Versa Secure
SD-WAN

Versa's carrier-class routing leverages cutting-edge technologies and advanced features to ensure efficient data transmission, low latency, high availability, and fault tolerance, making it ideal for large-scale networks handling significant traffic volumes. The routing solution is purpose-built to address the challenges of modern networks, where service providers and enterprises are required to support an ever-expanding array of applications, devices, and cloud services, while maintaining uncompromising security. Versa's routing capabilities enable efficient and dynamic routing decisions with support for a wide range of industry-standard advanced routing protocols, including OSPF (Open Shortest Path First), BGP (Border Gateway Protocol), Multiprotocol BGP (MP-BGP), Equal-cost multipath routing (ECMP), RIPv2, BFD, IGMP v2/3, PIM SM/SSM, MPLS MPBGP-L3VPN with inter-AS options, MPLS MPBGP-EVPN, and VXLAN MPBGP-EVPN, route redistribution, static routing, and Virtual Routing and Forwarding (VRF).

Versa Secure SD-WAN provides a comprehensive set of Quality of Service (QoS) options to prioritize and manage network traffic based on different application requirements and business needs. Per-tenant QoS capabilities include:

• Application-Based QoS: Versa Secure SD-WAN supports application-aware QoS, allowing administrators to identify and prioritize specific applications or application categories based on their criticality. This ensures that mission-critical applications receive preferential treatment over less important ones.
• Traffic Shaping: Versa Secure SD-WAN offers traffic shaping capabilities, enabling administrators to control the rate at which different types of traffic are transmitted on the network. Traffic shaping helps prevent network congestion and ensures that bandwidth is allocated appropriately for each application.
• Dynamic Path Selection: QoS in Versa Secure SD-WAN is integrated with intelligent path selection capabilities. The SD-WAN solution can dynamically choose the best path for each application's traffic based on real-time network conditions, such as link quality and latency.
• Bandwidth Reservation: Versa Secure SD-WAN allows administrators to reserve a certain amount of bandwidth for specific applications or services. This ensures that critical applications always have the necessary bandwidth available, even during periods of high network utilization.
• Class-Based QoS: Versa Secure SD-WAN supports class-based QoS, enabling administrators to define multiple classes of service based on different application requirements. Each class can have its own QoS policies, such as bandwidth limits and priority settings.
• CoS (Class of Service): Versa Secure SD-WAN may support Differentiated Services Code Point (DSCP) or other CoS markings to tag packets with specific priority levels. This tagging allows network devices to prioritize traffic based on its class.
• Queue Management: QoS in Versa Secure SD-WAN includes queue management features, such as traffic queuing and scheduling algorithms, to efficiently handle and prioritize packets during times of network congestion.
• Per-Flow QoS: Versa Secure SD-WAN can apply QoS policies on a per-flow basis, allowing for granular control over individual data streams and ensuring fair treatment for each flow based on its importance.

Versa Secure SD-WAN offers Carrier-Grade Network Address Translation (CGNAT) options to enable organizations to efficiently manage their IPv4 address space and handle the increasing demand for IP addresses. CGNAT allows multiple private IP addresses to share a smaller pool of public IP addresses, thereby extending the life of IPv4 addresses and conserving IP resources. Some of the CGNAT options available in Versa Secure SD-WAN include single-sided and dual-sided NAT, dynamic and static NAT, NAT64, NATPT, CGNAT ALG support, EIM/EIF, PBA support, and MAP-E.

Versa Secure SD-WAN offers a range of DHCP (Dynamic Host Configuration Protocol) options to efficiently manage IP address allocation and network configurations within the SD-WAN environment. DHCP is a protocol used to automatically assign IP addresses and network parameters to devices on a network, eliminating the need for manual IP configuration. Key capabilities include:

