Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member



Please advice is encryption required on WAN if VDI (Virtual Desktop Infrastructure) is running in remote offices?



Super Bronze



The     Author of this posting offers the information contained within this     posting without consideration and with the reader's understanding  that    there's no implied or expressed suitability or fitness for any   purpose.   Information provided is for informational purposes only and   should not   be construed as rendering professional advice of any kind.   Usage of  this  posting's information is solely at reader's own risk.

Liability Disclaimer

In     no event shall Author be liable for any damages whatsoever   (including,   without limitation, damages for loss of use, data or   profit) arising  out  of the use or inability to use the posting's   information even if  Author  has been advised of the possibility of  such  damage.


Required?  Depends on how "secret" you need to keep the traffic content, and your trust of your WAN vendor.  Often for dedicated WAN clouds, e.g. frame-relay/ATM/MPLS, traffic isn't encrypted but it often is if it runs across the Internet.

BTW, some VDI solutions can encrypt their own traffic, otherwise if you believe encryption is needed, you can encrypt it before it enters the WAN and decrypt it as it leaves the WAN.


Re: Encryption


My recomendation is to always encrypt WAN links unless there is a very special reason for it.

why ?

Several reasons.

First security wise, the traffic that flows is not the only problem, Injection of traffic is another problem and that someone can listen in on what you do, what your usernames/passwords are and/or your links, what software you are using, do Man in the middle attacks and so on and so on. if you do not encrypt you are essentially giving them access to your lan.

The second thing is more about the stability of your system,

Say that the provider has a bad day and one of the tech guys did something wrong and your traffic is mixed with someone elses traffic then the firewalls will sort that out since the only thing that comes through is the encrypåted vpn traffic. otherwise it might come a lot of unneccessary traffic to your network.

So I would state Yes unless you have a very very special reason to not do so.

Good luck


CreatePlease to create content