Which feature of Cisco SD-WAN Secure Direct Cloud Access divides user traffic into different zones and VPNs or VRFs?

Application-awareness routing focuses on directing specific application traffic based on performance and policy, not on dividing user traffic into security zones or VRFs.

Perimeter control refers to security measures at the network edge, such as firewalls, rather than the internal logical division of traffic within the SD-WAN fabric into zones or VRFs.

Centralized data policy is used to define and apply rules to traffic, but it is the underlying secure segmentation that establishes the distinct zones and VPNs/VRFs over which these policies operate.

Secure segmentation is the feature that creates logical divisions within the network, separating different user traffic types (e.g., guest, employee) into isolated zones, VPNs, or VRFs, allowing for tailored security and routing policies for each segment as part of Secure Direct Cloud Access.