26 Sep

Secure SD-WAN: Essential Element of Modern Network Security

SD-WAN is one of the most widely adopted technologies in the last decade due to its efficiency in optimizing application delivery and cost-efficiency. Network security has become an indispensable element of modern networks. Organizations must thoroughly evaluate their cybersecurity needs. They must assess the efficiency of SD-WAN’s security features to protect sensitive data, proactively identify vulnerabilities, and maintain the resilience of their SD-WAN infrastructure.

SD-WAN for Better Return on Investments and Enhanced Security

SD-WAN enables organizations to transform their network with better Return on Investments by optimizing network performance and enhancing overall productivity. While SD-WAN has many power-packed features for better ROI, one of multiple organizations’ extensively used SD-WAN features during this network transformation journey is migrating from MPLS technology to Internet technology for Edge connectivity. This migration requires the technological capability of seamless aggregation of any connectivity and robust security functionalities in SD-WAN technology to prevent the Edge from cyber-attacks.

Securing an SD-WAN deployment from end to end is vital to safeguard sensitive data and ensure the reliability of network operations. To achieve this, organizations can utilize several security measures, including encrypted traffic, Next-Generation Firewalls (NGFW), Zero Trust Network Access (ZTNA), and blockchain-type data transmission:

  • SD-WAN encrypts traffic to make sure that sensitive data is not compromised.
  • SD-WAN utilizes NGFWs that offer advanced threat security, intrusion detection and prevention, web filtering, content filtering, etc.
  • Zero Trust Network Access (ZTNA) enhances security when used alongside SD-WAN by providing secure, monitored, and enforced access to remote resources, safeguarding against unauthorized access and threats. Only authorized users and devices have the permission to access the network.
  • SD-WAN provides unmatched security with innovative concepts like Blockchain type of data transmission thereby offering foolproof mechanisms of data packet transmission.

FatPipe Networks, the inventor and numerous patents holder of SD-WAN, not only provides technically superior load balancing, link reliability, link aggregation techniques but also impregnable native security and SASE-based security for any organization’s SD-WAN requirements. FatPipe has invented a unique way of securely transmitting data over lines with multi-path security also known as MPSEC TM, which provides an additional level of fortification for business-critical traffic throughout a client’s enterprise architecture. FatPipe products, besides providing increased security also obfuscates internet traffic, making it almost impossible to decrypt, through a mechanism similar to Blockchain technology.

29 Oct

SD-WAN Growing Use Cases for the Cloud

SD-WAN: Growing Use Cases for the Cloud

It’s remarkable how fast software-defined wide-area networking (SD-WAN) has gained momentum. Many people ask why. The answer is: SD-WAN is expanding the functionality of automating and management access to cloud applications.

The primary trigger for the growth and interest in SD-WAN is the shift, over the past decade, of a massive amount of applications to the cloud (both private and public). Networks in the client-server era were built to access applications that were housed either at an enterprise site or, more rarely, in a private data center. But the cloud shifted the game — creating the need for fast access to applications wherever they reside, including the cloud when accessed across the Internet.

Cloud Connection Challenges

From the CIO or CTO’s perspective, cloud has many benefits but also presents many challenges from the network and security point of view. Cloud applications can speed the velocity and agility of IT, enabling your workforce to connect and build on new applications on demand.

But the challenge is that you need to build a new infrastructure to support these cloud applications. There are several challenges to connecting your workforce to this new world of agile cloud applications. Here are a few:

Application Performance: Cloud means there are many routes for workers to connect – and generally they do so using the network, not always under control of the corporate network. They could be using Internet broadband to connect to a cloud application or they might be on a corporate WAN. SD-WAN technology can add network intelligence to the corporate WAN to recognize which applications are being accessed and connect them in the most efficient, cost effective way. It can provide Internet breakout to make sure that general Internet traffic is not routed through expensive private data-center connections (such as MPLS). And furthermore, SD-WAN technology can be used to connect directly to recognize the most common cloud applications (Microsoft Office 365, Salesforce), and connect to application-specific gateways that speed up applications access.

