The goal of this lab is to show how policy-based redirection to a L4-7 device can be used with a single bridge domain needed for Application Centric (ACI) fabrics. The use of a single bridge domain and single PBR redirection is known as "one -armed mode."

The goal of this lab is to show how policy-based redirection to a L4-7 device can be used with a single bridge domain needed for Cisco ACI fabrics. The use of a single bridge domain and single PBR redirection is known as "one-armed mode."

Secure Access Service Edge (SASE), coined by Gartner in 2019, is a solution that blends networking and security into cloud scale architecture that optimizes end user performance and improves security for an organization. Cisco Umbrella is a SASE solution that combines edge networking, domain name system (DNS) enforcement, cloud-delivered firewall (CDFW), and secure web gateway (SWG) capabilities to connect, protect, and secure remote offices and users. The SASE Lab Series will look to explore the capabilities of the solution to provide you with a "rubber meets road" understanding of these technologies and how SASE can be applied in your company.

Over the past few years many customers deploying ACI have opted for using the “Network-Centric” approach for implementing their ACI installations. Customers who no want to migrate to a Application-Centric approach often find their workloads are spread across multiple subnets, and grouping them by application is difficult. This lab provides a technique on how to make this migration simpler