What is cEdge?

Understanding cEdge

cEdge is a Cisco SD-WAN edge router that runs IOS XE SD-WAN software and is centrally managed within the Cisco SD-WAN (formerly Viptela) architecture. The "c" denotes the Cisco IOS XE code base, distinguishing cEdge devices from the original Viptela vEdge routers. A cEdge platform connects a branch, campus, or data center into the SD-WAN overlay fabric.

In the Cisco SD-WAN model, the control plane and data plane are separated. cEdge routers form the data plane: they register with the controllers - vBond for orchestration, vSmart for control-plane policy via the Overlay Management Protocol (OMP), and vManage for management - and then build encrypted IPsec tunnels to other edge routers across any transport (MPLS, broadband, LTE). Centralized policies pushed from vManage govern how each cEdge selects paths, applies application-aware routing, and enforces segmentation, all from a single dashboard.

cEdge matters for security because the edge router is the enforcement point where the WAN meets each site. It encrypts overlay traffic between sites, segments traffic into VPNs/VRFs to isolate user groups or compliance zones, and can host integrated security services such as a zone-based firewall, IPS, URL filtering, and secure direct internet access. Centralized, policy-driven control reduces configuration drift and misconfiguration - a common source of breaches - and lets security policy be applied consistently across hundreds of sites.

For example, a retailer deploys a Catalyst 8000-series cEdge running IOS XE SD-WAN at each store. The device authenticates to vBond, receives policy from vSmart and vManage, and builds encrypted tunnels to the data center over both an MPLS and a broadband link. Application-aware routing steers point-of-sale traffic over the most reliable path, while a built-in firewall and segmentation isolate the cardholder-data VPN from guest Wi-Fi - all enforced at the cEdge and managed centrally.