Best Practice Configuration for SD-WAN Policy

alirezabtf — Wed, 07 Oct 2026 14:34:55 GMT

Hi Everyone,

I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience.

I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution.

My current thinking is:

Best Available Path for latency-sensitive and business-critical applications such as Microsoft Teams, VoIP, Zoom, Citrix/VDI, and critical SaaS applications.
Weighted Session Distribution for general web browsing, software updates, and other non-critical traffic where load sharing across multiple circuits is desired.

I'm interested in understanding:

Which applications do you typically place in Best Available Path?
Which applications do you place in Weighted Session Distribution?
Do you use ssl, web-browsing, and quic in your general internet rule, or do you recommend a different approach?
What traffic types have you found should be excluded from Weighted Session Distribution?
Are there any lessons learned or common mistakes to avoid when defining SD-WAN traffic steering policies?

Any examples of application groups or policy designs that have worked well in production environments would be greatly appreciated.

Best,

topic Best Practice Configuration for SD-WAN Policy in Prisma SD-WAN Discussions

Best Practice Configuration for SD-WAN Policy