sd-wan arch

[mikhailov.ivan]

Hi all. 

Can anybody tell me for some question about sd-wan (we try full upgrade to sd-wan geographic distrib(many country))

1) what case/scenario in sd-wan fabric can use for remote-users VPN (like traditional ssl-vpn with anyconnect) 

2) any routers (ASR\ISR) can NGFW function (ids\ips\av) and its difirent only performance?  Or some models have limitation?

3)why Cisco use 3-layer model (vSmart,Vmanager,Vedge) while another vendors use only 2 layers(data and manegment)?

Thanks for your help.

[mikhailov.ivan]

2) I see what ASR series have a problems with SD-WAN sec
"IPS/IDS and URL filtering is not supported on ASR platforms for this release."
but anybody know, is only temp software problem and its will be fix in feature release , or its permanent?
what i can make my new arch scalable for performance, if maximum device what i can use is ISR 4451?