Configure a centralized policy in a policy group to enable TCP optimization and Data Redundancy Elimination (DRE) for application traffic. Configure traffic rules, priorities, match conditions, and AppQoE optimization, associate devices, and deploy the policy group to apply changes across selected sites.
Use this task to enable TCP optimization and Data Redundancy Elimination (DRE) by creating and deploying a centralized policy within a policy group.
Use this task to enable TCP optimization and Data Redundancy Elimination (DRE) by configuring traffic rules within the policy group.
The advanced view provides options to configure the traffic policy along with rules, service level agreement (SLA) class, and QoS Map.
Before you begin
Follow these steps to create a centralized policy for TCP and DRE optimization using policy groups:
Procedure
-
From the SD-WAN Manager menu, choose , and then select + Add Policy Group.
-
Enter a policy group name, choose a solution from the drop-down list and provide a description (optional).
-
Click Create.
Note
If you have already created a policy group, click the policy group from the list of available policy groups to edit.
-
Specify the name of the policy group.
This field is mandatory and can contain only uppercase and lowercase letters, the digits 0 through 9, hyphens (–), and underscores (_). It cannot contain spaces or any other characters.
-
Provide a description for the policy group. It can contain up to 2048 characters including spaces.
-
Click NGFW to choose a firewall policy.
If you created an SSL Proxy (TLS/SSL Decryption) policy before, select it here to map the SSL Proxy policy to the policy group. Otherwise, leave the NGFW field blank.
-
Choose an application priority for the policy group from the drop-down list. Click Create New to create a new application priority. Enter a policy name and description.
-
Click the Advanced button on the top-right corner of the window to switch to the advanced view.
The advanced view provides further options to configure the traffic policy along with rules, service level agreement (SLA) class, and QoS Map.
-
To configure the traffic policy, specify a name for the traffic policy.
-
Choose a VPN from the drop-down list.
-
Choose the direction for applying the policy:
-
All: Bidirectional traffic flow
-
Service: Incoming traffic from service
-
Tunnel: Incoming traffic from tunnel
-
Choose a default action for the packets based on the rules.
-
Add rules for the traffic policy.
-
Specify a sequence number and name for the rule.
-
Choose a protocol from the drop-down list:
-
Choose a value for the match condition from the available options.
-
In the Match conditions, click Source and Data Prefix.
-
Click Source Data Prefix.
To match a list of source prefixes, select the list from the drop-down. Otherwise, enter a value.
-
Click Destination and Data Prefix.
-
Click Destination Data Prefix.
To match a list of destination prefixes, select the list from the drop-down. Otherwise, enter a value or create a new data prefix.
-
Click + Action Actions, and then click Counter, and enter the name of the file in which to store packet counters.
-
Choose a base action for the packets based on the rules: Accept or Drop.
-
Click + Add Action conditions, click AppQoE Optimization. Choose the optimization type.
-
Click Save Match and Actions.
-
Click Save to save the traffic and policy settings.
-
Save the application priority for the policy group.
-
Click +Add adjacent to Associated field to select or unselect devices to associate or dissociate with the policy group.
In the associate devices workflow, you can choose devices.
-
Click Deploy to select sites and deploy the policy group.
The policy group is created with configured traffic policies and AppQoE optimizations, associated devices as selected, and deployed to target sites, enabling TCP optimization and DRE for the specified application traffic.