Configure SASE Orchestrator for Azure Virtual WAN IPsec Automation from SD-WAN Edge

You can configure SASE Orchestrator for integrating Azure Virtual WAN and SD-WAN Edge to enable the branch-to-Azure VPN connectivity directly from SD-WAN Edge.

Note: When using the Azure Virtual WAN Automation from SD-WAN Edge feature, the Non SD-WAN Destination (NSD) tunnel only supports static routes. As a result, this feature is not currently compatible with BGP over IPsec.

Before you begin the SASE Orchestrator configuration for Azure Virtual WAN - SD-WAN Edge automation, ensure you have completed all the steps explained in the Prerequisite Azure Configuration and Configure Azure Virtual WAN for Branch-to-Azure VPN Connectivity sections.

For step-by-step instructions about the various procedures that need to be completed in the SASE Orchestrator side for integrating Azure Virtual WAN and SD-WAN Edge, see:

• Configure API Credentials
• Configure a Non-VMware SD-WAN Site of Type Microsoft Azure via Edge
• Configure Cloud VPN for Profiles
• Associate a Microsoft Azure Non SD-WAN Destination to an SD-WAN Edge and Add Tunnels