SD-WAN EngineerDemo

Question

Return traffic for an application from the branch is being dropped by the branch ION. Application traffic reaches the branch through the SD-WAN internet overlay, and the application's path policy at the branch is configured as follows:

Active = MPLS Overlay
Backup = Prisma Access on internet

Which branch configuration is the most likely cause of this behavior?

A It has Prisma Access tunnel over MPLS circuit but not on the internet circuit.
B It has one MPLS and one internet circuit.
C It has two internet circuits and no MPLS circuit.
D It has no MPLS circuit, and the Prisma Access tunnel is down.

Explanation

An MPLS-overlay active path requires an MPLS circuit. A branch that has only internet circuits cannot meet that active-path requirement, even when the policy also defines Prisma Access over the internet as a backup. This mismatch between the configured active MPLS overlay and the branch’s available underlay circuits can prevent a valid return path for traffic arriving through the SD-WAN internet overlay. Prisma SD-WAN path policy rules select paths by both overlay and circuit category, and active paths are preferred before backup paths.

Learn more

Add a Path Policy Rule

SD-WAN EngineerDemo

AstroTutor

Notes

Readiness

QuestionQ8

Community Discussion