cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
11613
Views
156
Helpful
88
Comments
Sutheendiran Vijendiran
Cisco Employee
Cisco Employee
SutheendiranVijendiran_0-1666353602616.jpeg

 

Cisco SD-WAN Version 20.6.3 offers major usability benefits across all use cases.  There are enhancement to SD-WAN Infrastructures, SDCI and SD-WAN Security, with innovation and Improvement around Cloud Networking, Operational Efficiency and Application Experiences.

We have put together the table below to give you a quick look at some of the key features in this release.

Feel free to ask any questions about upgrading your Cisco SD-WAN software using the "comment" section below the post.

If you want to stay up to date with our Software Compliance and key feature articles make sure to subscribe to the label 'Software Upgrades'!

 Infra & Services

Feature Description Pre

AAR and Data-policy Enhancements

•Application-Level Gateway support for NAT and Firewall

•Multi-Region Fabric Enhancements

•In this release, you have the option to configure preferred Color Group list defining primary, secondary and tertiary preference.

• 20.9/17.9  now supports NAT ALG for specific protocol such as Domain Name System (DNS), FTP, and Session Initiation Protocol (SIP) which inter-operates with Zone-Based Firewall if it is enabled.

•You have significant operational simplification by migrating  SD-WAN networks to the MRF architecture, which delivers increased network resiliency since MRF reacts to dynamic network state and can adjust the routing state accordingly.

•Previously, there was no way to prioritize the set of colors as per requirement in order to avoid hashing on all available links. 

•Prior to 20.9/17.9, SD-WAN didn’t support NAT Application-Level Gateway, which  prevents the application traffic from getting imposed to firewall actions necessary to offer granular security control over them.

•Previous deployments concept of a region is achieved indirectly using complex control policies and BGP in core network.

 

 Operational and Security

Feature Description Pre
•Network Wide Path Insights (NWPI) •NWPI phase 3 in 20.9/17.9 is further enhanced with the insight summary, which includes Path insight overview, Application Performance Insight, Event Insight and QoS Insight. Flow level Path insights provide details on path selected and what features/policies have determined that routing decision. •The earlier version didn't have the Insight summary feature, which limits you to have a complete granular visibility on your network and applications. 

•Identity-based Firewall

•Enhanced SIG Tunnel Monitoring, ZScaler

•20.9/17.9 introduces the capability to match user identity and apply zone-based firewall policy based on identities. vManage and vSmart controllers in this case integrate with ISE/PXGRID, which is further integrated with Active Directory. 

•Now we have enhanced Monitoring and Visibility for SIG tunnels, which includes State of the SIG tunnel and Security Events.

 

•Previously,  SD-WAN-embedded security stack is not aware of the users’ identities and therefore cannot apply security policies based on identities. 

•Previously, there is no support for SIG Tunnel monitoring on vManage Security dashboard regarding the status of tunnel (“Up/Down/Degraded”) and details about the Events which has caused the tunnel failure.

 

Cloud & vManage 

Feature Description Pre

•CoR Multicloud: SDCI connectivity to Cloud Gateway

•Microsoft Informed Routing

•With 20.9/17.9 version, you can extend the SD-WAN fabric from the Interconnect gateway in SDCI into the Public Cloud Service Providers which also provides an enhanced layer of security, Multi-path and Multi-segment support.

•Now you have enhanced Path Analytics dashboard integrated into M365 App 360 as part of vAnalytics, which includes telemetry metrics like CoR SaaS, Network probes, and Microsoft Telemetry probes. 

•Previously there was limited End-to-end encryption from branch to SDCI to Cloud.​

•Previously, there was lack of visibility on vAnalytics of selected path and associated telemetry metrics in Microsoft Informed Routing.

•UX2.0 Customizable Dashboard •You can now customize the Monitoring Overview Dashboard to allow users to select and sort Dashlets of interest and this customization is retrieved every time the user logs back in to vManage, to build the dashboard.  •Previously, the Monitoring Overview Dashboard is not customizable and sort them as required for viewing.

 

 

Reference: 

20.6.3 x Release notes

What's New with 20 6 3 x

Cisco’s SD-WAN Controller Compatibility Matrix

SD-WAN release 20.6.3.1 release download

Comments
dkelcher
Level 1
Level 1

Is the ThousandEyes agent able to run BrowserBot?

niroulabhaa
Level 1
Level 1

I am interested to learn more about this:

ThousandEyes integration w/ ISR4K, Cat8300, Cat8200 ​

where can I find the details?

patrick.duro
Level 1
Level 1

Any improvements in terms of security?

luigidavino
Level 1
Level 1

Great job!

Pierce Vasale
Level 1
Level 1

I'm excited for so many of these -- ThousandEyes, increased SLA count, per VPN QoS, Azure/Equinix additions. Awesome!

Thank you for the awesome overview!

Gallifrean
Level 7
Level 7

fantastic addition of ThousandEyes to the vManage for app monitoring

David Cardenas
Level 1
Level 1

Gracias por la información. Sin duda estas nuevas características ayudarán a crear grandes entornos digitales para los usuarios.

I am interested to learn more about this:

ThousandEyes integration w/ ISR4K, and webex

where can I find the details?

bezeddin
Level 1
Level 1

Latest version is 20.6.4, kindly share the features as well

AnwarNugraha
Level 1
Level 1

We do not use Cisco SD-WAN yet

KalebKaleb7906
Level 1
Level 1

I am interested for

ThousandEyes integration w/ ISR4K, Cat8300

SammyGomez19563
Level 1
Level 1

We do not use Cisco SD-WAN now but someday maybe 

what is the new feature of the latest version of IOS 20.6.4?

ViralPatel7456
Level 1
Level 1

Thanks for sharing information. Greats Job

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: