The VMware SASE Orchestrator (formerly the VeloCloud Orchestrator and soon to be the VMware Edge Cloud Orchestrator) has moved and redesigned some features to fit the wider scope of the product and user interface (UI). The new UI has changed from a single product portal (only for SD-WAN) to a common management system that lets customers access multiple services in one place. These services include VMware SD-WAN, VMware Edge Network Intelligence, VMware Secure Access, VMware Cloud Web Security, and VMware SD-Access (formerly called as VMware SD-WAN Client). Future services such as VMware Private Mobile Network and VMware Edge Compute Stack will also be added. The new UI navigation has adapted to allow access to multiple services within one shared header. The primary global header now has an Enterprise Applications (Services) drop-down menu that lists the various supported services. You can select and navigate to each service from this menu. Enterprise Global Settings is now located in the Enterprise Applications (Services) drop-down because it has features that are shared across services. These features include User Management, Authentication, Role Customization (now Roles and Service Permissions), Customer Configuration, and more.
This document explains the changes in the Enterprise UI for some features. It also gives the reasons for these changes.
SD-WAN Administration:Global Settings and SD-WAN Settings
Now that
SD-WAN is one of the many services available in the Orchestrator, the original
Administration section is split and moved under
Global Settings and
SD-WAN Settings. All Edge or
SD-WAN specific settings are moved to
Service Settings within the
SD-WAN service, and all
Administration related or shared settings across services are moved to the
Global Settings service.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration
Enterprise > Global Settings
Enterprise > SD-WAN > Service Settings
Alert Configuration
Alert Configuration is moved under
Service Settings because these settings affect the operations of the
SD-WAN service and are not related to the
SD-WAN network configuration.
Customer Configuration is moved under Enterprise
Global Settings because this page is shared across various Orchestrator services in addition to the core
SD-WAN service. The
Customer Configuration page is reorganized with a section to add and modify services for the customer account, group feature access within services, and additional global settings at a high level for each service and across multiple services.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Configure > Customer
Enterprise > Global Settings > Customer Configuration
Test & Troubleshoot
Test & Troubleshoot is renamed to
Diagnostics to better align with the features nested inside it.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Test & Troubleshoot
Enterprise > SD-WAN > Diagnostics
System Settings > General Information > General Information section
Most sections of
System Settings are moved within
Global Settings because the
Global Settings menu provides a single location for shared settings across various Orchestrator services. The
System Settings is renamed to
Enterprise Settings because this page is focused on Enterprise-specific configuration settings.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information
Enterprise > Global Settings > Enterprise Settings
System Settings > General Information > Pre-Notifications and Alerts
Alert Notification settings are moved under Alerts & Notifications section in the SD-WAN > Service Settings page. This helps in better understanding of the alerts and their corresponding services.
Also, Enable Pre-Notifications is renamed to Enable Operator Alerts, and Enable Alerts is renamed to Enable Enterprise Alerts.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information
System Settings > General Information > Default Edge Authentication
Default Edge Authentication is renamed to Default Certificate, and is moved under Edge Management in the SD-WAN > Service Settings page. These settings are now redesigned as radio buttons.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information
UI label was originally Default Edge Authentication.
System Settings > General Information > Edge Configuration Updates
Edge Configuration is moved into the
SD-WAN Edge Management page for better organization. The controls for updates are renamed to provide more clarity on the Edge action and result.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Edge Configuration
Updates - Enabled on Orchestrator Upgrade is renamed to Enable Configuration Updates Post-Upgrade.
System Settings > General Information > Privacy Settings
We have relocated the
Privacy Settings feature to the
Global Settings page. This is because the
Privacy Settings feature affects various Orchestrator services, not just SD-WAN.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Edge Configuration
Enterprise > Global Settings > Enterprise Settings > Information Privacy Settings
System Settings > General Information > Contact Information
We have moved the
Contact Information for the Enterprise feature to the
Global Settings page. We also renamed
Contact Information to
Customer Business Contact Information, and together these changes make it easier to understand and use the customer information across various Orchestrator services.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Contact Information
Enterprise > Global Settings > Enterprise Settings > Customer Business Contact Information
System Settings > General Information > Zero Touch Provisioning Sign Up
We have moved all the Zero Touch Provisioning related UI sections to the new
Edge Auto-activation section within the
SD-WAN > Service Settings page for better clarity and organization.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Zero Touch Provisioning Sign Up
Enterprise > SD-WAN > Service Settings > Edge Auto-activation
System Settings > Authentication Tab
We have moved the Enterprise Authentication related settings from the
System Settings > Authentication tab to the
Global Settings page. This is because the
Global Settings page is a single location for settings that apply to various Orchestrator services. Authentication is one of these settings, as it affects multiple services and the whole Orchestrator. The new location for the Authentication settings is under the
User Management > Authentication page within
Global Settings. This groups the user management related features together and makes them consistent with how other VMware products handle their user authentication organization.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > Authentication
Enterprise > Global Settings > User Management > Authentication
System Settings > Authentication Tab > Enterprise Authentication
We moved
Enterprise Authentication settings to
Global Settings because this setting affects various Orchestrator services, not just SD-WAN. We have also changed the name of the
Native authentication option to
Local, with the
Single Sign-On authentication option remaining unchanged.
