topic Retro-fitting standard SD-WAN into existing firewalls in General Topics

Retro-fitting standard SD-WAN into existing firewalls

ccfalkner — Tue, 05 Jan 2021 02:43:46 GMT

I want to deploy hub-spoke SD-WAN into my existing routers, but it says you must do it through Panorama. It then wants me to create a template, add the router, interface, etc. and basically define everything to do with SD-WAN in Panorama. The problem is I have a fully functional set of firewalls with live traffic, BGP, etc. and if I force template values, I am sure bad things will happen and the path to traffic recovery will be painful. So, what I am picking up from the documentation is that you have to build a firewall from scratch to deploy SD-WAN. Is this the case? I can't find any documentation that says otherwise.

Re: Retro-fitting standard SD-WAN into existing firewalls

nikoolayy1 — Mon, 29 Mar 2021 07:10:39 GMT

Check the Palo Alto pcnse guide for SD-WAN and read also the links. This is what I am doing at the moment to get to know it:

https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/education/pcnse-study-guide.pdf

Also there is an SD-WAN GUide:

https://docs.paloaltonetworks.com/sd-wan/2-0/sd-wan-admin/configure-sd-wan/install-the-sd-wan-plugin.html