Describes the functionality of service insertion sites and traffic steering policies.
Security service insertion enhances security for SD-Access fabric networks by steering the traffic through firewalls based on traffic steering policies.
A service insertion site is the fabric site in a network where virtual networks and firewalls are configured to steer the traffic. To use security service insertion, enable a service insertion site in your network.
The traffic steering policies contain
-
security groups (source and destination security groups),
-
firewall, and
-
traffic steering contracts.