Important Information

	Latest Software We recommend that you install the most recent software release to stay up-to-date with the latest functional improvements, stability fixes, security enhancements and protection against new and evolving attacks.
	Certifications For third party independent certification of Check Point products, see the Check Point Certifications page.
	Check Point Quantum SD-WAN Administration Guide For more about this release, see the home page.
	Latest Version of this Document in English Open the latest version of this document in a Web browser. Download the latest version of this document in PDF format.
	Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments.

Revision History

Date	Description
24 December 2025	Updated: Troubleshooting SD-WAN "Overlay" Troubleshooting SD-WAN with Kernel Debug
15 December 2025	Updated: Step 2 - Configuration on the On-Premises Management Server
12 December 2025	Updated: Troubleshooting SD-WAN "Local Breakout Only"
27 October 2025	Updated: EA Feature: SLA-Based Prioritize Local Breakout - updated the title SD-WAN Symmetric Packet Return Troubleshooting SD-WAN Installation Configuring Steering Behavior
28 September 2025	Updated: EA Feature: SD-WAN with a Traditional VSX Virtual System - Virtual Systems do not support FEC
23 September 2025	Updated: SD-WAN Service GUI
21 September 2025	Added: EA Feature: SD-WAN in Layer 2 Updated: SD-WAN Limitations Configuring Steering Behavior
09 September 2025	Updated: Licensing the SD-WAN Product
17 July 2025	Added: EA Feature: QoS in SD-WAN Updated: WAN Link Mapping - the page design was changed
14 July 2025	Updated: Step 2 - Configuration on the On-Premises Management Server Step 2 - Configuration in Smart-1 Cloud Step 3 - Configuration on Security Gateways Step 3 - Configuration on Security Gateways Configuring Steering Behavior - in Quality Check Methodology, added Multiple Target Probing (MTP) - previously, the Early Availability feature EA Feature: SLA-Based Prioritize Local Breakout - added the procedure for Quantum Spark Gateways
26 June 2025	Updated: Step 2 - Configuration on the On-Premises Management Server Step 2 - Configuration in Smart-1 Cloud SD-WAN Service GUI - the widget was renamed from "Steering Objects" to "Steering Object Usage Breakdown" SD-WAN Monitoring - the widget was renamed from "Steering Objects" to "Steering Object Usage Breakdown"
09 June 2025	Updated: Changed the term from "Overlay - VPN" to "Overlay" Step 3 - Configuration on Security Gateways "Part 2 - Configuration of SD-WAN interfaces on the Security Gateway" Procedure for a Security Gateway that runs Gaia OS Improved the notes about the options Directly accessible and Accessible via NAT Procedure for Quantum Spark Appliance that runs Gaia Embedded OS Updated the steps on the Connection Monitoring tab Configuring Steering Behavior Updated the notes for the field Check interval SD-WAN Connection Type - "Overlay" SD-WAN Configuration for DAIP Security Gateways The "Monitor" View Updated the titles of the tabs Monitoring SD-WAN Status in Infinity Portal Updated the titles of the tabs
04 June 2025	Updated: EA Feature: SD-WAN with a Maestro Security Group EA Feature: SD-WAN with a Traditional VSX Virtual System EA Feature: SD-WAN with SmartLSM (SmartProvisioning) EA Feature: SLA-Based Prioritize Local Breakout EA Features: Quality Check Methodology - Multiple Targets for Probing
14 May 2025	Updated: EA Feature: SD-WAN with a Maestro Security Group EA Feature: SD-WAN with a Traditional VSX Virtual System EA Feature: SD-WAN with SmartLSM (SmartProvisioning) EA Feature: SLA-Based Prioritize Local Breakout EA Features: Quality Check Methodology - Multiple Targets for Probing
13 May 2025	Added: EA Feature: SD-WAN with a Maestro Security Group EA Feature: SD-WAN with a Traditional VSX Virtual System EA Feature: SD-WAN with SmartLSM (SmartProvisioning) EA Feature: SLA-Based Prioritize Local Breakout EA Features: Quality Check Methodology - Multiple Targets for Probing Updated: SD-WAN DSCP SD-WAN NAT for ISP
