What is a primary function of the firewall on SD-WAN edge devices?

• A. The edge firewall provides QoS scheduling only.
• B. The edge firewall gathers telemetry only.
• C. The edge firewall enforces security policies, performs traffic inspection, NAT, and can provide segmentation and optional IPS/IDS features.
• D. The edge firewall is used only for NAT translation.

Answer: (C)

The firewall on SD-WAN edge devices is there to actively manage and secure traffic across the fabric. It enforces security policies, inspects traffic to ensure rules are followed and to detect or block threats, performs NAT to allow private addresses to traverse public networks, and can enable segmentation to keep traffic isolated between sites or tenants. Optional IPS/IDS features add deeper threat detection and prevention. QoS scheduling and telemetry are separate capabilities and do not define the firewall’s primary role, and NAT alone doesn’t provide the security controls that a firewall delivers.