.
    6. In Link Quality Metrics, enter the MOS (Mean Opinion Score) value as 3.6.
      This will use the best (highest) measured MOS value between the branch and all data centers on a per branch circuit basis.
    7. Click the + sign to enter the Packet Loss value as 1%.
      This will use the best (lowest) measured Packet Loss value between the branch and all data centers on a per branch circuit basis.
    8. Retain the Advanced Settings at their default values.
    9. Review the Summary of the policy settings for the desired policy intent and Save & Exit.
    Summary: Implementing the Performance Policy rule for the contact center media applications ensures the delivery of the business critical traffic by finding MOS and Packet Loss SLA compliant paths and mitigating any loss in the transport networks using packet duplication when necessary. The impact of the rule is easily monitored using the App Site Details, Link Quality Metrics, and Flow Browser.

    © 2026 Palo Alto Networks, Inc. All rights reserved.