Question

An engineer configured a centralized data policy on a Cisco Catalyst SD-WAN vSmart controller to redirect all HTTP traffic from branch VPN 10 toward a regional cloud gateway. After activation, traffic monitoring shows the HTTP flows are still following the default OMP route to the data center, not the intended cloud gateway. The policy compiled and activated without errors, and the site-list and VPN-list correctly reference the branch WAN Edge and VPN 10. What is the MOST likely reason the data policy is not taking effect?

Accepted Answer

The data policy was applied in the 'from-tunnel' direction, so it only evaluates traffic arriving from the WAN transport rather than traffic from the branch LAN

Answer

The data policy direction was applied as 'all' instead of 'from-service', so it only matches traffic sourced from a service device

Answer

The vSmart controller does not enforce data policies; they must be configured locally on each WAN Edge as a localized data policy

Answer

Centralized data policies cannot match Layer 7 applications such as HTTP without an app-aware routing policy attached first