300-415 · Question #280
An organization wants to discover, monitor, and track the applications running on the WAN Edge device on the LAN. Which configuration achieves the goal?
The correct answer is A. Configure a policy named 'app-visibility' under Localized Policy. To discover, monitor, and track applications running on a WAN Edge device on the LAN, an 'app-visibility' policy must be configured under Localized Policy.
Question
Exhibit
Options
- AConfigure a policy named 'app-visibility' under Localized Policy.
- BConfigure Data Policy with options for Application Firewall, QoS, Traffic Engineering, or Custom.
- CConfigure a policy with 'sla-class Gols', 'latency', 'loss', 'jitter', and 'app-route-policy' parameters.
- DConfigure a Cflowd Policy named 'AAR' with specific timeout and sampling intervals.
How the community answered
(36 responses)- A75% (27)
- B3% (1)
- C6% (2)
- D17% (6)
Why each option
To discover, monitor, and track applications running on a WAN Edge device on the LAN, an 'app-visibility' policy must be configured under Localized Policy.
The `app-visibility` command within a Localized Policy on a Cisco SD-WAN WAN Edge router is specifically designed to enable Deep Packet Inspection (DPI) and NetFlow (cflowd) for application discovery, monitoring, and tracking. This configuration allows the WAN Edge to identify applications flowing through its interfaces and report this information to vManage for analysis.
Configuring Data Policy with options like Application Firewall, QoS, Traffic Engineering, or Custom primarily focuses on controlling traffic flow and security based on applications, not specifically on enabling the discovery and monitoring of applications themselves.
A policy with `sla-class Gols`, `latency`, `loss`, `jitter`, and `app-route-policy` parameters is used for Application-Aware Routing (AAR) to direct traffic based on performance, not for discovering and monitoring applications.
While Cflowd is used for flow monitoring, configuring a Cflowd Policy named 'AAR' is for flow export and analysis, but the `app-visibility` localized policy is the explicit command that enables the necessary DPI and cflowd on the WAN Edge for application discovery and monitoring.
Concept tested: Cisco SD-WAN application visibility and monitoring
Source: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-cr-book/policy-reference.html
Topics
Community Discussion
No community discussion yet for this question.
