Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Post-Provisioning Tasks for Enterprise Hub and SD-WAN Spoke Sites

After the enterprise hub or the SD-WAN on-premise spoke site is provisioned successfully, perform the following post-provisioning tasks:

  1. Upload and install device licenses. See Add and Install (Push) Device Licenses.
  2. Install the signature database. See Install the Signature Database on Devices.
  3. Add and deploy a firewall policy. See Add and Deploy Firewall Policies.
  4. If you want to perform path-based or SLA-based (dynamic) steering of the traffic:
    1. Add a path-based steering profile. See Add Path-Based Steering Profiles.
    2. (Not applicable to sites with SD-WAN Essential service) Add an SLA-based steering profile. See Add SLA-Based Steering Profiles.
    3. Add an SD-WAN policy intent that references the path-based or SLA-based steering profile and deploy the SD-WAN policy. See Add and Deploy SD-WAN Policy Intents.
      Note:

      The SD-WAN Essential service does not support department-level policy intents or SLA-based steering profiles.

  5. To break out traffic from the site:
    1. Add a local breakout, central breakout, or a cloud breakout profile. See Add SD-WAN Breakout Profiles.
    2. For cloud-breakout, add cloud breakout settings and assign the settings to the site. See Add Cloud Breakout Settings.
    3. Add an SD-WAN policy intent that references the breakout profile and deploy the SD-WAN policy. See Add and Deploy SD-WAN Policy Intents.

See CSO SD-WAN Deployment Workflow for the next task.