When resolving east/west security policy issues in Cisco SD-WAN, what is essential to verify?

Question

Options

• AExternal firewall rules
• BInternal segmentation policies
• CGateway redundancy settings
• DIntrusion prevention system settings

• A
  6% (1)
• B
  75% (12)
• C
  6% (1)
• D
  13% (2)

Explanation

Internal segmentation policies (B) govern east/west traffic - lateral communication between devices, users, or segments within the network - which is precisely what SD-WAN's segmentation features (VPNs/VRFs, security groups, and zone-based policies) control. When east/west issues arise, you must verify these internal policies because they define what traffic is permitted to traverse between segments.

Why the distractors are wrong:

• A (External firewall rules): External firewalls control north/south traffic (in/out of the network perimeter), not lateral internal flows.
• C (Gateway redundancy settings): This relates to high availability and failover, not traffic permission policies between segments.
• D (IPS settings): Intrusion prevention is a detection/mitigation layer, not the root policy controlling whether east/west flows are allowed in the first place.

Memory tip: Think of a compass - East/west = Internal (both "in" words), north/south = External (exits the boundary). East/west issues → always start with Internal Segmentation policies.

No community discussion yet for this question.