Well, at this point, we want to hit pause
and just make sure that we've got some of these concepts down.
We started out by talking about service insertion
and how we can essentially insert any service we want
into the SD-WAN environment.
And so we want to make sure that we do take the time
to take a look at the configuration
from a CLI or graphical user interface perspective.
Really, both.
It's important for us to understand how exactly they work
because, again, when we look at the blueprint,
we're expected to know how to configure that.
And so we need to make sure we understand that we're,
number one, there's two parts to it, right?
Number one, we're configuring the edge to advertise a service,
and number two, we're configuring the controller
via a control policy, a centralized control policy.
We're going to perform a custom control
if we're looking at the graphical user interface,
or otherwise we're just creating that custom policy
and then doing a match on the route policy type.
Once we match on route, then we set the service
So it's both sides of that configuration
we need to be comfortable with.
From there, it's understanding that, yeah,
I can insert a service,
but I could also have the SD-WAN environment
do some security services for me.
The configuration for that is outside of the scope
of the exam and this course,
and so we really just want to make sure we understand
what it is we're talking about there
as far as what SD-WAN environment can do.
And so we can do some really cool things.
For example, we can deploy an IPS,
IDS type of scenario there
where we can analyze our traffic signatures
and understand that we've got those three different
balance points there.
We can also deploy an application-aware firewall,
which is basically, for the most part,
going to allow us to do inter-VPN security.
That's especially important if we enable VPN to VPN security
because chances are we don't want full communication
between those VPNs.
Otherwise, why are they different VPNs?
So if we're going to enable some communications,
then the firewall is great to make sure
that it's only those communications.
And then also keep in mind,
we can do intra-VPN within the same VPN,
but that is going to require us to see
that the traffic hits the edge
if we want that policy enforced.
So just some quick takeaways there
as far as what we should be looking at
as we leave this skill,
what knowledge we should be taking with us
as we continue to explore different security offerings
within the SD-WAN framework.
I hope this has been informative for you,
and I'd like to thank you for viewing.