The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Required? Depends on how "secret" you need to keep the traffic content, and your trust of your WAN vendor. Often for dedicated WAN clouds, e.g. frame-relay/ATM/MPLS, traffic isn't encrypted but it often is if it runs across the Internet.
BTW, some VDI solutions can encrypt their own traffic, otherwise if you believe encryption is needed, you can encrypt it before it enters the WAN and decrypt it as it leaves the WAN.
My recomendation is to always encrypt WAN links unless there is a very special reason for it.
First security wise, the traffic that flows is not the only problem, Injection of traffic is another problem and that someone can listen in on what you do, what your usernames/passwords are and/or your links, what software you are using, do Man in the middle attacks and so on and so on. if you do not encrypt you are essentially giving them access to your lan.
The second thing is more about the stability of your system,
Say that the provider has a bad day and one of the tech guys did something wrong and your traffic is mixed with someone elses traffic then the firewalls will sort that out since the only thing that comes through is the encrypåted vpn traffic. otherwise it might come a lot of unneccessary traffic to your network.
So I would state Yes unless you have a very very special reason to not do so.
We are pleased to announce availability of Beta software for 16.6.3.
16.6.3 will be the second rebuild on the 16.6 release train targeted
towards Catalyst 9500/9400/9300/3850/3650 switching platforms. We are
looking for early feedback from customers befor...
Introduction Featured Speakers Luis Espejel is the Telecommunications
Manager of IENova, an Oil & Gas company. Currently he works with Cisco
IOS® and Cisco IOS XE platforms, and NX to some extent. He has also
worked as a Senior Engineer with the Routing P...
In this session you can learn more about Layer 3 multicast and the best
practices to identify possible threats and take security measures. It
provides an overview of basic multicast, the best security practices for
use of this technology, and recommendati...