Cisco Catalyst SD-WAN Policy Groups Configuration Guide, Releases 26.x and Later

PDF

Cisco Catalyst SD-WAN Policy Groups Configuration Guide, Releases 26.x and Later

Add policy group

Updated: March 10, 2026

Want to summarize with AI?

Log in

Configure a policy group to deploy to devices.

Create a policy group that can be deployed to devices to manage application priority, security policies, and other network configurations.

Procedure

  1. From the Cisco SD-WAN Manager menu, choose Configuration > Policy Groups > + Add Policy Group.

  2. Enter a Policy Group Name, choose a Solution from the drop-down list and provide a description (optional).

    Table 1. Policy group parameters

    Field

    Description

    Policy Group Name

    Specify the name of the policy group.

    This field is mandatory and can contain only uppercase and lowercase letters, the digits 0 through 9, hyphens (–), and underscores (_). It cannot contain spaces or any other characters.

    Description

    Provide a description for the policy group.

    It can contain up to 2048 characters including spaces.

    Policy

    Application Priority & SLA

    Choose an application priority for the policy group from the drop-down list. Click Create New to create a new application priority.

    Embedded Security

    Choose an embedded security policy from the drop-down list. Click Create New to create a new embedded security policy by selecting a configuration group, creating firewall policies, and other configuration settings.

    Secure Internet Gateway

    		 Configure the Secure Internet Gateway (SIG) tunnels before you apply a data policy for redirecting application traffic to an SIG. Select a Secure Internet Gateway (SIG) policy from the drop-down list. Click Create New to create a new SIG policy.

    DNS Security

    		 Select a DNS Security policy from the drop-down list. Click Create New to create a new DNS Security policy.

  3. Click Create.

    Note

    If you have already created a policy group, click the policy group from the list of available policy groups to edit.

  4. Click Save to save your configuration.

  5. Click the pencil icon to select or unselect devices to associate or dissociate with the policy group.

    Note

    Starting from Cisco Catalyst SD-WAN Manager Release 20.15.1, click +Add adjacent to Associated field to select or unselect devices to assoicate or dissociate with the policy group. In the associate devices workflow, you can choose devices based on Regions and not just Sites.

  6. Click Deploy to select sites and deploy the policy group.

The policy group is created and deployed to the selected devices. To delete a policy group, select the ellipsis icon (...) to the right of the policy group and click Delete.

Note

Dissociating policies from policy groups do not remove the policies from the device. If you intend to remove a policy or configuration from a device, then you need to remove the policy from the policy group and redeploy to that device so that the deployment ensures that the policy is removed from that device. You can move the device to a new empty policy group with no policy profiles to refresh the controller state and to remove stale entries. Until that is done, mere dissociation will not remove any policies from the device.