Citrix SD-WAN

Configure Virtual WAN Service

The Citrix SD-WAN configuration describes and defines the topology of your Citrix SD-WAN network. For information on how to configure virtual WAN service using Citrix SD-WAN Orchestrator service, see Flows.

Security and encryption

Enabling encryption for SD-WAN (for the Virtual Paths) is optional. When encryption is enabled, SD-WAN uses the Advanced Encryption Standard (AES) to secure traffic across the Virtual Path. Both AES 128 bit and 256 bit ciphers (key sizes) are supported by the SD-WAN Appliances, and are configurable options.

Authentication between sites functions with the Virtual WAN Configuration. The network configuration has a secret key for each site. For each Virtual Path, the network configuration generates a key by combining the secret keys from the sites at each end of the Virtual Path. The initial key exchange that occurs after a Virtual Path is first set up, is dependent upon the ability to encrypt and decrypt packets with that combined key.

Configure Virtual WAN Service