Enterprise > Global Settings > User Management > Authentication
Administrators
We have moved the
Administrators feature from the
System Settings tab to the
Global Settings page. This is because the
Global Settings page is a single location for settings that apply to various Orchestrator services.
Administrators is one of these settings, as it allows you to manage and create users and roles for multiple services and the whole Orchestrator. We have also changed the name of the
Administrators feature to
Users. This is to make it consistent with other VMware product terminology and to avoid confusion with the admin role.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > Administrators
Enterprise > Global Settings > User Management > Users
Role Customization
We have changed the name of the
Role Customization feature to
Service Permissions. This is to make room for the new
Role Builder feature that lets you create custom roles by combining different service permissions.
Service Permissions is a more accurate name for the feature, as it allows you to adjust the access levels for each service.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > Role Customization
Enterprise > Global Settings > User Management > Service Permissions
Edge Licensing
We have relocated the
Edge Licensing feature because the Classic Orchestrator UI could not handle multiple services that need configuration at the Enterprise level. The New Orchestrator UI is a portal for many services, not just SD-WAN. Edge Licensing is a feature that only applies to SD-WAN, so we have moved it to the new
Service Settings tab within the
SD-WAN service.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > Edge Licensing
Enterprise > SD-WAN > Service Settings > Edge Licensing
Zero Touch Provisioning (ZTP)
We have changed the way you activate your Edges in the New Orchestrator UI. You no longer need to enable
Zero Touch Provisioning (ZTP) in the
System Settings. You can access the ZTP feature directly from the
Edge Auto-Activation page. We have also renamed the ZTP feature to
Edge Auto-Activation, because it includes both the new automatic activation method and the original email activation method. You can choose either method from the Edge Configuration page. The
Edge Auto-Activation feature is specific to SD-WAN, so we have moved it to the new
Service Settings tab within the
SD-WAN service. The
Service Settings tab is part of the
Global Settings page, which is a single location for settings that apply to various Orchestrator services.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > Zero Touch Provisioning
Enterprise > SD-WAN > Service Settings > Edge Auto-Activation
Two Factor Authentication
We have relocated the
Two Factor Authentication feature from the
System Settings tab to the
Global Settings page. This is because the Two Factor Authentication feature affects users across various Orchestrator services. The new location for the feature is under the
User Management section within the
Global Settings page. This makes it more consistent with other VMware products.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Enable Two Factor Authentication
Enterprise > Global Settings > User Management > Authentication > User Authentication > Two Factor Authentication
Self-Service Password Reset
We have moved
Password Reset to the
Authentication tab within
Global Settings because this setting affects the Enterprise Orchestrator as a whole and not just SD-WAN.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Administration > System Settings > General Information > Enable Self Service Password Reset
Enterprise > Global Settings > User Management > Authentication > User Authentication > Self Service Password Reset
Enterprise > Configure > Alerts & Notifications
We have moved the
Alerts & Notifications feature from the
Configure tab to the
SD-WAN > Service Settings page. This is because the
Configure tab is for
Network Configurations, such as Profiles, Business Policies, and Firewall Rules. The
Service Settings page is for SD-WAN Orchestrator settings, such as
Edge Licensing,
Edge Auto-Activation, and
Alerts & Notifications.
The Alert Configuration page is organized into three tabs:
Alerts
SNMP Traps
Webhooks
Customer Configuration > Customer Capabilities
We have relocated the
Customer Capabilities feature from the
System Settings tab to the
Global Settings page. This is because the
Customer Capabilities feature affects the whole Enterprise Orchestrator, not just SD-WAN. We have also changed the name of the feature to
Feature Access, because it allows you to activate or deactivate various features for your Enterprise. Some of these features are SD-WAN specific, such as
Edge Licensing and
Edge Auto-Activation. Others are common to all Orchestrator services, such as
Alerts & Notifications and
Privacy Settings.
