Experience with Aruba SD-Branch & integration with Palo Alto?

Hi,

does anyone have any experience with Aruba SD-Branch/SD-WAN?

We're setting up a multi-site (15?) network for our 1000-person tech company. Currently, we're doing Palo Alto firewalling with Aruba WLAN & LAN (including ClearPass and Panorama) at HQ.

The sites are within a 1000km of each other, 1-10Gbit connectivity, all on the same provider's network. The only service provided by this ISP is internet access, so encryption/tunneling/VPN has to be done by us.

Looking at cost, going PA for all the sites for full L7 firewalling (with local internet egress) is probably too expensive for us. So, we're thinking of doing internet egress only at HQ, so traffic from all sites would mostly be IPSec to or through HQ (with a couple of exceptions for servers available at a couple of the smaller sites)

​

Has anyone tried Arubas SD-branch gear in such a setup (or indeed at all?). I find lots of marketing material, but no real-world implementations.