https://live.paloaltonetworks.com/t5/prisma-sd-wan-discussions/saas-quality-and-traffic-distribution-profiles-in-sd-wan-for/m-p/627741#M206 <P>We have a few firewalls with dual-ISP and they all are part of SD-WAN VPN cluster.&nbsp;</P> <P>&nbsp;</P> <P>The goal is to have active-passive ISP links for all traffic to internet (And IPSEC as well), with primary being 1gig fiber, and secondary being asymmetric cable internet.&nbsp; For ISP link fail-over to work, do I need to configure SaaS quality profile as well or just the traffic distribution profile with top-down (primary on top and secondary on bottom) would be sufficient along with the SD-WAN Policy to use that traffic distribution profile for all internet traffic (i.e. from trust to untrust)?&nbsp; Any quick help&nbsp; / link pointing to the above scenario would be greatly appreciated. Thanks!</P> <P>&nbsp;</P> Tue, 19 Nov 2024 17:31:02 GMT mchoksi 2024-11-19T17:31:02Z https://live.paloaltonetworks.com/t5/prisma-sd-wan-discussions/saas-quality-and-traffic-distribution-profiles-in-sd-wan-for/m-p/627741#M206 <P>We have a few firewalls with dual-ISP and they all are part of SD-WAN VPN cluster.&nbsp;</P> <P>&nbsp;</P> <P>The goal is to have active-passive ISP links for all traffic to internet (And IPSEC as well), with primary being 1gig fiber, and secondary being asymmetric cable internet.&nbsp; For ISP link fail-over to work, do I need to configure SaaS quality profile as well or just the traffic distribution profile with top-down (primary on top and secondary on bottom) would be sufficient along with the SD-WAN Policy to use that traffic distribution profile for all internet traffic (i.e. from trust to untrust)?&nbsp; Any quick help&nbsp; / link pointing to the above scenario would be greatly appreciated. Thanks!</P> <P>&nbsp;</P> Tue, 19 Nov 2024 17:31:02 GMT https://live.paloaltonetworks.com/t5/prisma-sd-wan-discussions/saas-quality-and-traffic-distribution-profiles-in-sd-wan-for/m-p/627741#M206 mchoksi 2024-11-19T17:31:02Z