Use Cases for SD-WAN Capabilities in Cisco Secure Firewall
Is this helpful?
Thank you for your feedback. Your response has been recorded.
AI responses are currently only available to logged in users.Log in
Important. Results generated by AI. Before using results, verify accuracy and completeness.
Only ask questions about this document. To ask questions about this product as a whole, go to Technical Documentation .
Suggestions
Sorry, we couldn't generate a response for this query.
Launch error Something went wrong. Please try again.
Table of contents
Updated: February 5, 2026
Lists the best practices for using DVTI with Cisco Secure Firewall in a scalable SD‑WAN deployment.
Ensure that Secure Firewall Threat Defense is runing on version 6.7 and later.
VTI is supported in routed mode only.
Configure the borrow IP for the dynamic interface from a loopback interface.
Ensure to apply access rules on a VTI interface to control traffic through VTI.
Configure ECMP zones for SVTIs to load balance VTI traffic.
(Requires a Cisco Service Contract)
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.