Once the CloudBlade configures the appropriate entities within Prisma SD-WAN, the administrator can configure path policies to allow the ION devices to make intelligent per-app path selections.

The Prisma SD-WAN Secure Application Fabric (AppFabric) enables granular controls for virtually an unlimited number of policy permutations down to the sub-application level. Below is an example of configuring a path policy rule to use the Prisma SD-WAN VPN to the AWS DC ION. For a more in-depth description of how to configure path policies, see the Prisma SD-WAN Stacked Policies chapter on the admin guide here.

From Stacked Policies, select the Path tab, and choose a policy set of interest. Within the policy set, click the add policy rule button and define the following: Name, destination, prefixes or apps of interest (or a combination of both apps and prefixes), active and backup paths, and service and DC group.

In this example, we will use a destination prefix-based rule since we have already defined a path prefix that matches the IP address of the service running in the AWS Application VPC.