A service endpoint is a label representing a specific location or network service. It can be Prisma SD-WAN data centers for transit services or third-party data centers.

Prisma SD-WAN will periodically check the latency by default when multiple IP addresses or hosts are provided as part of the standard VPN endpoint. If a destination has better latency, it forces a tunnel change (config_change) to reoptimize the connection. As part of ION Device Release 6.3.2, users now have the option to disable tunnel reoptimization. In this case, the tunnel destination will change only if there is a failure.