We have a security policy that mandates that any traffic to access management functions on any router / switch must pass through a firewall and be isolated in a management VRF. In deploying SD-Access, my understanding is that LAN automation does not...