Minimum supported releases: Cisco IOS XE Catalyst SD-WAN Release 17.9.1a, Cisco vManage Release 20.9.1

This feature adds the Azure for US Government cloud to Cisco Catalyst SD-WAN Cloud OnRamp for Multicloud, allowing you to move and store your highly sensitive workloads in the Azure for US Government cloud.

The following are examples of highly sensitive workloads that you can store in the Azure for US Government cloud:

• Controller Unclassified Information (CUI)

• Personally Identifiable Information (PII)

• Sensitive patient medical records

• Financial data

• Law enforcement data

• Export data

The same features that are available for the Azure Virtual WAN integration are also available with the Azure for US Government integration. Azure Virtual WAN is a networking service that provides optimized and automated branch-to-branch connectivity through Azure.

For more information on the Azure for US Government cloud, see the Azure for US Government documentation.

Configure Azure for US Government as part of Cisco Catalyst SD-WAN Cloud OnRamp for Multicloud in Cisco SD-WAN Manager.

For more information on the supported devices for Azure for US Government, see Supported Azure Instances.

For more information on the prerequisites for Azure for US Government integration, see Prerequisites for Azure Virtual WAN Integration.

• No support for creating a Network Virtual Appliance (NVA) from the Azure portal.

• No telemetry support for Azure for US Government.

Cisco Catalyst SD-WAN Cloud OnRamp for Multicloud with Azure for US Government cloud allows you to safely move and store your highly sensitive data in the Azure for US Government cloud. The Azure for US Government cloud is an isolated cloud dedicated to the workloads of the U.S. government and its customers.

The following are examples of sensitive data that you can store in the Azure for US Government cloud:

• Controller Unclassified Information (CUI)

• Personally Identifiable Information (PII)

• Sensitive patient medical records

• Financial data

• Law enforcement data

• Export data

The workflow for configuring Azure for US Government integration is the same as the workflow as for the Azure Virtual WAN integration.

1. Associate your Azure for US Government account with Cisco SD-WAN Manager.

   For more information on associating your Azure for US Government account, see Integrate Your Azure Cloud Account.

2. Add and manage your cloud global settings.

   For more information on configuring cloud global settings for Azure for US Government, see Integrate Your Azure Cloud Account.

3. Create and manage your cloud gateways.

   For more information on creating and managing your cloud gateways, see Create and Manage Cloud Gateways.

4. Discover your host virtual network (VNets) and create tags.

   For more information on discovering host VNets and creating tags, see Discover Host VNets and Create Tags.

5. Map your VNet tags and branch network VPNs.

   For more information on mapping your VNets and branch network VPNs, see Map VNet Tags and Branch Network VPNs.

For more information on monitoring the Azure for US Government integration, see Monitor Azure Virtual WAN Integration.