Virtual Router Instance: Traffic Management

In SD-WAN network, the SRX Series device can be configured in a hub and spoke locations. You can permit or deny VRF based traffic when it enters into SRX Series device from the same overlay tunnels by applying firewall policies. You can configure the SRX Series device to permit or deny traffic that is sent to VRF instance. Configuring the SRX Series device at the hub location helps you to control all traffic at one location, and by applying firewall policies, you can give access to particular network services.