Cisco Catalyst SD-WAN Policy Groups Configuration Guide, Releases 26.x and Later

PDF

Add policy group

Want to summarize with AI?

Log in

Configure a policy group to deploy to devices.


Create a policy group that can be deployed to devices to manage application priority, security policies, and other network configurations.

Procedure

1.

From the Cisco SD-WAN Manager menu, choose Configuration > Policy Groups > + Add Policy Group.

2.

Enter a Policy Group Name, choose a Solution from the drop-down list and provide a description (optional).

Table 1. Policy group parameters

Field

Description

Policy Group Name

Specify the name of the policy group.

This field is mandatory and can contain only uppercase and lowercase letters, the digits 0 through 9, hyphens (–), and underscores (_). It cannot contain spaces or any other characters.

Description

Provide a description for the policy group.

It can contain up to 2048 characters including spaces.

Policy

Application Priority & SLA

Choose an application priority for the policy group from the drop-down list. Click Create New to create a new application priority.

Embedded Security

Choose an embedded security policy from the drop-down list. Click Create New to create a new embedded security policy by selecting a configuration group, creating firewall policies, and other configuration settings.

Secure Internet Gateway

Configure the Secure Internet Gateway (SIG) tunnels before you apply a data policy for redirecting application traffic to an SIG. Select a Secure Internet Gateway (SIG) policy from the drop-down list. Click Create New to create a new SIG policy.

DNS Security

Select a DNS Security policy from the drop-down list. Click Create New to create a new DNS Security policy.
3.

Click Create.

Note

If you have already created a policy group, click the policy group from the list of available policy groups to edit.

4.

Click Save to save your configuration.

5.

Click the pencil icon to select or unselect devices to associate or dissociate with the policy group.

Note

Starting from Cisco Catalyst SD-WAN Manager Release 20.15.1, click +Add adjacent to Associated field to select or unselect devices to assoicate or dissociate with the policy group. In the associate devices workflow, you can choose devices based on Regions and not just Sites.

6.

Click Deploy to select sites and deploy the policy group.

The policy group is created and deployed to the selected devices. To delete a policy group, select the ellipsis icon (...) to the right of the policy group and click Delete.