• DHCP Server: Versa Secure SD-WAN can act as a DHCP server, dynamically allocating IP addresses and network settings to devices connected to the local network. The DHCP server in Versa SD-WAN ensures efficient address management and minimizes the chances of IP conflicts.
• DHCP Relay: In scenarios where there is a need to extend DHCP services across multiple subnets or VLANs, Versa Secure SD-WAN supports DHCP relay functionality. DHCP relay agents forward DHCP requests from clients to a central DHCP server, allowing centralized IP address management.
• DHCP Options: Versa Secure SD-WAN may offer various DHCP options that allow administrators to configure additional parameters for DHCP clients. These options can include subnet masks, default gateways, DNS (Domain Name System) server addresses, domain names, and other network-related settings.
• IP Address Pool Management: Versa Secure SD-WAN provides administrators with the ability to define and manage IP address pools from which DHCP-assigned addresses are allocated. This allows organizations to ensure efficient utilization of IP addresses and maintain proper IP address space management.
• DHCP Lease Time Management: Versa Secure SD-WAN allows administrators to configure DHCP lease times, determining how long a client can retain an IP address lease before it needs to be renewed. This feature enables organizations to control the frequency of IP address reassignments.
• IPv6 DHCP Support: Versa Secure SD-WAN may support DHCP for IPv6 (DHCPv6), allowing for automatic IPv6 address assignment and network configuration for devices operating on IPv6 networks.

Versa Networks' IPSec VPN Tunnel capabilities provide a secure and encrypted connection over the Internet, enabling remote branches and mobile users to access corporate resources safely. This solution utilizes IPSec protocols to ensure data confidentiality, integrity, and authenticity, creating a secure tunnel for transferring sensitive information between sites. Versa's implementation of IPSec VPN is known for its scalability, allowing for the creation of numerous tunnels that can be easily managed and dynamically adjusted to accommodate varying traffic loads and security requirements. Key capabilities include:

• IKEv2/v1
• Pre-shared key/PKI authentication
• Dead peer detection
• Diffie-Hellman key negotiation
• AES 128/256 encryption (IKE/IPsec)
• SHA1/SHA256/SHA384/SHA512/null hashing
• NAT traversal
• Perfect forward secrecy
• IPsec rekey time/volume based
• Anti-replay
• Pre/post fragmentation
• Route based VPN
• IPv6 based IPSec support
• Dual Stack support

Versa Networks' Layer 2 (L2) bridging capabilities enable the extension of a local area network across distributed enterprise locations. This feature allows for the seamless interconnection of separate network segments, making them appear as though they are on the same LAN, which facilitates communication and resource sharing among geographically dispersed offices. By implementing L2 bridging, Versa enables businesses to maintain protocol continuity and simplifies the network architecture, especially for legacy applications and services that require Layer 2 connectivity. Versa provides comprehensive layer 2 features for a bridging environment, including:

• Virtual Switch and Bridge Domain instances
• VLAN translation
• Access and Trunk interfaces
• xSTP - as active loop detection
• Passive Loop detection
• Uplink failure detection for faster convergence
• LLDP
• IRB
• VXLAN with subsequent L2/L3 lookups

Versa Networks offers robust support for MPLS (Multiprotocol Label Switching) VPN, enabling enterprises to integrate this traditional, highly reliable network technology within their SD-WAN framework. This support allows for the seamless combination of MPLS's proven traffic engineering and quality of service capabilities with the flexibility and cost-effectiveness of SD-WAN. Such integration is crucial for organizations transitioning to SD-WAN while looking to maintain the stability and predictability of their existing MPLS connections, especially for critical business applications. Key capabilities include:

• MPLS BGP L3VPN
• MPLS based EVPNs across SD-WAN tunnels
• MPLS EVPN Multiple Active nodes support
• MPLS EVPN route type 5
• LDP for transport label signaling
• Transport layer MPLS label support

Versa Networks provides comprehensive multicast support, a key feature for efficiently distributing data to multiple destinations across a network. This capability enables the simultaneous transmission of information to a group of recipients, optimizing bandwidth usage and reducing network load, particularly beneficial for applications like video conferencing, streaming media, and real-time data feeds. Versa's multicast support ensures that businesses can effectively manage and distribute large-scale, bandwidth-intensive content across their networks without sacrificing performance. Key capabilities include:

• IGMP v3 (LAN intf)
• IGMP Snooping
• PIM SM (LAN/WAN)
• PIM SSM
• PIM RP, Bootstrap RP, Anycast RP
• Anycast RP
• Multicast across LAN, WAN interfaces, SD-WAN tunnels

Versa Networks' support for VXLAN (Virtual Extensible LAN) technology plays a pivotal role in enhancing network scalability and segmentation. VXLAN is a network virtualization technology that enables the creation of large-scale overlay networks on existing physical network infrastructures. This capability allows Versa to offer flexible and scalable network solutions, providing efficient Layer 2 connectivity over Layer 3 networks, which is essential for complex multi-tenant environments and data center interconnects. Key capabilities include:

