Question

A network engineer is enabling Cisco Catalyst SD-WAN Cloud OnRamp for SaaS across an enterprise fleet. Branch sites in VPN 10 host users who access Microsoft 365 and should be steered through Direct Internet Access (DIA) exits, while a regional hub site is configured as a gateway to provide SaaS optimization for VPN 10 branches that lack a qualifying local internet exit. When configuring the Cloud OnRamp for SaaS application list in vManage, which action must the engineer take so that the intended sites and traffic are correctly evaluated for the best-path selection?

Accepted Answer

Assign the same service VPN (VPN 10) to both the DIA branch sites and the gateway site, and select the appropriate cloud applications and interfaces on each site so both DIA and gateway paths are probed and compared

Answer

Attach the Cloud OnRamp for SaaS policy only to the gateway hub and rely on OMP to redistribute the SaaS path to all branch sites automatically

Answer

Configure the application list in a centralized control policy and apply it inbound on the transport VPN 0 of every branch to trigger probing

Answer

Enable Cloud OnRamp for SaaS on the transport VPN 0 interfaces only, since SaaS probes must originate from the WAN-facing tunnel interfaces