Feature Request - Watchguard Cloud - Firebox Templates, SD-WAN editing

seanhht

I would like to request a feature in Watchguard Cloud Configuration.

My suggestion is to add an allow/disallow slider for SD-WAN actions, in each firewall policy in Firebox templates. Much like you have for content actions. This would allow us to turn on and select a SD-WAN action at the device level.

There may be some policies we don't want this. There may be some policies that we want this enabled. That is why I don't think it should be an all or nothing approach.

If you are not an MSP, you cannot copy a firebox template to your cloud-managed firebox. You can only subscribe the firebox to the template. While this is a fine way to handle things, there is a problem with doing it this way. You cannot "tell" the template that you will want to use an SD-WAN, You cannot allow or deny an sd-wan action. If you deploy the template with Firewall Policies, those policies are not editable, at all.

I would prefer this option to copying the policy, for ease of updating and making it easier to deploy templates to multiple sites and fireboxes. This is a template, the name indicates that it should be able to be changed at the device level.

james.carson

Hi @seanhht

There is an existing feature request (FCCM-6507) to show the SD-WAN status in the policy overview.

I'll mention a toggle to the project management team, but they may want to avoid adding that function there as there may be some situations where SD-WAN isn't as straightforward as on or off.