Release notes

• Release Notes 10.2.1

• Release Notes 10.2.2

• Release Notes 10.2.3

• Release Notes 10.2.4

• Release Notes 10.2.5

• Release Notes 10.2.6

• Release Notes 10.2.7

• Release Notes 10.2.8

• Release Notes 10.2.9c

Software installation and upgrade

• System requirements

• SD-WAN platform models and software packages

• Upgrade paths for release 10.2

• Virtual WAN software upgrade to 9.3.5 with working Virtual WAN deployment

• Upgrading to 10.2 with working virtual WAN deployment

• Single-step upgrade for SD-WAN appliances

• Reimage Citrix SD-WAN appliance software

• Change management settings

• Partial software upgrade using local change management

• WANOP to Premium Edition conversion with USB

• Convert Standard Edition to Premium Edition

• USB reimage utility

Licensing

• Local licensing

• Remote licensing

• Centralized licensing

• Managing licenses

• License expiry

Configuration

• Initial setup

  • Overview of web interface (UI) layout

  • Setting up the appliance hardware

  • Configure management IP address

  • Set date and time

  • Session timeout

  • Configure alarms

  • Configure rollback

• Setup Master Control Node (MCN)

  • MCN overview

  • Switch to MCN console

  • Configure MCN

  • Enable and configure virtual WAN security and encryption (optional)

  • Configure secondary MCN

  • Manage MCN configuration

• Setup branch nodes

  • Configure branch node

  • Clone a branch site (optional)

  • Auditing branch configuration

• Configuring the virtual path service between the MCN and client sites

• Deploy MCN configuration

  • Perform MCN change management

  • Deploy configuration to branches

  • One touch start

• Connecting the client appliances to your network

• Installing the SD-WAN appliance packages on the clients

Deployments

• Checklist and how to deploy

• Best practices

• Gateway mode

• Inline mode

• Virtual inline mode

• Building a SD-WAN network

• WAN optimization only with Premium (Enterprise) Edition

• Two box mode

• High Availability

• Enable High Availability using Y-Cable

• Zero touch

  • On-prem zero touch

  • AWS

  • Azure

• Single-region deployment

• Multi-region deployment

DHCP server and DHCP relay

• Configure DHCP server and DHCP relay

• WAN link IP address learning through DHCP client

GRE tunnel

• Configure GRE tunnels for the MCN site (optional)

• Configure GRE tunnels for a branch site

Internet access

• Direct Internet Access with integrated firewall

• Direct Internet Access with Secure Web Gateway

• Backhaul internet

• Hairpin mode

Quality of Service

• Classes

• Rules by IP address and port number

• Rules by application name

• Add rule groups and enable MOS

• Application classification

• QoS fairness (RED)

• MPLS queues

Reporting

• Application QoE

• HDX QoE

• Multiple net flow collectors

Routing

• SD-WAN overlay routing

• Routing domain

  • Configure routing domain

  • Configure routes

  • Use CLI to access routing

• Dynamic routing

  • OSPF

  • BGP

  • iBGP

  • eBGP

• Application route

• Route filtering

• Route summarization

• Configure multicast groups

• Configure virtual path route cost

• Configure Virtual Router redundancy protocol

• Configure network objects

• Routing support for LAN segmentation

Secure peering

• Auto secure peering to a PE appliance from a standalone SD-WAN SE and WANOP appliance on the DC site

• Auto secure peering initiated from PE appliance at DC site and branch site PE appliance

• Auto secure peering initiated from PE appliance at DC site and branch with standalone SD-WAN SE and WANOP appliance

• Manual secure peering initiated from PE appliance at DC site and branch PE appliance

• Manual secure peering initiated from PE appliance at DC site to branch standalone SD-WAN SE and WANOP appliance

• Domain join and delegate user creation

Security

• IPsec tunnel termination

  • How to configure IPsec tunnels for virtual and dynamic paths

  • How to configure IPsec tunnel between SD-WAN and third-party devices

  • How to add IKE certificates

  • How to view IPsec tunnel configuration

  • IPsec monitoring and logging

  • Eligibility for IPsec non-virtual path routes

  • IPsec null encryption

• FIPS compliance

• Citrix SD-WAN Secure Web Gateway

  • Zscaler integration by using GRE tunnels and IPsec tunnels

  • Firewall traffic redirection support by using Forcepoint in Citrix SD-WAN

  • Palo Alto integration by using IPsec tunnels

• Stateful firewall and NAT support

  • Global firewall settings

  • Advanced firewall settings

  • Zones

  • Policies

• Network address translation (NAT)

  • Static NAT

  • Dynamic NAT

• Configure virtual WAN service

• Configure firewall segmentation

WAN optimization

• Citrix SD-WAN Premium Edition

  • Enabling optimization and configuring the default feature settings

  • Configuring optimization default tuning settings

  • Configuring optimization default application classifiers

  • Configuring optimization default service classes

  • Configuring optimization for a branch site

  • Configure SSL profiles

• Citrix WAN optimization client plug-in

  • Hardware and software requirements

  • How the WANOP plug-in works

  • Deploying appliances for use with plug-ins

  • Customizing the plug-in MSI file

  • Deploying plug-ins on Windows systems

  • WANOP plug-in GUI commands

  • Updating the WANOP plug-in

  • Troubleshooting WANOP plug-in

• SMB 3.1.1 connection

How to articles

• Interface groups

• Configure virtual IP Address identity

• Configure access interface

• Configure virtual IP addresses

• Configure GRE tunnels

• Set up dynamic paths for branch to branch communication

• WAN-to-WAN forwarding

Monitoring and troubleshooting

• Monitoring virtual WAN

• Viewing statistical information

• Viewing flow information

• Improved path mapping and bandwidth usage

• Viewing reports

• Viewing firewall statistics

• Diagnostics

• Troubleshooting management IP

• Session-based HTTP notifications

• Active bandwidth testing

• Adaptive bandwidth detection

Best practices

• Security

• Routing

• QoS

• WAN links