Security: With the increased use of the Internet and cloud technologies, it’s harder for IT staff to assure security when employees are using the network to connect to the cloud. SD-WAN can enable additional network visibility and security functions that assure that cloud applications are being accessed in a secure way. More importantly, by enabling network branches and endpoints with SD-WAN, IT staff can gain more insight into how the networks are being used and implement security policies.

Agility and Automation: In the hardware-based WAN world, networks were connected with complicated hardware configurations and leased lines, making changes to the network topology and architecture difficult. In order to connect to the cloud, a more responsive network is needed to gain control and visibility over cloud connections. With SD-WAN, networks can be more quickly orchestrated and changed using software, increasing the speed with which IT and networking staff can respond to changing business demand. In addition, SD-WAN deployments can often be set up using software-based automation tools such as templates.

End-User Attraction: Making Life Easier

What’s most powerful about SD-WAN is that it has the potential to solve several of these challenges at once, by providing an integrated, software-driven platform for automating network policy and applications.

Cloud applications mean that traffic flows within the network have drastically changed and become inefficient. The technology to handle these new traffic flows is embedded in many SD-WAN platforms.

SD-WAN emerged with a few use cases anchored to the need for fast cloud access, but those use cases are now expanding, according to Futuriom research.  That is because the WAN is a key enabler — and also possibly stumbling block — for cloud applications.

So how exactly does SD-WAN do that? The MEF, a global industry alliance comprised of more than 150 networking technology and service-provider organizations, is working to reduce the confusion surrounding SD-WAN technologies and solutions. As part of their work the MEF has identified the following as being fundamental capabilities of SD-WAN managed services:

  • Secure, IP-based virtual overlay network
  • Transport-independence of underlay network
  • Service assurance of each SD-WAN tunnel
  • Application-driven packet forwarding
  • High availability through multiple WAN links
  • Policy-based packet forwarding
  • Service automation via centralized management, control and orchestration
  • The MEF also identified some value-added services that are beyond the fundamental SD-WAN service offering. This includes WAN optimization and advanced security services.

These expanding capabilities of SD-WAN show why it’s growing so fast – it’s become the Swiss army knife of WAN automation and management. This is why IT and network managers have taken a liking to the approach is that streamlines the management of many of challenges posed to given users a better experience in connecting to the cloud.

FatPipe Networks has been developing and delivering traffic management solutions for over 17 years and was “SD-WAN before SD-WAN was cool”- Gartner.   With 12 seminal patents and a comprehensive suite that addresses any SD-WAN need, FatPipe Networks is a must for any WAN administrator considering or updating their WAN traffic management needs

01 Oct

SD-WAN can jump start digital transformation initiatives

SD-WANs can jump start digital transformation initiatives

ZK Research data shows that 94% of companies have at least one digital transformation initiative underway. The research firm also found that a shocking 75% of CxOs admittedly do not know what their industry will look like or who their competitors will be in five years. This means that success in the digital era isn’t based on the company that has the lowest prices, best products, or even the top people.

Sustaining a market leading position is predicated being agile and having the ability to quickly adapt the business to seize new opportunities faster than the competition. The digital era is Darwinism at its finest – it’s the most adaptable that survives and the rest are fodder for the winners. This is why the transition to digital is at the top of every CxOs priority list.

While the concept of becoming digital makes sense, executing a plan to transform can be quite intimidating for most organizations, particularly well established businesses that haven’t relied on technology in the past, as there’s a perception that digital transformation requires big moonshot-like initiatives and investments.  Retailers believe they need to Amazon over night while taxi and car service companies want to Uber up. The fact is, while there is urgency, there’s no need to try and make that hard pivot overnight.  In fact, moonshots often fail and business and technology leaders need to understand that digital transformation is more about executing manageable chip shots rather than complex moonshots.

The chip shot reference should make it clear that I’m an avid golfer and I’ll extend the analogy further by pointing out digital transformation should be done one shot at a time and SD-WANs can facilitate that. For example, a bank might put a futuristic plan together for “digital banking” that involves a number of new technologies, such as virtual reality, digital signs, Internet of Things, digital mirrors and other advanced technology.  One might look at the end game and find the journey so daunting that it paralyzes them.

