topic Re: SD-WAN in Network Security

SD-WAN

rajesh4 — Wed, 14 Aug 2024 11:44:32 GMT

Dear Team,

1) Head Office --- Firepower 1010 firewall

2) Branch office --- Firepower 1010 firewall

Requirement below:-

Only few URL's traffic burst out in branch office ISP and remaining all application or internet access and internal server all traffic burst out from Head Office

This is possible, then please share the KB-Article.

Re: SD-WAN

MHM Cisco World — Wed, 14 Aug 2024 12:15:16 GMT

Sorry can ypu more elaborate

MHM

Re: SD-WAN

Rob Ingram — Wed, 14 Aug 2024 12:24:16 GMT

@rajesh4 FTD does have some SD-WAN capabilities that could meet your requirements, but only if managed by FMC.

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/usecase/b_wan-deployment/m_direct-internet-access-usecase.html

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/sd-wan-capabilities.html

You can also refer to the Cisco Live presentation - Optimizing Security and Agility: Leveraging SD-WAN with Cisco Secure Firewall - BRKSEC-2086

Re: SD-WAN

rajesh4 — Wed, 14 Aug 2024 12:25:55 GMT

Hi,

We have one Head Office and five Branch Office's and Now we are planning only specific url's traffic burst out via Branch office ISP and Internal server and Internet traffic burst out via Head Office.

Re: SD-WAN

MHM Cisco World — Wed, 14 Aug 2024 18:02:10 GMT

FW in SWDAN have different positions and role'

SDWAN can config under FW so FW need to open port for dtls/tls/ipsec and also if you use ssl policy then you must not decrypt ssl.

If SDWAN run DAI and it behind FW then additional to port open you need to allow traffic from internal to internet.

If FW use in HQ abd you use net service then this need design to allow traffic ingress and egress of FW (FW inspect traffic between branchs)

MHM

Re: SD-WAN

rajesh4 — Fri, 16 Aug 2024 09:29:00 GMT

@Rob Ingram

Noted, thanks for update and i am checking internally and once we have setup done and update you on same.