An enterprise company has an audit requirement to encrypt traffic between selected development teams. Those teams are located in multiple sites across the country. They must migrate all locations to a

GETVPN operates natively within an MPLS network without creating overlay tunnels, preserving existing IP addressing, routing, and QoS policies so the VoIP solution is completely unaffected. Selective encryption uses Group Policy ACLs to encrypt only development team traffic while allowing VoIP to flow in the clear, enabling that traffic to be mirrored to data center servers for call recording. This satisfies the encryption audit requirement, the MPLS migration requirement, and the VoIP recording requirement simultaneously.

DMVPN creates spoke-to-spoke overlay tunnels that alter packet headers and can disrupt MPLS-based QoS markings for VoIP, and it is not natively designed to operate within an MPLS L3 VPN service.

LISP provides location and identity separation for routing scalability but does not offer native encryption capabilities to satisfy the development traffic encryption audit requirement.

GRE tunnels alone provide no encryption, and combining them with IPsec adds significant complexity without native MPLS L3 VPN integration or selective encryption support.