Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall

AkashThangavel — Mon, 04 Mar 2024 09:53:48 GMT

Hi team,

I require assistance with Pan-OS SD-WAN. Upon adding a device to the SD-WAN devices, I proceeded to create an auto BGP policy for a branch location. However, when checking the policy for the branch device group, I observed that it added 'zone-to-Branch' to both the source and destination zones. I was expecting it to be 'zone-to-hub.' Additionally, I noticed that in the drop-down menu for the branch firewall, 'zone-to-hub' is not listed, whereas it is present in the local firewall. Any guidance on resolving this discrepancy would be greatly appreciated.

"zone-to-hub" is not in the drop-down from panorama for BRANCH or SPOKE device group

-------------------------------------------------------------------------------------------------------------------------

But in local firewall "zone-to-hub" is listing

-------------------------------------------------------------------------------------------------------------------------

with regards,

Akash Thangavel

Network Security Engineer

Re: Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall

delliott_6784 — Tue, 05 Mar 2024 15:09:46 GMT

I have made the mistake of including the wrong subnet to a site when adding sites to the device add for the sdwan plugin which could identify the site incorrectly. Something to check. I have not used autozone yet but it's logical that a subnet identified previously at HUB then used at BRANCH might confuse the plugin.

topic Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall in Next-Generation Firewall Discussions

Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall

Re: Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall