24 Sep

What’s in an SD-WAN?

What’s in an SD-WAN?

By R. Scott Raynovich, Principal Analyst Futuriom

Software-defined wide-area networking (SD-WAN) technology combines many desired enterprise networking features – including security, bandwidth optimization, and application acceleration – and delivers them with a cloud-managed networking architecture.

One of the primary benefits of SD-WAN technology is that it implements new network services and features in software, without requiring hardware upgrades. Enterprise and service-provider buyers are interested in the multiple benefits of SD-WAN, including improving and managing broadband Internet, reducing network costs for both connectivity and operating expense (opex), and improved management and automation. Service providers are aware of this trend and are scrambling to put together managed services offerings, as their MPLS offerings will clearly be replaced by SD-WAN services in the long term.

The Network’s Cloud Evolution

One of the big trends with information technology is the move to the cloud. Enterprises now expect to buy IT services, on-demand, from the cloud. The network is moving to the cloud as well. Enterprise network managers seek the agility and flexibility of managing their network from the cloud, while at the same time getting locked into proprietary equipment on expensive private lines. Gains in Internet availability and bandwidth optimization technology, such as WAN optimization, de-duplication, load-balancing, and link balancing, have become more sophisticated, enabling enterprises to leverage Internet broadband for business applications. This is driving the rapid expansion of the SD-WAN market, which provides all of this functionality in a cloud-delivered model

The Network’s Cloud Evolution

Futuriom’s ongoing interviews with enterprise end users as well as service providers delivering SD-WAN reveals the following goals in connecting the WAN in these new cloud environments:

  • Optimize and accelerate WAN traffic to the cloud
  • Improve overall network security
  • Reduce costs related to WAN bandwidth
  • Leverage multiple access technologies such as fiber, DSL, and wireless
  • Increased flexibility in CPE so that management can be outsourced or updated with software-only upgrades
  • Improve capability to purchase, provision, and manage network services via the cloud, using software

Customers can solve all of these problems with a single SD-WAN offering that addresses these challenges with specific features. Take a look at the features that can now be typically included in an SD-WAN package:

Let’s highlight why all of these SD-WAN features are important.

Router replacement and Open CPE: Managing proprietary hardware and customer premises equipment (CPE), including branch-office routers, can be expensive and time consuming. SD-WAN can be used to simplify the deployment and management of CPE – especially if you are a retail company that has to manage hundreds or thousands of branches. SD-WAN functionality can be delivered on open, commercial off-the-shelf (COTS) hardware and managed from the cloud, helping to streamline and automate management.

Enhanced Security and Cloud VPN: One of the allures of SD-WAN technology is that it can be used to deploy a virtual private network (VPN) as a software overlay using end-to-end encryption. This helps meet security requirements for businesses that may want to connect branch offices or retail outlets but also have high security requirements. But SD-WAN platforms can also be used to deliver value-added security services such as stronger encryption, malware detection, and intrusion detection services (IDS). Security is becoming an important checklist item for SD-WAN.

WAN Optimization: SD-WAN can be used to improve the performance of applications on the network. WAN optimization, once a discrete function delivered with a hardware or software appliances, is being integrated into SD-WAN functionality. Many SD-WAN technologies include WAN optimization functionality and we expect this to be a checklist item in SD-WAN deployments.

Application Performance Enhancement: Cloud WAN solutions can be built that optimize access to cloud applications by monitoring traffic and routing higher-priority business applications ahead of leisure services such as Netflix and YouTube. Additionally, many WAN services can peer directly with cloud services to offer a “fast lane” to the business applications. These techniques can be used to “offload” enterprise WAN backhaul, routing cloud traffic directly to the source using a combination of broadband technologies. This will also have the effect of challenging the traditional ADC model of providing these services as part of a discrete hardware device. In addition, some SD-WAN vendors are working with cloud vendors to set up specialized cloud gateways and POPs in cloud datacenters to provide more direct access to cloud applications.

Cloud Management: As we have outlined, SD-WAN functionality can be deployed using COTS hardware and then managed from the cloud. This means that new network features, functionality, and updates can be managed with software over the network, rather than forklift upgrades, yielding a network-as-a-service model.

The SD-WAN market is now rapidly moving to customer deployments and accelerating because it delivers a more flexible, agile, and feature-rich platform to manage the enterprise WAN. Futuriom believes that in 2019 the market will continue to accelerate and drive into the billions of dollars, as it replaces some legacy technologies for VPN, ADC, edge routers, and firewalls. The market is consolidating around software-delivered and adaptive WAN services that can connect either through thin customer clients or industry-standard CPE.

FatPipe Networks have been selling software defined networking solutions for over 20 years and have specialized in providing customers with best of breed security, (one of the only SD-WAN providers with FIPS 140-2 government certification) reliability, flexibility (can support up to 15 interfaces in one device) and is easy to manage, providing a single pane interface view of the entire network.

