In Figure 5 the SD-WAN Service has three Subscriber sites (A, B, and C). The SWVC has three Applications Flows, apple, banana, and vegetable (via the SWVC List of Application Flows Service Attribute in section 8.7). Apple and banana are in Application Flow Group fruit. Application Flow vegetable is not in any Application Flow Group.

The SWVC also has two Policies, fast and faster (via the SWVC List of Policies Service Attribute in section 8.5). All SWVCs have a reserved Policy named block.

Figure 5 – Examples of Application Flows and Policies

At site A, using the SWVC End Point Policy Map Service Attribute (see section 9.3), the Policy fast is assigned to Application Flow Group fruit. This means that all members of that Group (i.e., apple and banana) are forwarded based on Policy fast. Since no Policy is mapped to Application Flow vegetable at site A, Ingress IP Packets in this Application Flow are not forwarded (they are blocked/blacklisted).

At site B, Policy fast is assigned to Application Flow Group fruit. But, here, Policy faster is assigned to Application Flow apple. So, at site B, apple is forward based on Policy faster and banana is forwarded based on Policy fast, as is Application Flow vegetable.

At site C, Policy fast is assigned to Application Flow Group fruit. But here, the reserved Policy block is assigned to banana. So, at site C, apple is forwarded based on Policy fast, but banana is not forwarded. Application Flow vegetable is forwarded based on Policy faster.