A better way to approach this type of digital plan is through a series of smaller initiatives where the deployments can be controlled and managed the ROI easily calculated. For example, the bank may choose to put video terminals in an office at all branch locations, allowing customers to talk directly to product experts, even if that branch has no local personnel with that knowledge base. This is a small, manageable change that’s easy to implement with a measurable ROI.  Without video, experts travel from branch to branch limiting the number of appointments per day to just a few.  With video, product experts can be available all day long giving the bank the ability to sell more products to more people.

What does SD-WAN have to do with this?  The answer is everything! We live in a customer experience driven world where a good customer experience leads to loyalty and a higher share of wallet.  A bad experience will drive customers away, perhaps never to return. One interesting factoid that supports this, comes from ZK Research, which found that two-thirds of millennials changed loyalties to a brand in 2018 because of a single bad experience.

Here is where a little SD-WAN will pay big dividends as video requires a high quality, low latency and jitter free network. Imagine being in a bank, sitting a high end customer down in front of a terminal only to experience a horrible video experience. That customer may never try and service again.  Instead of fueling customer acquisition might be chasing them away.  Also, the bank may be less likely to recommend it, giving the impression the project was a waste.

The key takeaway here is that success with digital transformation is dependent on network modernization, particularly the WAN where bandwidth isn’t a bountiful commodity. Businesses require an agile, secure and dynamic network capable of supporting whatever applications are deployed.  Legacy WANs cannot support digital businesses, but SD-WANs are built from the ground up with agility and flexibility in mind. With the banking example, the video service requires flawless connectivity and SD-WANs can automate the process of prioritizing traffic or reserving bandwidth to ensure the quality remains high. When the call is over, the reservation on bandwidth needs to be removed to not impact other applications. These processes on a legacy network, using manual processes are slow, time consuming and error prone and will likely lead to application problems. SD-WANs make this touch free.

The digital era has arrived and IT leaders need to be prepared.  This requires agility and dynamism at the network layer as it’s the resource that connects everything. SD-WANs create a foundation that enables businesses to accelerate their digital efforts.

FatPipe Networks have been developing and innovating SD-WAN solutions for 18 years.  For the best of breed SD-WAN solutions, call FatPipe today at 801-683-5656.  FatPipe Networks www.fatpipeinc.com

 

 

29 Mar

The Intelligent Edge-where are we today?

What is it, and where is it going?

Most WANs of today still use routers and technology that, at the time, served a purpose and provided a mechanism to expand the network to remote branches and locations across the world using MPLS or similar protocols.

But times have changed.  Traffic on WANs has increased by almost 10 fold in the last 15 years.   T1 was “revolutionary” many years ago, providing speeds of a blistering 1.5Mb/s.    Today, this throughput is not going to make the grade in 99% of WANs.   Fiber, or optical networks can reach speeds of over 100Gbps.   It is like buying a new car every 5 years.   You see the features and you want them, as do network administrators.  

So what is the “Intelligent Edge?”  

First, what really is “the edge”?  A definition from Wikipedia is “an edge device provides an entry point into enterprise or service provider core networks.  It can be thought of as a router that provides authenticated access to faster more efficient backbone and core networks.”     Essentially, “the edge” of any network is thought of to be a place where you generate, collect, and analyze data on the edge of the network where the data is generated rather than in centralized servers and systems.   Computation is largely or completely performed on a distributed device node known as smart device or edge device.  

OK – so now we understand “what” the edge is, so what is the “intelligent edge?   As Wide Area Networks grew and became more complicated with more and more devices being attached, both hard wired, wireless and remote, the need for bandwidth increased, dramatically. 

