How are security functions typically integrated in MEF SD-WAN?

• A. Security is optional and not integrated.
• B. Security features such as IPsec encryption, firewall/NAT, secure web gateway, and segmentation can be implemented on edge devices or via integrated security VNFs controlled by the orchestrator.
• C. Security features are only available as cloud services.
• D. Security is handled only by the core router and not by SD-WAN components.

Answer: (B)

Security in MEF SD-WAN is delivered in a distributed, flexible way by implementing security functions at the network edge or as integrated security VNFs that the orchestrator manages. This means you can run IPsec encryption to secure tunnels between sites or to the cloud, apply firewall and NAT at the edge to shield and translate traffic, deploy a secure web gateway for web filtering, and use segmentation to isolate tenants or branches. The orchestrator configures these security functions, provisioning them on edge devices or through VNFs and enforcing consistent policies across the whole WAN. This edge-and-VNF approach aligns with SD-WAN goals of centralized control with distributed enforcement, offering scalable, unified security across the network.

Options that imply security is optional, cloud-only, or handled only by a core router don’t fit this model, since MEF SD-WAN emphasizes integrated, edge- or VNF-based security managed by the orchestrator.