Prerequisites for Using the SD-WAN Wizard

Firewall Management Center Essentials (formerly Base) license must allow export-controlled functionality.

Choose System > Licenses > Smart Licenses to verify this functionality in the Firewall Management Center.

You must be an Admin user.

Hub devices must be Version 7.6.0 and later.

Spoke devices must be Version 7.3.0 and later.

The Firewall Threat Defense devices must have an internet-routable public IP address. The IP address can be static or dynamic.

Assign appropriate logical names and IP addresses to the interfaces of the Firewall Threat Defense devices. For example, use inside for the interface connected to the LAN, and outside for the interface connected to the internet or WAN.

If you are using certificate-based authentication, you must enroll the certificates in the hub and spokes.

Configure routing, NAT, and AC policies to ensure underlay connectivity between the devices.