ISC2 CISSP (Certified Information Systems Security Professional)Communication and Network SecurityMedium
A network architect is designing a software-defined wide area network (SD-WAN) for an organization with multiple branch offices. The primary goal is to optimize traffic routing based on application performance requirements and link quality, while also ensuring secure overlay tunnels. Which SD-WAN component is responsible for centrally managing policies, configurations, and orchestrating connectivity across the entire SD-WAN fabric?
- ASD-WAN Controller
- BSD-WAN Analytics Engine
- CSD-WAN Edge Device (CPE)
- DSD-WAN Orchestrator
Show answer & explanationAnswer & explanation
Correct answer: D. SD-WAN Orchestrator
The SD-WAN Orchestrator is the central management plane component. It provides a single pane of glass for defining policies, configuring devices, and orchestrating the entire SD-WAN overlay across all branch offices and data centers.
Why the other options are wrong
- A. The SD-WAN Controller acts as the control plane, managing routing and forwarding decisions, but the orchestrator handles the higher-level policy and configuration.
- B. The SD-WAN Analytics Engine collects and analyzes performance data but is not the primary component for policy management and orchestration.
- C. The SD-WAN Edge Device (CPE) is deployed at branch offices and data centers to enforce policies and establish tunnels, but it is not for central management.
SD-WAN Orchestrator
The centralized management component of an SD-WAN solution, responsible for policy definition, configuration, and overall orchestration of the network.
- Provides a single pane of glass for SD-WAN administration.
- Pushes policies and configurations to controllers and edge devices.
- Separates management plane from control and data planes.
Memory trick: An 'Orchestrator' 'Conducts' the 'SD-WAN' 'Band'.