We have moved the
Service Access feature from the
System Settings tab to the
Global Settings page. This is because the
Service Access feature affects the whole Enterprise Orchestrator, not just SD-WAN. The
Service Access feature allows you to manage the additional services that you can purchase, enable, and configure for your Enterprise. You can find these services under the
Customer Configuration section in the
Global Settings page. Each service is displayed as a
Service Configuration card that shows its name, description, status, and settings. You can turn on or off each service and complete high-level configuration of each service from the card.
Enterprise > Global Settings > Customer Configuration > Gateway Pool
Customer Configuration > Maximum Segments
We have relocated the
Maximum Segments feature from the
Configure tab to the
SD-WAN service card in the
Global Settings page. This is because the
Maximum Segments feature is a high-level service configuration that applies to the whole Enterprise Orchestrator. The service configuration cards are where you can find the required configurations to enable each service. You can access the SD-WAN service card from the
Customer Configuration section in the
Global Settings page.
We have moved the
Operator Profile feature to the
SD-WAN service card in the
Global Settings page. This is because the Operator Profile feature is a high-level service configuration that applies to the whole Enterprise Orchestrator. The
Service Configuration cards are where you can find the required configurations to enable each service.
We have changed the name of the
Delegate Edge Software/Firmware Image Management feature to
Allow Customer to Manage Software. We have also moved this feature to the
SD-WAN service configuraiton card in the
Global Settings page. This is because the feature is a high-level service configuration that applies to the whole Enterprise Orchestrator. The service cards are where you can find the required configurations to enable each service.
Enterprise > Global Settings > Customer Configuration > SD-WAN > Configure > Allow Customer to Manage Software
Edge Shortcuts
We have improved the way you access the feature shortcuts in the New Orchestrator UI. You no longer need to look for them in the navigation menu, which was not very convenient. You can find the shortcuts in the upper right corner of the screen, next to the content of the page. This makes it easier to use the shortcuts that are relevant to the page you are viewing.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Configure > Edges > Select an Edge > Feature Shortcut appear at the bottom of the left-side navigation pane
Enterprise > SD-WAN > > Configure > Edges > Select an Edge > Shortcuts drop-down menu appears at top right corner of each Edge page
Profile Used By
We have changed the location of the Profile information in the New Orchestrator UI. You no longer need to look for it in the navigation menu, which was not very convenient. You can find the Profile information next to the title of the Profile, on the same page. This makes it easier to see which Edges and Business Policies are using the Profile.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Configure > Profiles > Select a Profile > Profile information appears at the bottom of Left side navigation pane
Enterprise > SD-WAN > > Configure > Profiles > Select a Profile > Profile information is moved to the right of the Profile Name
Segment Selector
We have moved the
Segment Selector to the top of the page in the New Orchestrator UI. This is to make it consistent with the Edge/Profiles tabs, so you can switch between them without changing the selected segment. Most of the
Device settings depend on the segment, so having the
Segment Selector at the top of the page is more efficient. The
Segment Selector stays fixed as you scroll down the page, so you can easily see and change it.
Edge/Profile Configuration Tab Order (Overview, Device, Business Policy, and Firewall)
We have changed the default tab that appears when you click on the Edge name in the New Orchestrator UI. It is now the
Device tab, instead of the
Overview tab. This is because most users want to see the
Device settings first, such as Device Name, Model, Serial Number, and Firmware Version. If you want to see the
Overview tab, you can still access it from the navigation menu. The
Overview tab shows you the Edge status, statistics, and events. Please note that after you provision an Edge, you will automatically see the
Overview tab first.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Configure > Edge/Profile > The Overview tab is first
Enterprise > SD-WAN > > Configure > Edge/Profile > The Device tab is now the first tab
The new tab order is: Device, Business Policy, Firewall, and Overview.
VRRP Settings
We have relocated the
VRRP Settings data grid from the
Device tab to the
High Availability section in the New Orchestrator UI. This is to make it easier for you to select and configure the VRRP options for your Edges. This change was made based on the feedback from our users, who wanted the VRRP data grid to be more visible and in context with the VRRP HA selection.
Classic Orchestrator Location
New Orchestrator Location
Enterprise > Configure > Edge/Profile > VRRP Settings > Located in its own section within Device Settings
VRRP Settingsis now under High Availability. If the VRRP option is selected as the HA option, then the VRRP data grid appears in the High Availability section.
