Best Practice Configuration for SD-WAN Policy

[alirezabtf]

Hi Everyone,

I'm currently designing SD-WAN policies for our Palo Alto environment and would appreciate hearing about real-world best practices and deployment experience.

I'm trying to determine which applications and traffic types should be assigned to Best Available Path versus Weighted Session Distribution.

My current thinking is:

• Best Available Path for latency-sensitive and business-critical applications such as Microsoft Teams, VoIP, Zoom, Citrix/VDI, and critical SaaS applications.
• Weighted Session Distribution for general web browsing, software updates, and other non-critical traffic where load sharing across multiple circuits is desired.

I'm interested in understanding:

• Which applications do you typically place in Best Available Path?
• Which applications do you place in Weighted Session Distribution?
• Do you use ssl, web-browsing, and quic in your general internet rule, or do you recommend a different approach?
• What traffic types have you found should be excluded from Weighted Session Distribution?
• Are there any lessons learned or common mistakes to avoid when defining SD-WAN traffic steering policies?

Any examples of application groups or policy designs that have worked well in production environments would be greatly appreciated.

Best,