Today – there are almost 24 Billion devices connected to the internet with the expectation of 50 billion by 2020.    Think of the “intelligent Edge” as a place where computing occurs.   It is “intelligent” because there is technology there that has ability to control, analyze and compute.   This can be a manufacturing floor, a farm crop field, a city, your home, power plant, sports arena, your car, in the air, or under the sea.  These interrelated computing devices or objects are referred to as the Internet of Things (IoT) and these devices are driving how and why the “intelligent edge” is becoming a key focus for network managers.   This intelligent edge connects these devices, performs analytics, computes, and can control actions that were formerly confined to the central or cloud based data centers. 

The usage and access demand is what is driving “edge” technologies and solutions.   It is much better to access the information and data as close to the connection point as possible.  

On average, users have 5 different devices to attach to the network.    Of course they expect to attach to a network and access the applications and data they need, instantly.   But this requires a network with agility, flexibility and “intelligence” to understand where the requests are coming from, how to manage the requests in the most efficient and effective manner possible and to provide reliable connectivity which, after all, is why sensors and monitors are being installed in machines such as wind turbines, to monitor vibration, wear and operating effectiveness, and help prevent brownouts or blackouts.    However, without constant and reliable connectivity, the data provided by these sensors would be “lost”.

The un-intelligent router in all its forms is struggling to find relevance in this scenario. The availability of ethernet handoff is killing the router business. They are trying hard to find relevance in this scenario.

So where next for the “intelligent edge”?  

As stated earlier, more and more devices are being connected and more and more data being collected on a multitude of things to help streamline decision making to prevent downtime or in the worst cases, failure.    

Networks of the future are going to be driven by the need for instant information, instant decisions, and instant remediation.   All of which is why the “intelligent edge” will become a mainstream “product” in the design and implementation of ANY network.      Having said that, what does this mean for networks of today, and what should the administrators plan for to embrace these changes?

Let’s look at the current most important issues faced by network administrators and how embracing intelligent edge devices will affect how these issues might be dealt with.

Firstly – Security:

Many recent surveys suggest the number one issue faced by network administrators worldwide is, security.  Security of data, whether in transmission or stored somewhere is critical.    We just have to look at the problems faced with social media company data breaches, credit card company breaches and others to know that data security is by far and away the number one issue.  Can the “intelligent edge” help?  Yes and no.   It is not the “edge’ that can prevent hacking, it is the underlying software that transmits the data that is key.    The transmission of data across the network, from edge device or user to data center to other devices, needs to be secure.   Administrators need to deploy software solutions that provide highly secure data transmission, and that includes data from the edge.    The intelligent edge, does however, compute locally and provides a more local management issue, rather than a broad network security issue.

Second:- Ease of Management:

Believe it or not, the costs of recruiting, training, certifying and managing skilled IT staff is becoming a major issue for any business.   The days of paying for continuing education and propriety certification are waning.   Today, administrators are looking for solutions that are easy to manage, especially when devices and or offices are remote.   The Intelligent Edge should be simple, easy to install and manage remotely, and for the most part, this is true once the devices are installed.

Third: – Compatibility with existing networks:

Organizations are reluctant to rip and replace their networks.   If a solution can augment existing installations, administrators will look favorably at these recommendations.  So, does the intelligent edge help with these decisions?    Certainly, as they can use existing infrastructure provided there is an underlying software that can manage data transmission and device access securely and reliably.  

Fourth: – Network performance:

Latency, bandwidth, reliability, duplication and overall cost of the network are all top of mind.  Intelligent edge devices cannot perform or provide the benefits they claim to bring to a business if the underlying network is slow, unreliable or using legacy systems that are slow and difficult to manage or update.    The Intelligent Edge is only going to be as good as the network infrastructure it is connected to.  The bottom line here is to make sure the network is configured to take advantage of intelligent edge device data.    

So now what?

The Intelligent Edge is certainly something that can help network administrators predict the future more accurately.  The more data these devices provide, the better the decision will be on how to use this information, and with the advent of AI, this information can be acted on immediately, providing “instant” remediation or feedback that helps businesses learn what we like, when equipment may malfunction, where to route data to avoid a line failure, how to prepare for the best solution, and even where we might choose to travel to next.

So just install intelligent edge devices and move on?   Stop!    Read this first!

