SASE Architecture: Cisco Viptela SD-WAN With Palo Alto Prisma (SSE) Lab

The Cisco SD-WAN Integration Lab Series is a capability of the Advanced Technology Center (ATC) designed to give customers an environment to gain hands-on experience to evaluate new and emerging cloud and infrastructure solutions. The lab provides the same Palo Alto Prisma security capabilities seen in production and virtual SD-WAN devices to provide an experience as close to a real deployment as possible.

Secure Access Service Edge (SASE) is becoming extremely popular due to its ability to secure, optimize and simplify a cloud-first architecture. This lab is meant to show that Prisma can easily be integrated with Cisco SD-WAN to secure direct internet access (DIA) from the branch as well as provide secure access to cloud resources.

In this environment you will gain a working knowledge of the following SASE components:

• Secure Automated WAN
• Secure Direct Internet Access
• Secure Web Gateway
• Secure Cloud Firewall

This lab aims to demonstrate how fast and effective it can be to implement Palo Alto Prisma Security Service Edge (SSE) as part of your security stack. This lab should demonstrate how, in combination with Cisco SD-WAN, Prisma SSE can secure your branch internet access and secure your cloud assets.  

For Cisco SD-WAN, you will learn:

• Setting up tunnels to the Prisma cloud with the SIG feature template.
• Routing internet-bound traffic to SIG tunnels.
• Using a data policy to direct specific traffic to SIG tunnels.
• Monitoring tunnels using the CLI and vManage GUI.

For Prisma, you will learn:

• Initial setup of remote networks.
• Creating a tunnel configuration and choosing POPs.
• Creating Secure Web Gateway rules.
• Creating Cloud Firewall rules.

Palo Alto

• Prisma Management Interface delivered via Panorama
• 2x Virtual Palo Alto Firewalls (10.0.8)

Cisco SD-WAN

• 1x Cisco vManage (20.6.2.2)
• 1x Cisco vBond (20.6.2)
• 1x Cisco vSmart (20.6.2)
• 2x Cisco 8000v (17.6.2)
• 1x Cisco CSR1000v (16.9.6)
• 1x Cisco vEdge Cloud (20.6.2)