Which feature is commonly provided by an SD-WAN edge firewall?

• A. The edge firewall provides QoS scheduling only.
• B. The edge firewall gathers telemetry only.
• C. The edge firewall enforces security policies, performs traffic inspection, NAT, and can provide segmentation and optional IPS/IDS features.
• D. The edge firewall is used only for NAT translation.

Answer: (C)

In SD-WAN, the edge firewall is a security-focused function at the network edge that enforces policies across branches and cloud connections. It doesn’t just move traffic or monitor it; it actively blocks or allows traffic based on defined rules, inspects packets for threats, and handles address translation as needed. It can also create network segmentation (micro-segmentation) to limit lateral movement, and often offers optional IPS/IDS features to detect and prevent intrusions.

That’s why this option is best: it captures the full set of capabilities typically provided by an SD-WAN edge firewall—enforcing security policies, performing traffic inspection, doing NAT, enabling segmentation, and offering optional intrusion prevention/detection. The other choices focus on one narrow function (like QoS, telemetry, or NAT alone) and don’t reflect the comprehensive security role of the edge firewall.