Palo Alto SDWAN zone

BBartik — Mon, 27 Dec 2021 17:35:46 GMT

I am deploying Palo Alto SDWAN and the hub currently terminates dedicated L2 WAN circuits for each remote site. My plan is to build tunnels to each site across their dedicated L2 WAN and across the Internet. Example:

Palo Hub connects to site 1 on e1/1.100, zone: site1

Palo Hub connects to site 2 on e1/1.200, zone: site2

The current security policies all reference the existing zones: site1, site2, etc. when I build my SDWAN tunnels using autoVPN then tunnels all use "zone-to-branch" zone which is not what I want to use. How can I get the AutoVPN tunnels to use the existing site one names? Is this possible?

Re: Palo Alto SDWAN zone

BPry — Tue, 28 Dec 2021 18:24:32 GMT

@BBartik,

I don't believe that it's possible to change the security zone that Auto VPN applies when its being utilized. You'll want to add the zone into your existing entries if you plan on using Auto VPN to handle the configuration.

topic Re: Palo Alto SDWAN zone in General Topics

Palo Alto SDWAN zone

Re: Palo Alto SDWAN zone