Multiple SDWAN Zones

[hopzz]

I haveA 200 E Firewall. It is configured with two WAN members in SDWAN Zone 1 for all devices in my network. Is it possible to add 3rd wan to another SDWAN ZONE and make it accessible to only one particular device. I tried to create two sdwan zones. Some of the lan devices are connecting to wan3 eventhough no policy created for zone 2. My aim is that to only my video conferencing system can use wan 3(zone 2) and rest of the lan device can use wan 1& 2. (Zone1)

[funkylicious]

Hi,

You can add a 3rd interface to the existing interfaces in the sdwan zone, then you would need to create a sdwan rule using a source address of the devices in question and outgoing interface, manually select the interface for which traffic should exit, of course also the destination as in address/application or isdb.

[HarshChavda]

Hello @hopzz ,

Yes you can add your 3rd WAN to second SDWAN zone. Create a rule to ensure the video conferencing device's traffic uses WAN3 and create another rule for the rest of the traffic to use WAN1 and WAN2. Allow traffic from your LAN to the internet using both SD-WAN zones and  create a policy that restricts the video conferencing device's traffic to use WAN3.

[sw2090]

yes you can do that. You just need to have an sdwan rule for that single device that stands above all other sdwan rules to have it match first. If that wan goes down the rule will not match anylonger and the device will match your other rules (so it would have fallback).