>
    Strata Copilot
    Strata Cloud Manager
    Focus
    Download PDF
    Focus
    1. Home
    2. SD-WAN
    3. SD-WAN Traffic Steering Using Policy Rules
    4. Define Your Application-based Traffic Steering Policies
    5. Strata Cloud Manager
    Download PDF
    SD-WAN

    Strata Cloud Manager

    Table of Contents

    Strata Cloud Manager

    Configure an SD-WAN policy rule in Strata Cloud Manager.
    An SD-WAN policy rule specifies applications and services, and a traffic distribution profile to determine how the firewall selects the preferred path for an incoming packet that doesn’t belong to an existing session and that matches all other criteria, such as source and destination zones, source and destination IP addresses, and source user. The SD-WAN policy rule also specifies a path quality profile of thresholds for latency, jitter, and packet loss. When one of the thresholds is exceeded, the firewall selects a new path for one or more applications, services, or both.
    1. Log in to Strata Cloud Manager.
    2. Create SD-WAN link management profiles.
    3. Select ConfigurationNGFW and Prisma AccessNetwork PoliciesSD-WAN Policy and select the branch folder for which you want to create the SD-WAN policy rule.
    4. Add Rule and select whether to create a Pre Rule or Post Rules.
      A pre-rule is a policy rule that always comes before any policy rules configured locally on the firewall. A post-rule is a policy rule that always comes after any policy rules configured locally on the firewall.
    5. Configure the policy rule Source match criteria.
      If you’re adding a zone, Select one or more of the predefined zones you created when setting up SD-WAN.
      Additionally, you can configure any Addresses or Users as needed.
    6. Configure the policy rule Destination match criteria.
      If you’re adding a zone, Select one or more of the predefined zones you created when setting up SD-WAN.
      Additionally, you can configure any Addresses or Users as needed.
    7. Configure the Application/Service to specify which applications or services the SD-WAN policy rule applies to and to associate your link Management Profiles.
      1. For Application, select Any or Select applications, application groups, or application filters.
      2. For Service, select Application Default, Any or Select any custom services you’ve configured.
      3. Select a predefined Path Quality Profile to specify the latency, jitter, and packet loss parameters indicate path health.
      4. (Optional) Select a SaaS Quality Profile you created when you created your SD-WAN link Management Profiles to specifies how software-as-a-service applications are monitored if your branch firewall has a Direct internet Access (DIA) link to a SaaS application.
    8. Configure the corrective Action the firewall takes when a link health is degraded and failover is required.
      1. Select a Traffic Distribution Profile to specify how the firewall selects paths for session load distribution and for path failover when the firewall detects a brownout, blackout, or path deterioration for an application.
      2. Select an Error Correction Profile to specify the corrective action the firewall takes when certain data transmission errors occur over noisy communication lines to improve data reliability without requiring retransmission or Packet Duplication to duplicate application sessions from one tunnel to another.
    9. Save.
    10. Push Config to push your configuration changes.

    © 2026 Palo Alto Networks, Inc. All rights reserved.