What is the use case of having a physical FTD or PAN FW at the branch office in SD-WAN solution? Doesn't Cisco SDWAN solution have fully integrated FW in in cEDGE? If yes, then why people deploy FW at the branch office? Why then people send internet traffic to Cisco Umbrella or zScalar if you have a on-prem FW? If you don't put a on-prem FW than who then protects the branch to branch traffic as it doesn't go through Cisco Umbrella or zScalar?
