From the course: Implementing Cisco Software-Defined Wan (SD-WAN) for your Enterprise and Cloud

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Application-aware enterprise firewall

Application-aware enterprise firewall

- [Instructor] This lesson is going to start the conversation regarding our on-premise security stack, which we support in all of the SD-WAN offers. Now we're going to talk specifically about the security functions and the wrapper around that, and then dive into the zone based firewall. So when we deploy the Cisco SD-WAN integrated security, there's two methods we can do this. We can do this in a security policy, and in this policy structure, the administrators are going to select the firewall features, the IPS and IDS features, and then URL filtering and DNS security on a VPN by VPN basis. The other methodology is we can go down to a unified security policy. In this model, basically the structure's going to comprise of the nesting S security policies into an inspection profile, and then the inspection profile is going to be assigned to a specific network traffic. So that's going to tie more explicitly into you know, you classify this traffic as FTP, therefore you apply this…

Contents