Describes how Cisco Multicloud Defense integrates with Azure Virtual WAN to protect egress traffic between service VNets, spoke VNets, and a virtual hub.
A Virtual WAN is a network connectivity service that
-
orchestrates network connections between on-premises networks and Azure,
-
simplifies connectivity for branch offices and remote users, and
-
integrates with Azure's Virtual Network gateways.
Multicloud Defense can integrate with Azure VWAN by orchestrating virtual network connections and route propagation between Service VNets and a virtual hub (vHub).
Multicloud Defense in VWAN is not supported as a Network Virtual Appliance (NVA), but route orchestration can address this limitation. For protection of Azure applications, create virtual network connections directly from a Service VNet to a vHub. Note that Azure VWAN is supported only for Multicloud Defense gateways. Note that east-west traffic is unsupported in Azure VWAN due to routing challenges between secured hubs.
Azure VWAN is supported for Multicloud Defense gateways specifically, and only in egress mode.