• EVPN signaled VXLAN overlays
• VXLAN tie-in to bridge-domains, IRB and MPLS EVPN
• EVPN VNID with anycast L3 gateway
• Multiple Active VXLAN nodes with split LAG support

Versa SD-WAN supports multi-cloud connectivity as part of its cloud on-ramp strategy. This includes automatic workload discovery, intent based overlay creation, macro and micro-segmentation, and deployment options for both on-premises and as-a-service delivery. Versa customers can extend their SD-WAN overlay to include multi-cloud environments in the same management console. Versa also supports integration with AWS CloudWAN to deliver end-to-end network and security segmentation across the AWS Global backbone.

Versa Networks' Dynamic IPSec VPN Tunnel Overlay capability provides a secure and flexible method for establishing encrypted connections across the internet or other untrusted networks. It enables the dynamic creation of IPSec tunnels, allowing for automatic adjustment and optimization of the network based on real-time traffic demands and conditions. This feature supports scalability and ease of management, as it simplifies the process of adding or removing sites or services from the VPN. Additionally, it enhances security by ensuring that data in transit is protected by encryption, making it suitable for organizations that require secure, reliable, and adaptable wide-area networking. Key capabilities include:

• harSecure (and separate) control and data channels
• Automatic Key Management
• Secure on-demand data channels with unique key pairs between any two sites
• Two factor authentication
• Automatic certificate lifecycle management
• Control Plane based - dynamic – OTT topology based IPSec tunnels for data

Versa Networks' SD-WAN solution offers flexible topology and deployment capabilities to suit a wide range of network environments and business needs. It supports various topologies, including hub-and-spoke, full mesh, or a hybrid of both, catering to different organizational structures and traffic patterns. Versa's deployment options are equally versatile, enabling on-premises, cloud-based, or hybrid implementations, which allows businesses to choose the model that best fits their operational requirements and scalability needs. This flexibility in topology and deployment ensures that enterprises can efficiently manage their network resources, optimize performance, and easily adapt to changing business landscapes, all while maintaining high security and reliability standards. Key capabilities include:

• Behind a NAT device/firewall
• Encrypted and Non-encrypted overlays with MPLS/GRE or VXLAN
• SD-WAN Controller
• WAN circuit support
• Full Mesh Topology
• Hub-Spoke Topology
• Spoke-Hub-Hub-Spoke
• Controller behind branch / hub
• Collapsed Conroller & Hub (consolidation)
• Any Topology
• Dynamic IPSec overlays
• Direct Internet Access
• Number of WAN Links

Versa Networks' tunnel-less SD-WAN support represents an innovative approach to wide area networking, eschewing traditional VPN tunnels for a more direct and efficient traffic handling method. A tunnel-less approach differs from traditional SD-WAN by not relying on the creation of virtual private network (VPN) tunnels for traffic transmission, instead data packets are transmitted directly over the internet or other networks without the encapsulation required for creating tunnels. This design simplifies network architecture, reduces latency, and improves overall network performance, particularly beneficial for customers using wireless links like LTE, 5G, and satellite.

Versa Networks' application traffic conditioning capabilities are designed to optimize the performance of business-critical applications across the SD-WAN. These capabilities include advanced techniques such as Forward Error Correction, which helps to mitigate packet loss, and traffic steering to ensure that applications take the most efficient path through the network. The conditioning also uses dynamic QoS and bandwidth management to prioritize essential applications and maintain service quality even under network congestion. By leveraging real-time monitoring and adjustments, Versa's application traffic conditioning ensures high-quality user experiences, especially for latency-sensitive applications like VoIP and video conferencing. Key capabilities include:

• Forward Error Correction (FEC)
• Packet Cloning - Decloning
• Packet Striping across SD-WAN path bundle
• CODEC support for Voice and Video flows
• MOS Score based Traffic Engineering for Voice flows
• MOS Score based Traffic Engineering for Video flows
• DNS assisted Traffic Steering
• DIA/DCA Traffic Optimizations for Cloud SaaS sites
• First packet-based traffic steering
• Traffic Engineering Link State based traffic management
• IPv6 support

