Cisco Catalyst SD-WAN and Microsoft SSE Integration Solution Brief

Available Languages

Download Options

  • PDF
    (538.9 KB)
    View with Adobe Reader on a variety of devices
Updated:September 17, 2024

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Available Languages

Download Options

  • PDF
    (538.9 KB)
    View with Adobe Reader on a variety of devices
Updated:September 17, 2024

Table of Contents

 

 

Challenge

Enterprise WAN requirements have evolved with hybrid work becoming the norm, requiring users to connect from anywhere and use applications across hybrid multicloud and Software-as-a- Service (SaaS) environments. Both on-premises and cloud workload security are crucial, especially for secure access to Microsoft applications and other critical office applications and the internet. Organizations need a solution that protects against advanced threats, optimizes application performance, and simplifies network management.

Overview

Cisco Catalyst SD-WAN and Microsoft’s Security Service Edge (SSE) solution integration combines Cisco’s robust SD-WAN capabilities with Microsoft’s SSE solution to provide secure access to the internet and Microsoft SaaS applications. This integration enhances the security of branch internet traffic by efficiently redirecting it through Microsoft Entra Internet Access, part of Microsoft’s SSE solution, for secure inspection, helping ensure that traffic from branch edges to the public internet or SaaS applications is thoroughly protected.

Solution

Cisco Catalyst SD-WAN and Microsoft’s SSE solution integration delivers a powerful, secure, and efficient solution for managing branch internet traffic. This integration works by providing seamless connectivity from SD-WAN branch edges to Microsoft’s SSE solution.

Here’s how it works:

      Traffic redirection: Relevant traffic from SD-WAN branch edges is efficiently redirected to Microsoft’s SSE solution.

      Secure tunnels: Secure tunnels are created for advanced inspection, helping ensure that traffic to the internet and Microsoft SaaS applications is securely managed.

      Inspection and protection: Microsoft’s SSE solution inspects the traffic to provide robust protection against threats.

      Policy application: Policies can be applied to each segment of the network, enabling tailored security measures.

Catalyst SD-WAN and Microsoft’s SSE solution integration

Figure 1.            

Catalyst SD-WAN and Microsoft’s SSE solution integration

Key benefits

      Comprehensive security for branch internet traffic: Securely redirect branch internet traffic to Microsoft Entra for advanced inspection and protection against internet-based threats.

      Enhanced security and protection: Help ensure secure access to public internet and Microsoft SaaS applications.

      Simplified deployment: Deploy a seamless, comprehensive, end-to-end solution for SD-WAN and security.

This collaboration between Cisco® networking and Microsoft Security not only strengthens the security of branch internet traffic but also simplifies management, reduces operational complexity, and enhances the user experience. The result is a comprehensive, secure connectivity solution that offers peace of mind and operational efficiency for enterprise customers.

Try it now

This integration has been thoroughly tested and validated for deployment with Cisco IOS® XE SD-WAN routers running software versions 17.12 or 20.12, alongside the Microsoft Entra cloud dashboard.

Protect your network with the power of Cisco Catalyst SD-WAN and Microsoft’s SSE solution: Read the user guide.

About Microsoft Entra

Microsoft Entra Internet Access and Microsoft Entra Private Access are integral components of Microsoft’s Security Service Edge (SSE) solution. Microsoft Entra Internet Access ensures secure access to internet and SaaS apps while safeguarding users, devices, and data against internet-based threats. This document covers the Internet Access use case. https://learn.microsoft.com/en-us/entra/architecture/sse-deployment-guide-intro

About Cisco Catalyst SD-WAN

Catalyst SD-WAN connects any user to any application with integrated capabilities for multicloud, security, predictive operations, and enhanced network visibility—all on a Secure Access Service Edge (SASE)-enabled architecture. Catalyst SD-WAN enables you to transform your IT infrastructure by delivering network connectivity that’s cloud-agnostic, efficient, and simpler to manage, with lower operational costs and increased control and visibility across the entire digital service delivery chain. https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html

 

 

 

Learn more