The Future of SD-WAN September 2025: Video, Slides, and Q&A

[PhoneBoy]

If we only want to consume the SD-WAN service, do we also need SASE for backbone connectivity, or is SD-WAN connectivity available as a standalone option as well?

It’s available standalone, yes.

Is SD-WAN fully supported on Maestro + VSX(legacy)Environment?

Yes, the support is available as EA - contact your local Sales Engineer

Does it support traffic shaping based on L7? e.g. guarantee 20% of bandwidth for web conference?

YES! We supports QoS per application.

Do we still have limitations on number of VTI on the hub? How we can connect a lot of branches with BGP if the limitation persist?

We currently scale up to 500 branch gateways in a hub and spoke topology for VPN overlay. Contact us for a project specific design.

Is it possible to leverage the SD-WAN functionality on Azure CGNS NVA when deployed within a vWAN Hub?

Azure vWAN is currently in EA - contact the local sales team to participate in the program

Do we have simplification on nano agent installation? Is still manual?

we now have an automated deployment method

Is SD-WAN already supported on Embedded Gaia?

Yes, though due to resource constraints, a Quantum Spark appliance cannot be a hub. 

Is SD-WAN acting as a Firewall Chain Module? if so - where is this module placed? between which chains?

SD-WAN steering takes place after security and is enforced as a chain module

SD-Wan probing has any problem if the peer IP address is excluded for encryption (with crypt.def file)? Is it supported?

The default settings for the sd-wan rule base have been defined to avoid this problem, you may want to check if you are using the SD-WAN Internet object and MY VPN DOmain and PEER VPN domain objects - you may want to reach out to your local Sales for better help in a POC or to TAC

With SASE + SD-WAN can I use overlay tunnel? Or we are talking about two VPN created manually from Check Point side?

Today, VPN connection is route-based VPN without measuring jitter, latency and packet loss. work to overcome this is in progress.
Do you have how many pops in Brazil?

How will traffic steering work if using Zscaler as our SSE? Assuming all traffic is encrypted by Zscaler.

Documented here https://support.checkpoint.com/results/sk/sk175385

Can we use QoS in VPN connected to SASE?

Yes

Do you have roadmap for SD-Wan on prem (i.e. without Infinity Portal)?

It's part of our plans for 2026

What about SD-WAN on ElasticXL and VSnext?

Expected in the near future.

[the_rock]

Great session.

[the_rock]

By the way, if sd-wan is supported now with Perimeter 81 (harmony sase), is there an official guide how to configure it?

Andy