"Viptela SD-WAN: intelligent, secure, and globally connected — your network, reimagined.

Cisco Viptela SD-WAN architecture is built on four core components that work together to deliver centralized control, secure connectivity, and intelligent traffic management across the enterprise.

1. vManage – Centralized Management & Monitoring

vManage is the single-pane-of-glass management system for the entire SD-WAN fabric.

Provides centralized configuration, monitoring, and troubleshooting

Uses GUI and REST APIs for automation and orchestration

Enables zero-touch provisioning (ZTP) of devices

Monitors application performance, SLA, and link health

Manages policies, templates, and software upgrades

👉 Think of vManage as the brain and dashboard of the SD-WAN network.

2. vSmart – Control Plane & Policy Engine

vSmart Controllers are responsible for the SD-WAN control plane.

Distributes routing information between WAN Edge devices

Enforces centralized policies (routing, security, QoS, traffic steering)

Maintains secure control connections with WAN Edges

Separates control plane from data plane for scalability

Supports segmentation using VPNs (VRFs)

👉 vSmart acts as the decision-maker for how traffic flows across the network.

3. vBond – Orchestration & Authentication

vBond Orchestrator is the first point of contact when a device joins the SD-WAN fabric.

Authenticates devices using certificates

Assists in NAT traversal

Directs WAN Edge devices to the correct vManage and vSmart controllers

Enables secure onboarding of new devices

👉 vBond is the gatekeeper, ensuring only trusted devices join the network.

4. WAN Edge Devices (vEdge / cEdge)

WAN Edge devices are deployed at branch offices, data centers, and cloud locations.

Handle data plane traffic forwarding

Establish IPsec tunnels between sites

Perform application-aware routing

Support transport independence (MPLS, Internet, LTE, 5G)

Enforce security policies such as firewall and segmentation

👉 WAN Edges are the workhorses, moving actual user traffic across the WAN.