Integrating sd-wan constructs with sase security policies

A system comprising:

• one or more processors:
• and
• one or more computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• defining, by a security cloud provider, a security policy for an entity, the entity represented by a Virtual Private Network (VPN) security policy label, wherein the security policy is absent source Classless Inter-Domain Routing (CIDR) Internet Protocol (IP) addresses and destination CIDR IP addresses:
• notifying, by the security cloud provider, an SD-WAN controller of the security policy:
• mapping, by the SD-WAN controller, the VPN security policy label to an IP address pool and a VPN ID;
• adding, by the SD-WAN controller, automatically and based at least in part on the mapping, source CIDR IP addresses and destination CIDR IP addresses to the security policy to generate an enhanced security policy:
• transmitting, by the SD-WAN controller, the enhanced security policy to the security cloud provider:
• deploying, by the SD-WAN controller, the enhanced security policy to an SD-WAN branch router;
• and
• generating, by the SD-WAN controller, a VPN segment between the SD-WAN branch router and the security cloud provider to establish a common secure internet gateway tunnel for the IP address pool.

One or more non-transitory computer-readable media storing instructions that, when executed, cause one or more processors to perform operations comprising:

• defining, by a security cloud provider, a security policy for an entity, the entity represented by a Virtual Private Network (VPN) security policy label, wherein the security policy is absent source Classless Inter-Domain Routing (CIDR) Internet Protocol (IP) addresses and destination CIDR IP addresses:
• notifying, by the security cloud provider, an SD-WAN controller of the security policy:
• mapping, by the SD-WAN controller, the VPN security policy label to an IP address pool and a VPN ID:
• adding, by the SD-WAN controller, automatically and based at least in part on the mapping, source CIDR IP addresses and destination CIDR IP addresses to the security policy to generate an enhanced security policy:
• transmitting, by the SD-WAN controller, the enhanced security policy to the security cloud provider:
• deploying, by the SD-WAN controller, the enhanced security policy to an SD-WAN branch router:
• and
• generating, by the SD-WAN controller, a VPN segment between the SD-WAN branch router and the security cloud provider to establish a common secure internet gateway tunnel for the IP address pool.