Athena NGFW (Next-Generation Firewall)

Athena NGFW (previously known as Network Secure) provides comprehensive protection for every network perimeter, ensuring the safety of your valuable assets, data, and users from emerging threats.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
8.0.85
{{sendMatomoQuery("Athena NGFW (Next-Generation Firewall)","SD-WAN Path Selection Templates")}}

SD-WAN Path Selection Templates

{{ $t('productDocDetail.updateTime') }}: 2026-01-06

You can create a local SD-WAN path selection template or download one from the Branch Business Center (BBC). You can also create path selection policies for the VPN HQ device or view path selection policies for the VPN HQ and branch devices, as shown in the following figure.

A close-up of a computer screen

Description automatically generated

Step 1.On the VPN HQ tab, click Add. In the Add Path Selection Template dialog box, set the template name and select a branch, then click OK, as shown in the following figure.

A screenshot of a computer

Description automatically generated

Step 2.Click Configure Path Selection Policy in the Operation column for the created template, as shown in the following figure.

A white and blue text box

Description automatically generated with medium confidence

Step 3.On the page that appears, click Add, as shown in the following figure.

Step 4.In the Add Policy dialog box, select Specified for Mode in the App Identification section. Auto Ident is selected by default. The auto identification algorithm identifies the types and priorities of apps and automatically selects paths from them based on their service types and priorities. Herein, Specified is selected for ease of demonstration.

A red and black text box

Description automatically generated with medium confidence

Step 5.Select apps for SD-WAN path selection in App Categories.

A red rectangle with blue and black text

Description automatically generated

A screenshot of a computer

Description automatically generated

Step 6.Click Settings next to Specify Src/Dst IP and specify the IP range for SD-WAN path selection. All is selected by default.

A screenshot of a computer

Description automatically generated

A screenshot of a computer

Description automatically generated

Step 7.In the Path Selection Settings section, select AutoGO Smart Path Selection for Mode and select Paths for path selection. If no paths are selected, all paths are included by default. Click OK.

A screenshot of a computer

Description automatically generated

A black and white logo

Description automatically generated

The configured VPN paths are available for Local Path, and four paths are available for Peer Path by default. You can click Delete in the Operation column to delete the VPN paths that do not exist.

A green background with white letters

Description automatically generated

If your device is not added to the BBC, you can configure SD-WAN path selection templates and policies on your local console. If your device is added to the BBC, you must configure SD-WAN path selection templates and policies on the BBC and push them down to your device. The configuration method in the BBC is the same as that in your local console.