Citrix SD-WAN

Current Release 11.5 limited availability 11.3 11.2 11.1 11.0 10.2

Release notes
- Troubleshooting Citrix SD-WAN™ 110 SE network issue
- Release Notes 11.3.1
- Release Notes 11.3.2
- Release Notes 11.3.3
New user interface for SD-WAN appliances
Software installation and upgrade
- System requirements
- SD-WAN platform models and software packages
- Upgrade paths for release 11.3
- Virtual WAN software upgrade to 9.3.5 with working Virtual WAN deployment
- Upgrading to 11.3 with working virtual WAN configuration
- Upgrading to 11.3 without working virtual WAN configuration
- Reimage Citrix SD-WAN appliance software
- Change management settings
- Partial software upgrade using local change management
- WANOP to Premium Edition conversion with USB
- Convert Standard Edition to Premium Edition
- USB reimage utility
Licensing
- Local licensing
- Remote licensing
- Centralized licensing
- Managing licenses
- License expiry
Configuration
- Initial setup
- Setup Master Control Node (MCN)
- Setup branch nodes
- Configuring the virtual path service between the MCN and client sites
- Deploy MCN configuration
- Connecting the client appliances to your network
- Installing the SD-WAN appliance packages on the clients
- Deploy Citrix SD-WAN standard edition in OpenStack using CloudInit
Configure LTE
- Configure LTE functionality on 210 SE LTE
- Configure LTE functionality on 110-LTE-WiFi appliance
- Configure external USB LTE modem
Deployments
- Checklist and how to deploy
- Best practices
- Gateway mode
- Inline mode
- Virtual inline mode
- Building a SD-WAN network
- WAN optimization only with Premium (Enterprise) Edition
- Two box mode
- High Availability
- Enable Edge Mode High Availability Using Fiber Optic Y-Cable
- Zero touch
- Single-region deployment
- Multi-region deployment
Configuration guide for Citrix Virtual Apps and Desktops™ workloads
Domain name system
DHCP server and DHCP relay
- Configure DHCP server and DHCP relay
- WAN link IP address learning through DHCP client
Dynamic PAC file customization
GRE tunnel
- Configure GRE tunnels for the MCN site (optional)
- Configure GRE tunnels for a branch site
In-band and backup management
Internet access
- Direct Internet Access with integrated firewall
- Direct Internet Access with Secure Web Gateway
- Backhaul internet
- Hairpin mode
Hosted firewalls
- Palo Alto Networks firewall integration on SD-WAN 1100 platform
- Check Point firewall integration on SD-WAN 1100 platform
Link aggregation groups
Link state propagation
Metering and standby WAN links
Office 365 optimization
Citrix Cloud™ and Gateway service optimization
Citrix SD-WAN Orchestrator™ on-premises configuration on Citrix SD-WAN appliance
PPPoE configuration
Quality of Service
- Classes
- Rules by IP address and port number
- Rules by application name
- Add rule groups and enable MOS
- Application classification
- QoS fairness (RED)
- MPLS queues
Reporting
- Application QoE
- HDX™ QoE
- Multiple net flow collectors
- Route statistics
Routing
- SD-WAN overlay routing
- Routing domain
- Dynamic routing
  - OSPF
  - BGP
  - iBGP
  - eBGP
- Application route
- Route filtering
- Route summarization
- Protocol preference
- Configure multicast groups
- Configure virtual path route cost
- Configure Virtual Router redundancy protocol
- Configure network objects
- Routing support for LAN segmentation
- Inter-routing domain service
Secure peering
- Auto secure peering to a PE appliance from a standalone SD-WAN SE and WANOP appliance on the DC site
- Auto secure peering initiated from PE appliance at DC site and branch site PE appliance
- Auto secure peering initiated from PE appliance at DC site and branch with standalone SD-WAN SE and WANOP appliance
- Manual secure peering initiated from PE appliance at DC site and branch PE appliance
- Manual secure peering initiated from PE appliance at DC site to branch standalone SD-WAN SE and WANOP appliance
- Domain join and delegate user creation
Security
- IPsec tunnel termination
- FIPS compliance
- Citrix SD-WAN Secure Web Gateway
- Stateful firewall and NAT support
- Network address translation (NAT)
  - Static NAT
  - Dynamic NAT
- Configure virtual WAN service
- Configure firewall segmentation
- Certificate authentication
AppFlow® and IPFIX
SNMP
Administrative interface
NDP router advertisement and prefix delegation group
WAN optimization
- Citrix SD-WAN Premium Edition
- Citrix® WAN optimization client plug-in
- SMB 3.1.1 connection
How to articles
- Interface groups
- Configure virtual IP Address identity
- Configure access interface
- Configure virtual IP addresses
- Configure GRE tunnels
- Set up dynamic paths for branch to branch communication
- WAN-to-WAN forwarding
Monitoring and troubleshooting
- Monitoring virtual WAN
- Viewing statistical information
- Viewing flow information
- Viewing reports
- Viewing firewall statistics
- Diagnostics
- Improved path mapping and bandwidth usage
- Troubleshooting management IP
- Session-based HTTP notifications
- Active bandwidth testing
- Adaptive bandwidth detection
Best practices
- Security
- Routing
- QoS
- WAN links
FAQs
Reference material
Document History

View PDF

This content has been machine translated dynamically.

