Cisco SD-WAN Guest Internet Security: DNS, Firewall, URL Filtering and IPS

Secure guest internet breakout at a Cisco SD-WAN branch without backhauling guest web traffic. This lab demo combines Cisco Secure Access DNS security with an on-router firewall, URL filtering and intrusion prevention, then verifies policy results using counters and logs. Chapters 00:00 Guest internet requirements and four security layers 02:49 Guest isolation and local breakout design 03:23 Verify guest internet access 04:13 NAT and branch policy group 04:50 DNS security design 05:28 DNS interception and Activity Search verification 06:42 Application-aware zone-based firewall design 07:13 Block YouTube and verify firewall counters 08:47 URL filtering design 09:25 URL filtering test, inspection profiles and logs 11:11 Intrusion prevention design 11:51 IPS signature test and drop verification 12:42 Guest port scan test 13:17 Security monitoring and event review Learn more (Cisco documentation) DNS security on Catalyst SD-WAN (Umbrella integration): https://www.cisco.com/c/en/us/td/docs... Enterprise firewall with application awareness: https://www.cisco.com/c/en/us/td/docs... Security policy using policy groups (IPS and URL filtering): https://www.cisco.com/c/en/us/td/docs... Compare with corporate internet traffic secured in the cloud:    • Cisco SD-WAN + Secure Access: Internet Sec...   Recorded in the lab in October 2026.