Home
EN
Location
Documentation Home
Palo Alto Networks
Support
Live Community
Knowledge Base
MENU
Home
Prisma
Prisma SD-WAN
Prisma SD-WAN Administrator’s Guide
Prisma SD-WAN Stacked Security Policies
Bind Security Stacks to Sites
Document:
Prisma SD-WAN Administrator’s Guide
Bind Security Stacks to Sites
Download PDF
Last Updated:
Jul 3, 2022
Table of Contents
Search the Table of Contents
Get Started with Prisma SD-WAN
Prisma SD-WAN Key Elements
Deployment Modes
Activate and Launch Prisma SD-WAN
Prisma SD-WAN Web Interface—At a Glance
Prisma SD-WAN Summary
Site Summary Dashboard
Prisma SD-WAN Sites and Devices
Set Up Sites
Configure Circuits
Configure Circuit Categories
Configure Device Initiated Connections for Circuits
Add a Branch
Add a Data Center
Configure a DHCP Server
Configure NTP for Prisma SD-WAN
Set Up Devices
Connect the ION Device
Claim the ION Device
Assign the ION Device
Return Device to MSP
Configure the ION Device at a Branch Site
Configure the ION Device at a Data Center
Switch a Site to Control Mode
Allow IP Addresses in Firewall Configuration
Prisma SD-WAN Ports and Interfaces
Configure a Controller Port
Configure Internet Ports
Configure WAN/LAN Ports
Configure Cellular Modules
Configure Cellular Interfaces
Create a Customized APN Profile
Modify Cellular SIM Settings
Manage SIM Operations
Customize Cellular Firmware
Configure a Sub-Interface
Configure a Loopback Interface
Virtual Interface
Deployment Topologies of Virtual Interface
Add and Configure a Virtual Interface
Prisma SD-WAN Standard VPN
Create an IPsec Profile
Configure Generic Routing Encapsulation (GRE) Tunnels
Bypass Pair
Configure a Bypass Pair
Configure LAN State Propagation
Configure a PPPoE Interface
Configure an Layer 3 LAN Interface
Configure Application Reachability Probes
Configure a Secondary IP Address
Configure a Static ARP
Configure a DHCP Relay
Configure IP Directed Broadcast
VPN Keep-Alives
Configure VPN Keep-Alives for Circuit Categories
Configure VPN Keep-Alives for Circuits
Configure VPN Keep-Alives for Secure Fabric Links
Use External Services for Monitoring
Prisma SD-WAN IP Flow Information Export (IPFIX) Protocol
Configure IPFIX
Configure IPFIX Profiles
Configure IPFIX Templates
Configure Collector Contexts
Configure Filter Contexts
Configure Global IPFIX Prefixes
Configure Local IPFIX Prefixes
Attach an IPFIX Profile to an ION Device
Attach a Collector Context to a Device Interface
Attach a Filter Context to a Device Interface
Configure High Availability (HA) for IPFIX
Flow Information Elements
Options Information Elements
Configure DNS on Prisma SD-WAN
DNS Service
Configure the DNS Service on the Prisma SD-WAN Interface
Configure DNS Roles
Configure DNS Profiles
Configure DNS Service on the ION Device
Prisma SD-WAN DNS Use Cases
DNS Survivability
Configure System for DNS Survivability
Syslog Server Support in Prisma SD-WAN
Syslog Flow Export
Logs Based on Severity Levels
Configure Syslog Server Support
Configure SNMP
Returned Merchandise Authorization (RMA)
RMA Wizard
Replace a Prisma SD-WAN ION Device
Return the ION Device to Prisma SD-WAN
Upgrade ION Device Software
Schedule Software Upgrade
View Device Software Upgrade Status
Prisma SD-WAN Administrator Authorization and Authentication
Role Based Access Control
System Roles
Add a New User on Prisma SD-WAN
Custom Roles
Create Custom Roles
Assign System or Custom Role
Add a Device User on Prisma SD-WAN
Add Device Access to User on Prisma SD-WAN
Single Sign On Access using SAML
Request SAML Access
Exchange SAML Metadata
Configure SAML Users and Groups
Map Roles and Permissions
Enable SAML Access to End Users
SAML Setup Errors
Audit Logs
Work with Audit Logs
Prisma SD-WAN Branch and Data Center Routing
Prisma SD-WAN Branch Routing
Prisma SD-WAN Data Center Routing
Configure a Static Route
Configure NextHop Reachability Probe
Configure Dynamic Routing
Enable BGP for Private WAN and LAN
Configure BGP Global Parameters
Global or Local Scope for BGP Peers
Configure a BGP Peer
Configure a Route Map
Configure a Prefix List
Configure an AS Path List
Configure an IP Community List
View Routing Status and Statistics
Prisma SD-WAN Multicast Routing
Configure Multicast
Create a WAN Multicast Configuration Profile
Assign WAN Multicast Configuration Profiles to Branch Sites
Configure Global Multicast Parameters
Configure a Multicast Static Rendezvous Point (RP)
Learn Rendezvous Points (RPs) Dynamically
View LAN Statistics for Multicast
View WAN Statistics for Multicast
View IGMP Membership
View the Multicast Route Table
View Multicast Flow Statistics
Prisma SD-WAN Stacked Policies
Migrate Original Policy Sets to Stacked Policy Sets
Simple Path and QoS Stacks
Add Simple Path or QoS Stacks
Advanced Path and QoS Stacks
Add Advanced Path or QoS Stacks
Add QoS Policy Sets
Add QoS Policy Rules
Add a Path Policy Set
Add a Path Policy Rule
L3 Failure Paths
Minimize Metered LTE Usage
Bind Path or QoS Stacks to Sites
Custom Applications and System Application Overrides
Configure Custom Applications
Configure System Application Overrides
Service and Data Center Groups
Add a Standard VPN Endpoint
Add Groups
Add Domains
Bind Domain to Sites
Use Prisma SD-WAN Data Center Endpoints
Use Service Endpoint Groups in Policies
Configure Network Contexts
Attach Network Contexts to LANs
Configure Circuit Capacities
Configure DSCP
Prefixes
Configure Global Prefixes
Configure Local Prefixes
Configure Syslog Profiles
Prisma SD-WAN Stacked Security Policies
Add a Security Policy Stack
Add Stacked Security Policy Sets
Add a Stacked Security Policy Rule
Add a Security Policy Set to a Security Stack
Bind Security Stacks to Sites
Add Security Zones for Stacked Security Policies
Bind Security Zones to Sites and Devices
Bind Security Zones to Sites
Bind Security Zones to Interfaces
Configure Security Prefixes
Attach Local Security Prefixes to Sites
Monitor Security Policy Rules
Security Policy Migration
