While creating or updating a Business Policy rule and action, you can set the Network Service to Direct, Multi-Path, and Internet Backhaul.
- NAT must hit traffic in edge routing table with Next Hop as either Cloud VPN or Cloud Gateway.
- NAT works for traffic to public IP addresses only, even if Business Policy allows to configure private IP addresses as destination.
Sends the traffic from one SD-WAN Edge to another SD-WAN Edge.
- Backhaul Hubs
- Non SD-WAN Destinations via Gateway
- Non SD-WAN Destinations via Edge/Cloud Security Service
- VMware Cloud Web Security Gateway
Note: The VMware Cloud Web Security Gateway option is available only if a user has subscribed to use the VMware Cloud Web Security service.
For more information, see VMware SD-WAN Cloud Web Security Configuration Guide published at https://docs.vmware.com/en/VMware-Cloud-Web-Security/index.html.
If Conditional Backhaul is enabled at the profile level, by default it will apply for all Business Policies configured for that profile. You can disable conditional backhaul for selected policies to exclude selected traffic (Direct, Multi-Path, and CSS) from this behavior by selecting the disable conditional backhaul checkbox in the Action area of the Configure Rule screen for the selected business policy.
For more information about how to enable and troubleshoot the Conditional Backhaul feature, see Conditional Backhaul.