Which protocol is used to secure control-plane connections in the Cisco SD-WAN fabric?

Which protocol is used to secure control-plane connections in the Cisco SD-WAN fabric?

• A. TLS
• B. DTLS
• C. IPsec
• D. SSH

Answer: (B)

Securing control-plane connections in the Cisco SD-WAN fabric means protecting the signaling traffic that ties together vEdges, vSmart, and vBond. This signaling rides over UDP, so the protocol used is DTLS, which brings TLS-like security to datagram traffic. DTLS provides encryption, integrity, and peer authentication for control messages, keeping policy, orchestration, and routing data safe as it moves across the WAN. In contrast, data-plane traffic is protected with IPsec tunnels, SSH is used for device management, and TLS over TCP is not the protocol used for this control-plane signaling in the SD-WAN fabric.

Securing control-plane connections in the Cisco SD-WAN fabric means protecting the signaling traffic that ties together vEdges, vSmart, and vBond. This signaling rides over UDP, so the protocol used is DTLS, which brings TLS-like security to datagram traffic. DTLS provides encryption, integrity, and peer authentication for control messages, keeping policy, orchestration, and routing data safe as it moves across the WAN. In contrast, data-plane traffic is protected with IPsec tunnels, SSH is used for device management, and TLS over TCP is not the protocol used for this control-plane signaling in the SD-WAN fabric.