topic Re: Zone mapping in SDWAN in General Topics

Zone mapping in SDWAN

BBartik — Tue, 14 Jan 2020 16:58:03 GMT

I find this document below hard to follow or understand. Can someone explain it to me in simpler terms? For example, suppose I have the following zones already: Trust, Untrust, VPN. What would this map to in SDWAN? What is zone-internal? Is that Trust? Where exactly is that used by SDWAN?

https://docs.paloaltonetworks.com/sd-wan/1-0/sd-wan-admin/set-up-sd-wan/set-up-panorama-and-firewalls-for-sd-wan/create-predefined-zones-in-panorama.html

Re: Zone mapping in SDWAN

Brandon_Wertz — Wed, 15 Jan 2020 03:56:26 GMT

Your question is kinda hard to follow. What are you trying to understand? The link you posted merely defines the zones you'd need to create in a Palo SD-WAN environment. Those zones based on their name have a specific use case based upon their name.

Re: Zone mapping in SDWAN

BPry — Wed, 15 Jan 2020 04:33:49 GMT

@BBartik,

The question you are asking is directly addressed in the article under Existing Zones. The only thing you are mapping to SD-WANs predefined zones is for routing purposes, not for actual use within the security policies themselves. Which zone gets mapped to what predefined SD-WAN zone depends on your topography of your current deployment.