SD-WAN Forensics¶
Platform: Cisco SD-WAN (vManage, vEdge/cEdge, vSmart, vBond)
Focus: Control plane and data plane forensic investigation
Investigation Areas¶
- vManage audit logs and alarms
- IPsec tunnel security associations
- OMP route forensics
- Traffic flow analysis