SD-WAN Orchestrator supports Azure Virtual WAN and SD-WAN Gateway integration and automation to enable branch-to-VPN connectivity. Azure Virtual WAN SD-WAN Gateway Automation OverviewAzure Virtual WAN is a network service that facilitates optimized and automated Virtual Private Network (VPN) connectivity from enterprise branch locations to or through Microsoft Azure. Azure subscribers’ provision Virtual Hubs corresponding to Azure regions and connect branches (which may or may not be SD-WAN enabled) through IP security (IPSec) VPN connections. Prerequisite Azure ConfigurationEnterprise network administrators must complete the following prerequisite configuration tasks at the Azure portal to ensure that the SD-WAN Orchestrator application can function as the Service Principal (identity for the application) for the purposes of Azure Virtual WAN and SD-WAN Gateway integration. Configure Azure Virtual WAN for Branch-to-Azure VPN ConnectivityThis section describes the procedures to configure Azure for integrating Azure Virtual WAN and SD-WAN Gateway to enable the branch-to-Azure VPN connectivity. Configure SD-WAN Orchestrator for Branch-to-Azure VPN ConnectivityYou can configure SD-WAN Orchestrator for integrating Azure Virtual WAN and SD-WAN Gateway to enable the branch-to-Azure VPN connectivity.