Скачать или смотреть Cisco SD-WAN - Umbrella - SIG Auto-Tunnel - Part 1 (Spanish)

Cisco Catalyst SD-WAN (formerly known as Viptela) automates both the deployment of IPsec (Internet Protocol Security) IKEv2 (Internet Key Exchange, version 2) tunnels with Umbrella and the IPsec configuration in cEdge and vEdge devices.

Umbrella integrates with network devices that forward traffic from IPsec tunnels to the Umbrella data centers—the tunnel headend IP addresses—and connect to the Umbrella Cloud-Delivered Firewall (CDFW) and Secure Web Gateway (SWG). Umbrella can manage tunnels established by supported devices, and observe and protect IPSec (Internet Protocol Security) IKEv2 (Internet Key Exchange, version 2) traffic sent to Umbrella.

To monitor and secure IPsec tunnel traffic in Umbrella, add a network tunnel identity providing an ID for the tunnel, a pre-shared key (PSK), and tunnel IP addresses. Then, set up and deploy the tunnel in the network device. Once traffic flows from the tunnel to Umbrella, you can view the traffic in your organization's logs and the Umbrella Activity Search report. Add the network tunnel identity to an Umbrella Web and Firewall (CDFW) policy rule to further apply controls to the monitored tunnel traffic.

#cisco
#sdwan
#umbrella-sig