# Review the SDN Express configuration before deploying a clustered Network Controller

> Which deployment inputs should be checked for Network Controller as a cluster service?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-147-review-the-sdn-express-configuration-before-deploying-a-clustered-network/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:14:44+00:00
- Modified: 2026-09-08T18:23:27+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 1 minutes

## What you need to know

Which deployment inputs should be checked for Network Controller as a cluster service?

## Potentially affected

Administrators deploying Network Controller through Failover Clustering on supported releases.

## DSE recommendation

Have platform and SDN owners review the PSD1 values together, replacing every example identity and network value.

## Article

## Source facts

Microsoft supports deploying Network Controller directly as a Failover Clustering service beginning with Windows Server 2025 and Azure Local 2311.2. The documented PowerShell deployment uses SDN Express to automate the SDN infrastructure installation. SDN Express reads a PSD1 configuration file containing the variables for the Network Controller deployment. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/networking/sdn/deploy/deploy-network-controller-failover-clustering).

## Applicability

Check the cluster release, intended Network Controller design, management network, identity configuration, and optional load-balancer or gateway components. Review the complete source prerequisites before adapting its sample configuration.

## DSE recommendation

Have platform and SDN owners review the PSD1 values together, replacing every example identity and network value. Record which optional components are included and how credentials will be supplied through the approved protected process. Keep an exact reviewed configuration copy with the deployment record.

## Verification

Validate the resulting controller service and its intended management access, then inspect the SDN objects created from the configuration. Perform an approved cluster-service movement and a representative network operation. Preserve deviations from the reviewed input file and resolve them before placing tenant workloads under the new controller.

## Official references

[Microsoft Learn: Deploy Network Controller with Failover Clustering on Windows Server and Azure Local](https://learn.microsoft.com/en-us/windows-server/networking/sdn/deploy/deploy-network-controller-failover-clustering). Source reviewed September 8, 2026.

## Primary reference

- Name: Deploy Network Controller with Failover Clustering on Windows Server and Azure Local
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/networking/sdn/deploy/deploy-network-controller-failover-clustering
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Review the SDN Express configuration before deploying a clustered Network Controller,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-147-review-the-sdn-express-configuration-before-deploying-a-clustered-network/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.