Question

A retail enterprise runs Cisco Catalyst SD-WAN Cloud OnRamp for SaaS to optimize Salesforce and Microsoft 365 traffic. Branch sites use two transport interfaces: a primary MPLS color (mpls) and a secondary broadband color (biz-internet). The network team wants SaaS application probing to select the best-performing path per application, but they discover that when Cloud OnRamp for SaaS is enabled, SaaS traffic can only be optimized over gateways or DIA-capable interfaces that meet a specific requirement. Which requirement must the branch's biz-internet interface satisfy so it can serve as a Direct Internet Access exit for the SaaS application probes?

Accepted Answer

The biz-internet interface must have NAT enabled so local SaaS traffic can be translated and sent directly to the internet.

Answer

The biz-internet interface must be configured with a service-side VPN and static default route pointing to the MPLS transport.

Answer

The biz-internet interface must run BGP with the SaaS provider's public autonomous system to advertise the branch prefix.

Answer

The biz-internet interface must be assigned to VPN 512 as an out-of-band management transport for probe telemetry.