topic Re: PAN OS SDWAN (Configuration) in Advanced SD-WAN for NGFW Discussions

PAN OS SDWAN (Configuration)

S.Negi324206 — Tue, 25 Mar 2025 12:52:16 GMT

Hi Team,

I need to configure SD WAN for one of my customer.

They have 7 branches and 1 DC and configuring a new Paloalto Firewall on each site in HA.

What best practices steps should i follow to configure this. They will use panorama but between panorama and branch FW there is no direct connectivity as they have no MPLS.

Can I NAT panorama with public IP and make the reachbility to onboarding?

Re: PAN OS SDWAN (Configuration)

mshekh — Wed, 26 Mar 2025 02:55:01 GMT

Hi @S.Negi324206 ,

You may refer the below kb to configure the SD-WAN and it's mandatory requirement to have FW connected with panorama to push the SD-WAN configuration.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000CpkeCAC&lang=en_US%E2%80%A9

First you have to connect FW to Panorama then you can proceed further for SD-WAN configuration.

Re: PAN OS SDWAN (Configuration)

S.Negi324206 — Wed, 26 Mar 2025 04:52:51 GMT

Thanks for revert.

As per the document how we identify the BGP AS number for each sites in step 14

Re: PAN OS SDWAN (Configuration)

mshekh — Fri, 28 Mar 2025 03:27:16 GMT

Hi @S.Negi324206 ,

You can use the AS number as per your requirement.

Please refer the below link related ASN Table along with BGP configuration

https://en.wikipedia.org/wiki/Autonomous_system_(Internet)

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004LXFCA2&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail