I’m currently getting myself up to speed with Cisco SD-Access. Particularly policy enforcement.
Am I right in saying that as SD-Access utilises VNIs and SGTs from which to enforce policies. Then only these can be used within the fabric to enforce policies and not source/destination IP addresses?
I’m guessing that you can (use source/destination IP addresses) but then that would negate a number of its benefits?