My Account
This change is made to be consistent with the navigation of other VMware applications. All user account information is stored under the 'User' icon in the header navigation.
Classic Orchestrator Location
New Orchestrator Location
Header Navigation > User Email address > Your Account
Header Navigation > User Icon > My Account
Logout
This change is made to be consistent with the navigation of other
VMware applications. All user account information is stored under the 'User' icon in the header navigation.
Classic Orchestrator Location
New Orchestrator Location
Header Navigation > User Email address > Sign Out
Header Navigation > User Icon > Log Out
Quick Start Guide
This change is made to be consistent with the navigation of other
VMware applications. All help resources can be found under the 'Question Mark' icon in the header navigation.
Classic Orchestrator Location
New Orchestrator Location
Header Navigation > Help > Quick Start Guide
Header Navigation > Question Mark Icon > Quick Start Guide
Product Documentation
This change was made to be consistent with the navigation of other
VMware applications. All help resources can be found under the 'Question Mark' icon in the header navigation.
Classic Orchestrator Location
New Orchestrator Location
Header Navigation > Help > Product Documentation
Header Navigation > Question Mark Icon > Product Documentation
New Features that do not exist in the Classic Orchestrator
Enterprise > SD-WAN > Service Settings
Service Settings is a new menu within SD-WAN that includes SD-WAN Orchestrator specific configurations. This provides us with a set of configurations that are separated from the SD-WAN Network configurations.
New Orchestrator Location
Enterprise > SD-WAN > Service Settings
The following are the settings that are in this section:
Alerts & Notifications
Edge Licensing
Gateway Migration
Edge Management
Edge Auto-activation
Enterprise > Global Settings
Global Settings is a new section that allows global Orchestrator configurations and settings that span across more than one (or all) services.
New Orchestrator Location
Enterprise > Global Settings
The following are the settings that are in this section:
User Management > Users
User Management > Roles
User Management > Service Permissions (Operator Only)
User Management > Authentication
Enterprise Settings
Customer Configuration
Gateway Migration
Gateway Migration is relocated because it contains quiesced Gateways that are used by the current Enterprise and are needed for migration. Users must perform the migration per Enterprise because this feature is not available for Partner Gateways yet.
New Orchestrator Location
Enterprise > SD-WAN > Service Settings > Gateway Migration
Cloud Hub
Cloud Hub is a new section added to the SD-WAN Configuration, that is separated from SD-WAN Edge and Profile Configuration.
New Orchestrator Location
Enterprise > SD-WAN > Configure > Cloud Hub
Profile Shortcuts
The new Shortcuts drop-down menu located in the top right corner of each Profile page allows the user to efficiently choose the actions to perform.
New Orchestrator Location
Enterprise > SD-WAN > Configure > Profile
Pendo Opt Out/In
Clicking the "Cookie Usage" link allows the users to either opt out or opt into the Pendo analytics tracking tool.
New Orchestrator Location
Header Navigation > Question Mark Icon > Cookie Usage Link > Opt Out or Opt In.This opens Cookie Policy page.
Cookie Usage
All help resources can be found under the 'Question Mark' icon in the header navigation. This option is located here to be consistent with the navigation of other VMware applications.
New Orchestrator Location
Header Navigation > Question Mark Icon > Cookie Usage Link > Opt Out or Opt In. This opens Cookie Policy page.
Legal & Terms of Service
All information related to the user account is stored under the 'User' icon in the header navigation. This option is located here to be consistent with the navigation of other VMware applications.
New Orchestrator Location
Header Navigation > User Icon > Legal & Terms of Service Link > Opt Out or Opt In. This opens VMware site in a new tab.
Knowledge Base
All help resources can be found under the 'Question Mark' icon in the header navigation. This option is located here to be consistent with the navigation of other VMware applications.
New Orchestrator Location
Header Navigation > Question Mark Icon > Knowledge Base
This option is now a read only output of configured syslog within the Firewall > Syslog Forwarding section. This allows users to view the configured syslog settings without navigating to the Device tab.
SD-WAN > Configure > Edges > Firewall > New Rule > Read only views of selected Address Group and Service Group
This option is now a read only output of configured address groups and service groups within the Firewall > New Firewall Rule creation section. This allows the users to view the selected address groups and service groups configurations without navigating to the Object Groups section.
New Orchestrator Location
Enterprsie > SD-WAN > Configure > Edges > Firewall > New Rule > Select Source as Object Group > Add an Address Group and a Service Group > View the Address Group and Service Group information
