- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
04-27-2025 01:30 PM
Anyone with exp in PAN-OS SD-WAN without panorama for VPN S2S Dual ISP ?
Hi Live PAN-community, how's it going ?
Does anyone have operational functional experience of pan-os sdwan ( firewall sdwan without panorama and without cloudgenix appliances ) deployments operating and running sites with two ISPs for IPSEC S2S VPN connections.
Today we have operating only pan-os sdwan for internet outbound, with 2 unified links, operating well, however with limitations but it works and good well.
Now thinking of moving to VPN S2S using pan-os sdwan scheme, anyone has experience of deployment in their environments ? if it operates correctly ? Points, tips, points to focus on, recommendations, headaches, etc. If you have had any unexpected problems, what has been your feedback, your experience operating between HQ to VPN S2S branches of at least 5, 10 or more pan-os sites between your PANW firewalls of branches against the HQ.
Please only people with sdwan exp, from their pan-os licensed firewalls who have real experience without using Panorama, where the deployment is not the best, but it is valid, functional, operable with the important limitations, of course, but functional.
Thank you for your kindness, kindness, your time and collaboration
Best Regards
04-30-2025 02:32 AM
I'm also curious. The docs don't list it anywhere as a pre-requisite but Panorama is referenced multiple times for managing the VPN clusters in the admin guide and really nothing on the firewalls themselves.
This page for Auto VPN / mesh states:
Enable SD-WAN with Auto VPN
Where Can I Use This?
NGFW
What Do I Need?
SD-WAN license
Then literally the first line says: Auto VPN enables you to create SD-WAN cluster to connect multiple LANs using the Panorama management server.
04-30-2025 04:54 AM
Hi @DenovoChris and @Metgatz ,
Panorama is required for PAN-OS SD-WAN. https://docs.paloaltonetworks.com/sd-wan/activation-and-onboarding/system-requirements-for-sd-wan
You could also use SCM. https://docs.paloaltonetworks.com/strata-cloud-manager/getting-started/manage-configuration-ngfw-and...
Thanks,
Tom
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!