Another security technique that Cisco SD-WAN leverages is the DNS Web Layer Security provided by Cisco Umbrella cloud.

Cisco SD-WAN Advanced Malware Protection (AMP) is a security service that allows edge routers to inspect file downloads and detect, contain, and remove malware in real-time.

The primary requirement of the Secure Guest Access use case is to allow guests to securely access the Internet without being able to do illegal online activities leading to potential legal liabilities for the organization.

The Cisco SD-WAN URL Filtering (URLF) feature allows edge devices to inspect HTTP/HTTPS traffic and enforce URL-based control. URLF leverages the Security Virtual Image required for security capabilities such as IDS, IPS, and Advanced Malware Protection (AMP) on IOS-XE routers.

Before we begin with the lesson, let's establish some context around the terms HTTPS, SSL, and TLS.

Achieving compliance with the security requirements of regulatory standards such as PCI DSS, HIPAA and GDPR is a time-consuming burden for each organization.

Network Security is a critical element of an organization's security strategy. As a result of the public cloud and remote workers, the attacking surface of the WAN has expanded drastically in recent years.