ABC of Cisco SDWAN Part 3 : Security|Direct Internet Access

Cisco SD-WAN offers an integrated on-premand cloud security solution spanning four security

categories: network segmentation, enterprise firewall, secure web gateway, and DNS-layer security. Each security category

itself spans a different combinationof security features. These security features are:

IPSec Encryption: An underlying WAN fabric forsecuring on-prem WAN access and direct internet access

IPS: A built-in intrusion prevention system within on-prem enterprise firewall based on Snort and powered by Talos

App Controls: A built-in security practice within every part of the security stack, able to control 1400+ apps using on-prem enterprise firewall

Malware Protection: An extended security feature across both on-prem and cloud security using Cisco AMP and Threat Grid to prevent/detect malicious files with sandboxing

SSL/TLS Decryption: A security feature with unlimited scale for either cloud security or on-premsecurity with sufficient resources.

URL Filtering: An extended security feature across both on-prem and cloud platforms with 80+ web categories covering millions of domains and billions of web pages

++++++++++

What is SD-WAN ? 

Software-Defined WAN (SD-WAN) is an overlay architecture that overcomes the biggest drawbacks of traditional 

WAN. SD-WAN builds a secure, unified connectivity over any transport (MPLS, Broadband, LTE, VSAT etc.)

and provides simplified operations with centralized management, policy control and application visibility 

across the enterprise.

Significance of Viptela 

The Most Deployed SD-WAN in Global 1000 Companies .

With SD-WAN built on the Viptela Fabric, enterprises can provide secure connectivity everywhere, deploy

new services and applications faster, and drastically simplify operational complexity in the WAN.

In this course you will find explanation of Viptela Architecture & Deployment  approaches.

About this Course : 

These video series focuses on deploying Cisco SD-WAN Direct Internet Access within remote sites to allow certain

Internet-bound traffic or public cloud traffic from the branch to be routed directly to the Internet instead of tunneling

the Internet traffic to a central site or datacenter for Internet access.

This Course is intended to provide technical guidance to design, deploy, and operate the Cisco SD-WAN Direct Internet

Access solution using a mix of both Cisco IOS XE SD-WAN and vEdge devices.