Using Umbrella Connectors for spoke-to-spoke traffic

[fdecrito]

Hi experts, for spoke-to-spoke traffic that is being routed by the Umbrella SDWAN connectors, will this traffic be decrypted in Umbrella or is it passed straight through to the relevant Spoke?

[GreenMan · Accepted solution]

Assuming the spokes are connected to a common virtual MX in the same Umbrella DC you can consider it that Umbrella itself is not decrypting the traffic.   The vMX will effectively doing this, I suspect, when flipping between the two tunnels