This section provides an overview of Cloud Security Services.
Currently, the connectivity from a branch Edge to a cloud service or a Non-VeloCloud site is established through the VeloCloud Gateway. In this model, the VeloCloud Gateway aggregates traffic from multiple branch Edges and securely forwards the traffic to the Non-VeloCloud site.
You can also configure the branch Edge to establish a tunnel direct to the cloud service pop. This option has the following advantages:
- You can save link bandwidth costs by offloading non-enterprise traffic to the internet.
- By redirecting the Internet traffic to a cloud security service, you can ensure that the branch sites are protected from malicious traffic.
- Simplified configuration.
This document describes how to define and configure a cloud security service instance and establish a secure tunnel directly from the Edge to the cloud security service. The configuration is divided into three parts:
