>
    Strata Copilot
    Features Introduced in SD-WAN Plugin 3.1
    Focus
    Download PDF
    Focus
    1. Home
    2. SD-WAN
    3. Panorama Plugin for SD-WAN
    4. Panorama Plugin for SD-WAN 3.1
    5. Features Introduced in SD-WAN Plugin 3.1
    Download PDF
    SD-WAN

    Features Introduced in SD-WAN Plugin 3.1

    Table of Contents

    Features Introduced in SD-WAN Plugin 3.1

    New features introduced in SD-WAN Plugin 3.1 releases.
    The SD-WAN Administrator’s Guide 3.1 provides information about how to use the SD-WAN plugin features in this release.

    What's New in SD-WAN Plugin 3.1.3

    Key features introduced with the SD-WAN plugin 3.1.3 release:
    New SD-WAN FeatureDescription
    Additional SD-WAN Hubs in VPN Cluster
    The number of hubs to configure in a VPN cluster has been increased from 4 to 16. Do not configure the same priority for more than four SD-WAN hubs in a VPN cluster.
    Additional Private Link Types for SD-WAN Interface Profile
    The number of private link types to configure in an SD-WAN Interface Profile has been increased from 3 to 7.
    Beginning with PAN-OS 11.0.4, SD-WAN plugin 3.1.3 and later 3.1 releases support the following private link types in addition to the existing private link types (MPLS, Satellite, Microwave/Radio):
    • Private Link1
    • Private Link2
    • Private Link3
    • Private Link4
    We don't support plain text traffic from SD-WAN branch firewall to SD-WAN hub firewall for these new private link types. When you configure any of the new private link types, ensure that you have an SD-WAN policy rule on the hub that is configured only with public link type. Because when the internet-bound traffic backhauls or fails to the hub from the branch, it must match with this SD-WAN policy rule. Otherwise, the traffic gets dropped as these private links (Private Link1, Private Link2, Private Link3, and Private Link4) are part of the direct internet access (DIA) SD-WAN interface.

    What's New in SD-WAN Plugin 3.1.2

    Key features introduced with the SD-WAN plugin 3.1.2 release:
    Bug and performance fixes.

    What's New in SD-WAN Plugin 3.1.1

    Key features introduced with the SD-WAN plugin 3.1.1 release:
    New SD-WAN FeatureDescription
    SD-WAN IPv6 Basic Connectivity
    The legacy routing engine now supports SD-WAN in a dual stack using IPv6 BGP loopback addresses for BGP peering; thus, you can establish IPv6 connectivity from the branch to the hub over an IPv4 SD-WAN tunnel. (IPv6 connectivity over DIA isn't supported.)

    What’s New in SD-WAN Plugin 3.1.0

    Key features introduced with the SD-WAN plugin 3.1.0 release:
    New SD-WAN FeatureDescription
    SD-WAN Plugin Support for Advanced Routing Engine
    We have enhanced the SD-WAN plugin 3.1.0 to support logical routers for branches and hubs that use advanced routing engines. With SD-WAN plugin 3.1.0 configured with an advanced routing option, all SD-WAN related objects are automatically generated in logical routers rather than virtual routers. SD-WAN plugin 3.1.0 running PAN-OS 11.0 offers an advanced routing engine that relies on industry-standard configuration methodology, which facilitates the administrator tasks. It allows the creation of profiles that are used for different functions (such as, filtering, redistribution, and metric changes), all of which can be used across logical routers. These profiles provide finer granularity to filter routes for each dynamic routing protocol and improve route redistribution across multiple protocols.

    © 2025 Palo Alto Networks, Inc. All rights reserved.