Versa's SD-WAN solution features advanced Quality of Service (QoS) and traffic steering capabilities, providing a sophisticated approach to managing and optimizing network traffic. The advanced QoS functionality allows for precise prioritization of applications, ensuring that critical services such as VoIP and video conferencing receive the necessary bandwidth and low latency. This is achieved through detailed monitoring and management of network resources based on application types, usage patterns, and performance requirements. Complementing this, Versa's traffic steering capability dynamically routes traffic based on real-time network conditions, application needs, and predefined policies, directing data over the most efficient paths, whether they be via broadband, MPLS, or cellular networks. Together, these features ensure optimal network performance, enhanced reliability, and a superior user experience in diverse enterprise networking environments. Key capabilities include:

• Application based traffic steering
• AppQoS – Traffic shaping
• AppQoS – Rate limiting
• Application-based SLAs
• Selective application encryption (ie: encryption based on app or traffic type)
• Application blocking
• Route based traffic steering
• Seamless integration with WAN optimization devices
• App based intelligent path selection – fixed criteria
• App based intelligent path selection – user-defined criteria, least cost, high bandwidth paths
• URL based traffic management
• IPv6 support

Versa Networks' application-based routing capabilities are underscored by sophisticated app identification technologies that can accurately detect and classify a wide range of applications, from common business tools to custom enterprise applications. Leveraging deep packet inspection and real-time analytics, Versa's solution discerns the application type and directs the traffic along the optimal path based on predefined policies, application requirements, and current network conditions. This intelligent routing ensures high-priority applications have the necessary bandwidth and performance, improving the end-user experience and maintaining productivity. The detailed app identification also allows for more nuanced security policies and bandwidth management, contributing to both enhanced network performance and tighter security control. Key capabilities include:

• Identification of 3000+ applications & protocols
• Support for user-defined applications & app groups
• Support for user defined application filters based on any combination of family, subfamily, risk, productivity & tag
• Nested application support
• Enable packet capture based on known/unknown applications
• IPv6 support

Versa Networks' TCP optimization support is designed to enhance the efficiency and performance of TCP traffic across the network. This feature implements advanced algorithms to improve data transmission efficiency, reduce latency, and minimize packet loss, particularly over long-distance or high-latency links. By optimizing TCP, Versa ensures smoother and more reliable connectivity, which is especially crucial for applications like VoIP, video conferencing, and cloud services that are sensitive to network performance. Key capabilities include:

• TCP Proxy for bookended or single ended deployments
• TCP SACK, Window Scaling, and Timestamping support
• Intelligent TCP Buffer management
• Improved TCP Loss Recovery Techniques
• Integrated latest congestion control algorithms to manage congestion and random traffic loss

Versa Networks' Advanced Threat Protection (ATP) in SD-WAN is a sophisticated, AI/ML-powered security solution designed to defend against a wide range of evolving cyber threats, including zero-day exploits, APTs, ransomware, and phishing attacks. Versa ATP integrates local and cloud-based file analytics and sandboxing, offering a multi-layered defense system. Locally, it inspects files, performs file reputation checks, and utilizes signature-based virus scanning and AI/ML-based predictions. For more comprehensive protection, cloud multi-sandboxing involves multiple antivirus engines and combines static and dynamic analysis to detect hidden malicious behavior in files. Additionally, Versa ATP provides detailed reporting and visibility features, including real-time dashboards and customizable reports, enhancing organizations' ability to respond proactively to emerging threats and fine-tune their security strategies. Versa ATP ensures deep visibility and context regarding network traffic, user behavior, and security events, making it a robust solution for protecting `complex network environments.

Versa Networks integrates robust antivirus support within its SD-WAN solution, providing essential protection against malware and viruses across the network. This feature actively scans traffic passing through the SD-WAN for malicious content, ensuring real-time detection and prevention of threats. By incorporating antivirus capabilities, Versa enhances the overall security posture of the network, safeguarding critical business data and maintaining the integrity and reliability of network communications. Key capabilities include:

• Multiple file types
• Multiple protocol detection - FTP, HTTP, Email
• Compressed file type detection
• Nested compression
• Packet direction – client/server

