Configure firewall policies for both the overlay and underlay traffic. For more information about firewall policies, see Policies.
In this example, the Overlay-out policy governs the overlay traffic and the SD-WAN-Out policy governs the underlay traffic. The firewall policies are configured accordingly.
Once created, verify the firewall policies by navigating to Policy & Objects > Firewall Policy:
The Security Profiles column indicates that the Overlay-out firewall policy for the overlay traffic is set up to not scan any traffic, while the SD-WAN-Out firewall policy is set to scan all web traffic to identify and govern social media traffic as Application Control profile is active.