Facing an issue in a SD-WAN auto zone mapping to the Branch Firewall

[AkashThangavel]

Hi team,

I require assistance with Pan-OS SD-WAN. Upon adding a device to the SD-WAN devices, I proceeded to create an auto BGP policy for a branch location. However, when checking the policy for the branch device group, I observed that it added 'zone-to-Branch' to both the source and destination zones. I was expecting it to be 'zone-to-hub.' Additionally, I noticed that in the drop-down menu for the branch firewall, 'zone-to-hub' is not listed, whereas it is present in the local firewall. Any guidance on resolving this discrepancy would be greatly appreciated.

"zone-to-hub" is not in the drop-down from panorama for BRANCH or SPOKE device group

-------------------------------------------------------------------------------------------------------------------------

But in local firewall "zone-to-hub" is listing

-------------------------------------------------------------------------------------------------------------------------

with regards,

Akash Thangavel

Network Security Engineer

[delliott_6784]

I have made the mistake of including the wrong subnet to a site when adding sites to the device add for the sdwan plugin which could identify the site incorrectly.  Something to check.  I have not used autozone yet but it's logical that a subnet identified previously at HUB then used at BRANCH might confuse the plugin.