A Cisco SD-WAN daemon running on each vSmart controller and router creates and maintains the secure DTLS or TLS connections between the devices. This daemon is called vdaemon . https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/security/vedge/security- book/security-overview.html