Earlier in this article, we mentioned the need for the underlying network infrastructure to be “intelligent edge” ready.    Remember, you can have all the sensors and monitoring services available, but if the data they produce is not getting to the right places at the right time, you are back to square one.    Adding more devices or “edge services” does not make network administration easier unless you have the right network solution to take advantage of these benefits.

Without installing software solutions to monitor and manage your edge devices, the “intelligent edge” becomes another user on the network.   In order to take advantage of the many benefits the “intelligent edge” provides, you need to make sure your network is ready.   

It must be ready to:

  • Transmit data from all devices, including the
    intelligent edge devices, securely and effectively, without user intervention.
  • Proactively route data on the best available
    link in times of congestion
  • Automatically failover in a sub second if a
    connection should fail
  • Use all and available bandwidth proactively and
    intelligently, without having to reconfigure the network
  • Automatically detect and remediate attempts to
    breach the security of the network
  • Be managed easily and simply from a single
    point, with zero touch provisioning for remote branches.

FatPipe Networks has been providing network solutions for over 15 years and is the only company with a patented security module that is FIPS 140-2 certified, providing military grade security for traffic across the WAN or across broadband networks.   FatPipe solutions give administrators the comfort of the highest SD-WAN security available.

Fatpipe patented technologies have eliminated the need for BGP routing, and with it all the delays in inefficiencies of route propagation. Fatpipe brought intelligence to the edge.

Using FatPipe’s single pane GUI management tools, administrators can not only see exactly what their network looks like, but with FatPipe’s QoS, they can prioritize application access no matter where the application resides, in the cloud or locally.   In addition, FatPipe’s solutions allow for load balancing over multiple links, including Cable, DSL, MPLS, DIA, 3G, 4G, 5G LTE and satellite.  FatPipe’s management tools are easy to use, requiring basic IT skills saving companies’ significant time and IT staff educational costs.

FatPipe has always been a company serving network administrators.   FatPipe was providing WAN SD-WAN solutions long before SD-WAN became a buzz word.  The solutions are built to work with existing LAN and WAN infrastructures and protocols.  In fact, FatPipe is the only SD-WAN vendor to support up to 40Gbps bandwidth and up to 15 interfaces.  

FatPipe Networks:  801-683-5656 x1224.

24 Jan

Thoughts after Avaya Engage 2019

FatPipe Networks Avaya Engage 2019

FatPipe Networks Avaya Engage 2019

I just returned from Avaya Engage 2019 in Austin where FatPipe sponsored a booth in the solutions expo.  It is always a pleasure to attend these events and hear first-hand what customers are looking for in the solutions expo.  One theme we kept hearing was regarding cloud-hosted or cloud-ready UC and CC, and specifically, how do you ensure network performance when you move to the cloud.

Ensuring WAN performance for UC/CC is something FatPipe does well.  During the conference Avaya discussed their AIX-Mobility solution, (Avaya Mobile Experience) FatPipe is providing one of the foundational technologies for this product.  Customers of AIX-Mobility connect to the Avaya Cloud via FatPipe’s SD-WAN technology.  This allows for rapid and cost-effective deployment of the service because there is no one to provision dedicated MPLS circuit to call center locations, the connection to the Avaya cloud can be made over an internet connection, dedicated MPLS circuits, or a hybrid combination of connections.  FatPipe’s SD-WAN monitors the quality of the paths and intelligently directs the calls to the most appropriate path.

One of the reasons why Avaya chose FatPipe over other SD-WAN providers is FatPipe’s unique ability to do stateful, sub-second call failover without having to duplicate packets. There are also several other techniques that FatPipe uses to ensure the highest call quality and low bandwidth use. For example, the packet duplication requirement that other SD-WAN providers put on stateful failover was seen as a large burden on Avaya’s network plans.  Having to double-provision bandwidth does not work on the scale AIX-Mobility is designed for.

FatPipe’s efficient means of VoIP management works both at the carrier level, like Avaya, and for enterprises.  To learn more about FatPipe’s SD-WAN for VoIP click here