Which Cisco SD-WAN component provides a secure data plane with remote vEdge routers?

vManage is the management plane NMS used for configuration, monitoring, and orchestration - it does not forward data traffic.

vSmart is the control plane controller that distributes routing and policy information via OMP but does not participate in data forwarding.

vBond is the orchestration plane component responsible for initial device authentication and NAT traversal, not data forwarding.

vEdge (WAN Edge) routers sit at branch and data center sites and establish encrypted IPsec tunnels directly between peers, forming the secure data plane. They receive forwarding and policy information from the vSmart controller but handle all actual data forwarding themselves. No other component in the SD-WAN architecture participates in the data plane.