Cloud Security Service is a cloud-hosted security that protects an Enterprise branch and/or data center. The security services include firewalls, URL filtering, and other such services.
Currently, the connectivity from a branch Edge to a cloud service or a Non SD-WAN Destination is established through the SD-WAN Gateway. In this model, the SD-WAN Gateway aggregates traffic from multiple branch Edges and securely forwards the traffic to the Non SD-WAN Destination.
You can also configure the branch Edge to establish a tunnel direct to the cloud service pop. This option has the following advantages:
- Simplified configuration.
- Saves link bandwidth costs by offloading non-enterprise traffic to the internet.
- The branch sites are protected from malicious traffic by redirecting the Internet traffic to a cloud security service.