The features are useful, but it is more about how insightful these features are and how easily you are able to understand the flow and mitigate a threat. Although those features exist in Cisco Catalyst SD-WAN, the lack of visibility makes it very difficult to find out what precisely is being monitored through the advanced threat prevention features of Cisco Catalyst SD-WAN Viptela solution. The features are undoubtedly useful, but at the end of the day, it boils down to how easily you can see the insights provided by the solution. I feel Cisco slightly lacks in that aspect. It could be because the hardware itself is a router with added security functionality, while in Fortinet or Palo Alto, those systems are intrinsically firewalls with security capabilities built-in, and routing added on top. Hence, the visibility part in those solutions is better compared to Cisco Catalyst SD-WAN, since it is not a logging device.