08 April 2025	Updated: SD-WAN Limitations SD-WAN Symmetric Packet Return
25 March 2025	Updated: The Zone object "Public Networks" was renamed to "SD-WAN Internet" The Zone object "Private Networks" was renamed to "My VPN Domain & Peer VPN Domain" SD-WAN Service GUI Licensing the SD-WAN Product - added information about an Evaluation License Part 2 - Configure Object Sharing and Log Sharing Configuring SD-WAN Policy Troubleshooting SD-WAN "Overlay"
25 February 2025	Updated: Part 2 - Configure Object Sharing and Log Sharing Monitoring SD-WAN Status in Infinity Portal
28 January 2025	Added: Route-Based VPN traffic that is routed towards a VTI is not encrypted and is sent in clear-text Updated: SD-WAN FEC
12 January 2025	Updated: SD-WAN NAT for ISP
01 January 2025	Updated: CPView shows that the "Overlay" probing state is "DOWN"
30 December 2024	Updated: SD-WAN DSCP - added the list of supported Security Gateways
24 December 2024	Updated: Outbound Hide NAT Additional Considerations Step 3 - Configuration on Security Gateways SD-WAN Connection Type - "Internet" SD-WAN Connection Type - "Overlay" Monitoring Overlay Tunnels in Infinity Portal SD-WAN Best Practices
30 November 2024	Updated: Troubleshooting SD-WAN "Overlay" - the scenario Expected VPN Transports to VPN Peers are missing from the list
19 November 2024	Updated: Licensing the SD-WAN Product SD-WAN Configuration for DAIP Security Gateways - moved some known limitations to the main SK article sk180605
13 November 2024	Updated: Troubleshooting SD-WAN "Local Breakout Only" Troubleshooting SD-WAN "Overlay"
11 November 2024	Added: Moved all information from sk181147: Quantum SD-WAN - Troubleshooting to the chapter "SD-WAN Troubleshooting" Updated: Guidelines for Planning and Configuring SD-WAN SD-WAN Connection (Steering Behavior) Types Routing Preference "Backhaul Only" Routing Preference "Prioritize Local Breakout" SD-WAN Best Practices SD-WAN Symmetric Packet Return SD-WAN and Route-Based VPN Troubleshooting SD-WAN "Overlay" SD-WAN Configuration for DAIP Security Gateways - moved some known limitations to the main SK article sk180605
29 October 2024	Added: SD-WAN NAT for ISP SD-WAN DSCP Updated: Configuring SD-WAN Policy Guidelines for Planning and Configuring SD-WAN Routing Preference "Backhaul Only" SD-WAN Best Practices SD-WAN Symmetric Packet Return SD-WAN and Route-Based VPN
12 September 2024	Added: SD-WAN and Route-Based VPN Updated: SD-WAN Terms Guidelines for Planning and Configuring SD-WAN Configuring SD-WAN Policy Configuring Steering Behavior SD-WAN Symmetric Packet Return
26 August 2024	Updated: SD-WAN Service GUI - updated the names of GUI elements Configuring SD-WAN Policy - new Dynamic Objects SD-WAN Symmetric Packet Return - minor textual corrections
23 August 2024	Added: SD-WAN FEC SD-WAN Symmetric Packet Return SD-WAN Circuit ID Updated: Guidelines for Planning and Configuring SD-WAN Workflow for an On-Premises Management Server: Step 3 - Configuration on Security Gateways - Part 4 - Configuration of the Security Gateway object in SmartConsole Workflow for Smart-1 Cloud: Step 3 - Configuration on Security Gateways - Part 4 - Configuration of the Security Gateway object in SmartConsole Configuring Steering Behavior - added "Selection Method" in "WAN Link Utilization" > "Link Aggregation" Configuring Steering Behavior - added requirements for the HTTP probing protocol
12 August 2024	Updated: Guidelines for Planning and Configuring SD-WAN Configuring Steering Behavior - added HTTP as the probing protocol
08 August 2024	Added: Guidelines for Planning and Configuring SD-WAN Licensing the SD-WAN Product Updated: Getting Started with SD-WAN SD-WAN Terms Workflow for an On-Premises Management Server: Step 2 - Configuration on the On-Premises Management Server Step 3 - Configuration on Security Gateways Workflow for Smart-1 Cloud: Step 2 - Configuration in Smart-1 Cloud Step 3 - Configuration on Security Gateways Configuring SD-WAN Policy Configuring Steering Behavior SD-WAN Configuration for DAIP Security Gateways WAN Link Mapping Monitoring ISP Link Attributes in Infinity Portal
