In this hands-on lab, we examine another common use case referred to as Direct Cloud Access (DCA). As more and more organizations leverage cloud services such as IaaS/SaaS, backhauling Internet-bound employee traffic to a data center across the overlay fabric causes increased bandwidth and latency, resulting in a degradation of the application quality of experience (AppQoE). The solution to this problem is to enable local Internet exit to employees at remote branches. However, there is a big difference in the requirements when direct internet access is provided to guests and when it is provided to business users. 

• From a security standpoint, giving employees unrestricted access to the entire world-wide-web exposes the organization to some serious cybersecurity vulnerabilities.
• From an availability standpoint, if Internet access is used for business, it must be available at any given moment, irrespective of any local ISP failures.