FatPipe Networks www.fatpipeinc.com

26 Jul

12 Attributes of a Best of Breed SD-WAN

12 Attributes of a Best of Breed SD-WAN Solution & Why You Need One for Secure Traffic Management

SD-WAN is really about traffic management.   Sure, zero touch deployment is not necessarily a traffic management solution, but the reason software is driving WAN deployments and configurations is simply that it is capable of managing your data links and traffic across these links.

Network Security

Extensive research has established that security is the number one issue faced by WAN administrators.  Hosting your data in the cloud, hybrid cloud or on premise has created the need for highly secure traffic management between users and your data.   There are a lot of SD-WAN solutions out there that claim to have the capabilities to manage this traffic securely, but not all SD-WAN is the same.

If you think security, firewalls are part of the conversation.   Firewalls are designed to detect and prevent intrusion, but are not WAN traffic management devices.   Traditional Routers are designed to route traffic over multiple links, but have been complicated to install and definitely complicated to manage.

SD-WAN has certainly disrupted the traditional networking industry and today, software managing your data traffic is becoming much more commonplace.   For SD-WAN to be successful in today’s complicated networks, it must be simple to install and, above all, simple to use and administrate.   It must be able to run on popular hypervisors, be compatible with cloud infrastructures and understand multiple link types, including legacy systems, such as BGP networks, as well as the less expensive and ubiquitous broadband networks.

So how does the WAN administrator find the best SD-WAN solution when there is so much choice and marketing hype?   Understanding the features and functions of pure SD-WAN is important, especially when it comes to security of your data.

Best of breed SD-WAN solutions will come with the following features:

  1. Easy to install
  2. Support ALL link types (existing legacy systems (BGP) as well as Internet, satellite, 3G,4G,5G, LTE, cable)
  3. Support multiple links in one device (up to 12 interfaces is not uncommon)
  4. Support bandwidth ranges from 10Mb up to 40 Gig.
  5. Provide secure management of BOTH inbound and outbound traffic.
  6. Allow customization and assignment of application traffic on certain links with instant failover
  7. Ability to determine healthy links instantly, which allows for instant failover, of BOTH inbound and outbound traffic. This usually means the methodology used to test the links is very important.  Ask what algorithms the software uses to test the links.
  8. Cloud support with emphasis on secure traffic transmission and instant failover capabilities to multiple link types.
  9. Zero touch branch deployment
  10. Options to host or outsource to MSP
  11. Opex or Capex offerings
  12. Most important! Easy to use management tool!   It must provide a simple to use traffic management tool that allows for quick, easy and intuitive changes to any link or application traffic not matter where that application or link is located on the WAN.   You should NOT have to retrain your IT staff or pay for certified staff to manage your SD-WAN implementation.

Of course, this is not a comprehensive list, but if you are looking for an SD-WAN solution to sustain your systems for some time to come, you need to consider each of the features above and map them to your long-term plan.  Remember, security is the number one issue, so do not look at any SD-WAN solution that cannot provide selective encrypted data flow across the network, and preferably choose solutions that incorporate stateful firewall IDS/IPS features.    SD-WAN will definitely benefit the efficiency of your network, but do not settle for limited capabilities, knowing that your user count will increase and your network will expand.

FatPipe Networks has been developing and selling SD-WAN solutions for over 17 years, and are widely known as the “inventors” of SD-WAN.   The software suite is extremely comprehensive, but what is most talked about is the easy to use interface, EnterpriseView™ – which is a single pane view of the network allowing administrators easy access and with simple to understand menus, administrators can make changes to traffic management, no matter the destination, starting point or route taken.

FatPipe Networks encryption is FIPS 140-2 certified, making it the only SD-WAN vendor with an encryption module approved by government agencies.  To add to the security capabilities, FatPipe recently announced firewall support next generation firewall IPS/IDS features allowing users the luxury of having a highly secure traffic management solution with integrated firewalling.

FatPipe’s comprehensive SD-WAN suite is unique in the industry especially its patented SmartDNS™ which provides customers with INBOUND fail-over capabilities, not seen in other SD-WAN offerings.   FatPipe also provides industry leading policy-based routing, giving administrators the ability to set thresholds based on common network issues, such as latency, jitter, and packet loss that will trigger if certain user defined conditions are met, ensuring data is not lost or compromised due to congestion or other link issues.

FatPipe is certainly a top contender if you are seriously considering SD-WAN or are upgrading your current network solution.  Call FatPipe today at 1-801-683-5656 x 1224.

www.fatpipeinc.com

[et_social_follow icon_style=”slide” icon_shape=”rounded” icons_location=”top” col_number=”auto” counts=”true” counts_num=”0″ total=”true” outer_color=”dark” network_names=”true”]