Question

A retail chain runs Cisco Catalyst SD-WAN across 200 branch sites. Each branch has a single low-bandwidth broadband circuit terminated on a cEdge. The network team wants to optimize Webex (a SaaS application) performance for these branches. The branches have no local Cloud OnRamp gateway, and adding regional gateways for all branches is not budgeted. The team wants Webex traffic to break out to the internet as close to the user as possible while still measuring application loss/latency and choosing the best available path. Which Cloud OnRamp for SaaS deployment approach best fits these branch sites?

Accepted Answer

Enable Cloud OnRamp for SaaS with Direct Internet Access (DIA) on the branch cEdge's broadband interface, letting the router probe the SaaS application and break out locally

Answer

Deploy a Cloud OnRamp for IaaS host VPC gateway in each cloud region and hairpin all branch Webex traffic through it

Answer

Configure a Secure Internet Gateway (SIG) tunnel to a third-party cloud proxy and force all Webex traffic through the SIG for inspection before breakout

Answer

Backhaul Webex traffic over the SD-WAN overlay to a regional data center hub and break out to the internet from the hub's centralized firewall