As organizations increasingly adopt Software-Defined Wide Area Networking (SD-WAN) to enhance network performance and reduce costs, robust security measures are essential. This thesis identifies the inherent security attributes and potential vulnerabilities of Cisco SD-WAN networks. Utilizing a simulated environment, the research demonstrates Cisco SD-WAN's security features and highlights its vulnerabilities through hypothetical scenarios.

The study examines traditional WAN architecture and its limitations, then analyzes the deployment of Cisco SD-WAN, focusing on its inherent security features within the control and data planes. It explores the threat landscape of SD-WAN and proposes effective mitigation strategies, including customized security rules, advanced threat detection, and the advantage of using Cisco SD-WAN’s robust encryption methods.

The analysis of command-line interface outputs and Wireshark packet capture shows that Cisco SD-WAN's security features adhere to the principles of confidentiality, integrity, and availability. This research provides valuable insights into SD-WAN security, helping organizations make informed decisions and leverage the advantages of Cisco SD-WAN while maintaining robust network security standards.