Versa Networks' Cloud Access Security Broker (CASB) Inline Proxy delivers comprehensive cloud data protection with exceptional visibility and control. It addresses the evolving challenges of securing cloud application access, particularly in a post-pandemic world where remote work and cloud service adoption have surged. Key features of Versa's CASB Inline Proxy include continuous evaluation and restriction of cloud application activities, enabling real-time monitoring and control to prevent unauthorized actions and data leakage. It also provides contextual access policies, data security, compliance monitoring, and integrated threat protection by scanning all incoming and outgoing traffic. This CASB solution ensures that organizations can secure their most vulnerable and critical cloud assets, including data, by offering granular visibility, robust data loss prevention, and compliance strategies. Additionally, it supports unified security policies, effectively managing and mitigating security threats and exposures across various cloud platforms and user access points. Versa's CASB Inline Proxy stands out for its ability to seamlessly integrate within an organization’s existing ecosystem, offering deep protection levels while addressing complex security challenges in the modern cloud-based landscape. Key capabilities include:

• Monitoring and control of user activities such as uploading, downloading, and sharing data
• Policy-based access control to SaaS applications based on user identity, device, and posture
• Data security and compliance monitoring to safeguard sensitive information from unauthorized access or leakage
• Integrated threat protection
• Cloud application usgae reporting
• User identity verification with MFA
• Endpoint Information Profile (EIP) data used for security posture checks before granting access
• Microsoft Intune MDM Integration
• SaaS app tenancy control to restrict access to personal SaaS accounts to prevent data breaches through non-corporate accounts.
• Shadow IT discovery and control
• SSL inspection and decryption
• Application activity monitoring
• DLP integration
• Malware defense
• Zero-Day malware detection
• User behavior analysis
• Real-time reporting and analytics

Versa Networks' SD-WAN solution incorporates advanced cloud-based URL filtering, malware sandboxing, and file filtering capabilities to enhance network security. The URL filtering feature blocks access to malicious or inappropriate websites, effectively reducing the risk of web-based threats and ensuring compliance with organizational internet policies. Malware sandboxing provides an additional layer of security by isolating and analyzing suspicious files in a controlled environment, detecting and preventing potential malware threats before they can infiltrate the network. Furthermore, the file filtering capability scrutinizes file transfers for security threats, ensuring that only safe and authorized files are allowed through the network. Together, these features form a comprehensive defense against a wide range of cyber threats, safeguarding the network while maintaining high performance and user experience. Key capabilities include:

• Cloud Based URL Filtering
• Cloud Based Malware Sandboxing
• Cloud Based File Filtering

Versa Networks' Data Loss Prevention (DLP) solution is a comprehensive tool designed to safeguard sensitive organizational data. It features advanced fingerprinting technology to protect stored sensitive documents and prevent unauthorized network transfers. The solution employs Exact Data Match (EDM) for precise monitoring and safeguarding of critical data such as Personally Identifiable Information (PII) and financial records, significantly reducing false positives. The integration of Optical Character Recognition (OCR) further bolsters its capabilities, allowing for the detection and prevention of data leaks from image files across various formats. To ensure adherence to various regulatory standards like HIPAA, GDPR, and CCPA, Versa DLP offers predefined compliance profiles and patterns. Additionally, its classification system, integrated with Microsoft Information Protection (MIP), facilitates effective policy application and document monitoring. The solution supports a broad range of data patterns and file types through regular expression-based matching, making it a versatile and powerful tool for diverse organizational environments seeking robust data protection solutions. Key capabilities include:

• Protect sensitive data, data exfiltration / leakage in transfer - in real time
• Compliance with regulations
• Obfuscation of sensitive data

Versa Networks' SD-WAN solution includes robust DNS proxy and security capabilities, designed to enhance both network performance and security. The DNS proxy feature improves DNS resolution efficiency and can enforce security policies by redirecting DNS requests to preferred or more secure DNS servers. This capability is crucial for protecting against DNS-based threats and for implementing content filtering policies. Additionally, Versa's DNS security measures include monitoring and analyzing DNS traffic to identify and block potential threats such as phishing attacks, malware distribution sites, and other malicious activities. By integrating these DNS functionalities into its SD-WAN solution, Versa Networks ensures that enterprises have a more secure, reliable, and efficient way to manage DNS traffic and enforce security policies across their networks. Key capabilities include:

• DNS Forwarder
• DNS Split Proxy
• DNS Proxy
• DNS Proxy for IPv6
• DNS Security Feeds and DNS Firewall
• DNS Security Feeds and DNS Firewall for IPv6