Give feedback here

Thank you for the feedback

Citrix SD-WAN™
Citrix SD-WAN 11.3

This content has been machine translated dynamically.

Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)

Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)

Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)

此内容已经过机器动态翻译。放弃

このコンテンツは動的に機械翻訳されています。免責事項

이 콘텐츠는 동적으로 기계 번역되었습니다. 책임 부인

Este texto foi traduzido automaticamente. (Aviso legal)

Questo contenuto è stato tradotto dinamicamente con traduzione automatica.(Esclusione di responsabilità))

This article has been machine translated.

Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)

Ce article a été traduit automatiquement. (Clause de non responsabilité)

Este artículo ha sido traducido automáticamente. (Aviso legal)

この記事は機械翻訳されています.免責事項

이 기사는 기계 번역되었습니다.책임 부인

Este artigo foi traduzido automaticamente.(Aviso legal)

这篇文章已经过机器翻译.放弃

Questo articolo è stato tradotto automaticamente.(Esclusione di responsabilità))

Switch to english Auf Englisch anzeigen Lire en anglais Leer en inglés 英語に切り替え 영어로 전환 Mudar para ingles 切换到英文 Passa all'inglese

Translation failed!

Hosted firewalls

September 27, 2025

Contributed by:

C S

Currently Citrix SD-WAN™ supports the following hosted firewalls:

Palo Alto Networks
Check Point

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

DIESER DIENST KANN ÜBERSETZUNGEN ENTHALTEN, DIE VON GOOGLE BEREITGESTELLT WERDEN. GOOGLE LEHNT JEDE AUSDRÜCKLICHE ODER STILLSCHWEIGENDE GEWÄHRLEISTUNG IN BEZUG AUF DIE ÜBERSETZUNGEN AB, EINSCHLIESSLICH JEGLICHER GEWÄHRLEISTUNG DER GENAUIGKEIT, ZUVERLÄSSIGKEIT UND JEGLICHER STILLSCHWEIGENDEN GEWÄHRLEISTUNG DER MARKTGÄNGIGKEIT, DER EIGNUNG FÜR EINEN BESTIMMTEN ZWECK UND DER NICHTVERLETZUNG VON RECHTEN DRITTER.

CE SERVICE PEUT CONTENIR DES TRADUCTIONS FOURNIES PAR GOOGLE. GOOGLE EXCLUT TOUTE GARANTIE RELATIVE AUX TRADUCTIONS, EXPRESSE OU IMPLICITE, Y COMPRIS TOUTE GARANTIE D'EXACTITUDE, DE FIABILITÉ ET TOUTE GARANTIE IMPLICITE DE QUALITÉ MARCHANDE, D'ADÉQUATION À UN USAGE PARTICULIER ET D'ABSENCE DE CONTREFAÇON.

ESTE SERVICIO PUEDE CONTENER TRADUCCIONES CON TECNOLOGÍA DE GOOGLE. GOOGLE RENUNCIA A TODAS LAS GARANTÍAS RELACIONADAS CON LAS TRADUCCIONES, TANTO IMPLÍCITAS COMO EXPLÍCITAS, INCLUIDAS LAS GARANTÍAS DE EXACTITUD, FIABILIDAD Y OTRAS GARANTÍAS IMPLÍCITAS DE COMERCIABILIDAD, IDONEIDAD PARA UN FIN EN PARTICULAR Y AUSENCIA DE INFRACCIÓN DE DERECHOS.

本服务可能包含由 Google 提供技术支持的翻译。Google 对这些翻译内容不做任何明示或暗示的保证，包括对准确性、可靠性的任何保证以及对适销性、特定用途的适用性和非侵权性的任何暗示保证。

このサービスには、Google が提供する翻訳が含まれている可能性があります。Google は翻訳について、明示的か黙示的かを問わず、精度と信頼性に関するあらゆる保証、および商品性、特定目的への適合性、第三者の権利を侵害しないことに関するあらゆる黙示的保証を含め、一切保証しません。

ESTE SERVIÇO PODE CONTER TRADUÇÕES FORNECIDAS PELO GOOGLE. O GOOGLE SE EXIME DE TODAS AS GARANTIAS RELACIONADAS COM AS TRADUÇÕES, EXPRESSAS OU IMPLÍCITAS, INCLUINDO QUALQUER GARANTIA DE PRECISÃO, CONFIABILIDADE E QUALQUER GARANTIA IMPLÍCITA DE COMERCIALIZAÇÃO, ADEQUAÇÃO A UM PROPÓSITO ESPECÍFICO E NÃO INFRAÇÃO.

Instructions for Contributors

NetScaler Secure Deployment Guide

This content has been machine translated dynamically.

Give feedback here

Thank you for the feedback

Hosted firewalls

September 27, 2025

Contributed by:

C S

September 27, 2025

Contributed by:

C S

Hosted firewalls

In this article