Cisco Multicloud Defense User Guide

PDF

Cisco Multicloud Defense User Guide

Overview of Virtual WAN

Want to summarize with AI?

Log in

Learn how Cisco Multicloud Defense integrates with Azure Virtual WAN to protect egress traffic between service VNets, spoke VNets, and a virtual hub.


If you use Azure cloud services, you can create a Virtual WAN (VWAN) to orchestrate and simplify network connectivity between your on-premises networks, branch offices, and remote users. You can integrate Multicloud Defense with Azure VWAN by orchestrating virtual network connections and route propagation between Service VNets and a virtual hub (vHub).

Typically, within a vHub, Multicloud Defense is not supported as a Network Virtual Appliance (NVA). Instead, you can use VWAN route orchestration to address this. To use Multicloud Defense to protect your application on Azure, you can orchestrate the creation of a virtual network connection from a Service VNet to a vHub inside a VWAN. You can propagate routes between the vHub and Multicloud Defense. Multicloud Defense supports VWAN for egress mode only. Note that Azure VWAN is supported only for Multicloud Defense gateways. Azure does not support east-west traffic for VWAN due to challenges in routing traffic between secured hubs.