- The gateway vEdge uses HTTP to obtain SaaS application performance information - The client vEdge will use BFD over the IPSec tunnel to the gateway site to obtain client>gateway path performance information https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Cloud- onRamp-for-SaaS-Deployment-Guide-2018JUL.pdf