Which element provides security policy enforcement at the edge in Cisco SD-WAN?

• A. vSmart
• B. vBond
• C. vManage
• D. WAN Edge

Answer: (D)

Security policy enforcement at the edge happens on the WAN Edge devices. These edge devices run the security services—firewall rules, application-aware policies, and VPN termination—that apply to traffic as it enters, exits, or traverses the network. The central controllers coordinate and distribute policy, but it is the WAN Edge that actually enforces it on traffic. The other components have different roles: vSmart handles control-plane functions and policy distribution, vBond handles device authentication/orchestration, and vManage provides configuration and telemetry. So the edge device is where the enforcement occurs.