DC-FW SD-WAN Configuration:
DC-FW SD-WAN Zones:
Go to Network > SD-WAN Zones. Click Create New > SD-WAN Zone.
Name the New SD-WAN Zone in this case ADVPN and click OK to create.
New SD-WAN Zone are ready however, down there is no interface that’s why.
1 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW SD-WAN Members:
Go to Network > SD-WAN Zones. Click Create New > SD-WAN Member.
Set the Interface to advpn1. Change the SD-WAN Zone to ADVPN created earlier. No need to
set the Gateway. Leave the Cost as 0. Leave the Priority to 1. Set Status to Enable, and click OK.
Repeat the above steps for advpn2, no need to set the Gateway leave rest of things default.
2 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW SD-WAN Zones:
Go to Network > SD-WAN Zones. Click Create New > SD-WAN Zone.
Name the New SD-WAN Zone in this case Internet and click OK to create.
New SD-WAN Zone are ready however, down there is no interface that’s why.
3 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW SD-WAN Members:
Go to Network > SD-WAN Zones. Click Create New > SD-WAN Member.
Set the Interface to WAN-1. Change the SD-WAN Zone to Internet created earlier. Set Gateway
to [Link]. Leave the Cost as 0. Leave the Priority to 1. Set Status to Enable & click OK.
Repeat the above steps for WAN-2, setting Gateway to the ISP's gateway: [Link].
4 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW Internet Static Route:
Go to Network > Static Routes. Click Create New. The New Static Route page opens. Set
Destination to Subnet, and leave the IP address and subnet mask as [Link]/[Link]. From the
Interface drop-down list, select SD-WAN. Ensure that Status is Enabled. Click OK.
5 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW Policies for Internet SD-WAN:
Go to Policy & Objects > Firewall Policy. Click Create New. The New Policy page opens. Set the
name, incoming interface, outgoing interface, source, destination, schedule, service, action
details as below and Enable the policy, then click OK.
6 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW Policies for ADVPN SD-WAN:
Go to Policy & Objects > Firewall Policy. Click Create New. The New Policy page opens. Set the
name, incoming interface, outgoing interface, source, destination, schedule, service, action
details as below and Enable the policy, then click OK.
7 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW Performance SLA:
Configure SLA profiles by going to Network > SD-WAN and selecting the Performance SLAs tab
and click Create New. Enter a name for the SLA and select a protocol. This SLA is to PING HQ-FW
IP Address through ADVPN tunnel interfaces.
8 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717
DC-FW SD-WAN Rules:
Go to Network > SD-WAN and select the SD-WAN Rules Tab. Click Create New type the name,
Source, destination Protocol number.
9 | P a g e Created by Ahmad Ali E-Mail: ahmadalimsc@[Link] , WhatsApp: 00966564303717