19 June 2024	Updated: Introduction to Quantum SD-WAN
16 January 2024	Added: SD-WAN Configuration for DAIP Security Gateways
23 December 2023	Added: Upgrading an SD-WAN Security Gateway
05 October 2023	Updated: Workflow for an On-Premises Management Server: Step 4 - SD-WAN Wizard Workflow for Smart-1 Cloud: Step 4 - SD-WAN Wizard
07 September 2023	Updated: The document structure to show the required steps for each workflow: Workflow for an On-Premises Management Server Workflow for Smart-1 Cloud Getting Started with SD-WAN SD-WAN Next Hop Probing on CloudGuard Network Security Gateways
05 July 2023	Added: SD-WAN Connection Type - "Internet" The new connection type replaced these dedicated connection types: Local Breakout Backhaul Note - Infinity Portal migrated the previous connection types automatically. Topic "SD-WAN Troubleshooting" Updated: Introduction to Quantum SD-WAN Configuring Steering Behavior SD-WAN Connection (Steering Behavior) Types The "Monitor" View - the "Logs" page - removed the limitation "Currently, this page shows the information only for the SD-WAN connection of type Local Breakout"
02 July 2023	Added: SD-WAN GraphQL API Updated: The "Support" View - added the "API" section SD-WAN Configuration in Gaia Clish - corrected the syntax of "`next-hop`" in the "`add interface`" and "`set interface`" commands
01 June 2023	Updated: Workflow for an On-Premises Management Server: Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances - added the note that VLAN interfaces are supported as SD-WAN interfaces Workflow for Smart-1 Cloud: Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances - added the note that VLAN interfaces are supported as SD-WAN interfaces
30 May 2023	Updated: Objects Supported in SD-WAN Policy
15 May 2023	Updated: Workflow for an On-Premises Management Server: Step 3 - Configuration on Security Gateways - procedure for Security Gateways Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances Workflow for Smart-1 Cloud: Step 2 - Configuration in Smart-1 Cloud - procedure for Quantum Spark Appliances Step 3 - Configuration on Security Gateways - procedure for Security Gateways
23 April 2023	Updated: Getting Started with SD-WAN - added the note "See the Limitations section in sk180605" Improved formatting in Workflow for an On-Premises Management Server: Step 3 - Configuration on Security Gateways - procedure for Security Gateways Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances Improved formatting in Workflow for Smart-1 Cloud: Step 3 - Configuration on Security Gateways - procedure for Security Gateways Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances
20 April 2023	Updated: Workflow for an On-Premises Management Server: Step 1 - Configuration in Infinity Portal - Part 2 Initial Configuration in Infinity Portal Moved all limitations from this Administration Guide to the Home Page sk180605
17 March 2023	Added: SD-WAN Best Practices Updated: Introduction to Quantum SD-WAN Getting Started with SD-WAN SD-WAN Terms SD-WAN Service GUI Workflow for an On-Premises Management Server: Step 1 - Configuration in Infinity Portal Step 3 - Configuration on Security Gateways - procedure for Security Gateways Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances Step 4 - SD-WAN Wizard Workflow for Smart-1 Cloud" Step 2 - Configuration in Smart-1 Cloud Step 3 - Configuration on Security Gateways - procedure for Security Gateways Step 3 - Configuration on Security Gateways - procedure for Quantum Spark Appliances Step 4 - SD-WAN Wizard Configuring SD-WAN Policy SD-WAN Connection Type - "Overlay"
09 February 2023	First release of this document