Versa Networks' SD-WAN solution offers robust Denial of Service (DoS) protection capabilities, designed to safeguard networks from a variety of DoS and Distributed Denial of Service (DDoS) attacks. This protection is achieved through advanced detection mechanisms that identify unusual traffic patterns and potential attack vectors in real-time. Upon detecting a threat, the system immediately implements mitigation strategies, such as traffic filtering and rate limiting, to prevent malicious traffic from overwhelming network resources. Versa's DoS protection ensures network availability and performance are maintained, even under the duress of sophisticated cyber attacks, making it a vital component for businesses seeking to ensure uninterrupted operation and reliability of their network services. Key capabilities include:

• Aggregate and classified DDoS profiles
• L3 ICMP Flood, IP other flood
• UDP, TCP SYN flood
• ICMPv6 flood
• SCTP flood
• Port scans and host sweeps
• L2-L4 anomaly detection
• IPv6 support

Versa Networks' SD-WAN solution features comprehensive file filtering capabilities, providing an essential layer of security for network traffic. This functionality involves scrutinizing files transferred across the network, identifying and blocking potentially harmful files based on predefined security policies and real-time threat intelligence. Versa's file filtering employs advanced techniques such as signature matching, heuristic analysis, and AI/ML algorithms to detect both known and emerging threats, including malware and ransomware. By integrating file filtering into its SD-WAN offering, Versa ensures enhanced data protection and mitigates the risk of security breaches, maintaining the integrity and safety of the enterprise network environment.

Versa Networks' SD-WAN solution includes forward proxy capabilities, which play a crucial role in enhancing network security and management. As a forward proxy, Versa's SD-WAN acts as an intermediary for user requests, directing outbound traffic to the internet, which allows for centralized control and monitoring of web access. This setup enables detailed inspection of web traffic for security threats, enforcement of corporate policies, and caching of frequently accessed content to improve response times. Additionally, the forward proxy feature aids in anonymizing user requests and managing traffic loads effectively, thereby enhancing both network security and performance. Key capabilities include:

• DIA/DCA use-case coverage
• SSL-TLS Proxy
• Security Service Chaining

Versa Networks' Identity and Authentication Engine (IAE) in SD-WAN offers a sophisticated solution for managing and authenticating user identities, crucial in today's complex network environments. It addresses the challenges posed by the migration of services from on-premises to cloud-based identity providers (IdPs), such as Microsoft Active Directory and Azure AD. The engine supports a centralized configuration of multiple IdPs, simplifying the management of network policies during transitions and ensuring seamless authentication for users, whether they are remote or office-based. Versa IAE's capabilities include proactive authentication, distributing user authentication context transparently across the network, and seamless authentication, where user context is shared across Versa infrastructure without repetitive authentication at different network points. Additionally, it offers a local Identity Provider Service and efficient synchronization of user databases across multiple IdPs, ensuring that user identity and authentication information is consistent and up-to-date across the entire network. This centralized approach enhances network and security agility, improves security posture, and provides a better user experience with reduced authentication interruptions. Versa IAE supports major authentication protocols such as LDAP, SAML, RADIUS, and integrates with various third-party IdPs, making it a versatile and powerful tool for modern enterprise networks. Key capabilities include:

• Centralized authentication engine for VOS instances in the field (VMS based)
• Centralized Authentication support for Active Directory (user-id Login Events subscription OOB)
• Azure AD proxy support and user auth info updates
• Centralized Panorama integration support for user auth info updates
• Centralized Cisco ISE support for user auth info updates
• Centralized HPE Aruba Clearpass support for user auth info updates
• Centralized Inline ID Proxy for commonly used ID services
• Centralized RADIUS Proxy - primarily to scale 802.1X and to implement consistent policies across VOS instances
• Local Authentication Server/Identity Provider
• Centralized SAML 2.0 Identity Proxy (centralized) for branches (Inline Auth)
• Centralized distribution of user auth events by one VOS to all VOS instances across the network
• Terminal Server Agent
• SCIM Support

Versa Networks' IoT security capabilities in SD-WAN provide robust protection for the increasingly interconnected and vulnerable landscape of Internet of Things devices. The solution offers comprehensive visibility and control over IoT traffic, ensuring secure communication between devices and the network. It employs advanced security protocols and encryption to safeguard data transmitted by IoT devices, mitigating the risk of cyber threats and unauthorized access. Additionally, Versa's SD-WAN architecture enables efficient segmentation and policy enforcement, allowing for the isolation of IoT devices and networks when necessary, thereby enhancing overall network security and reducing the attack surface. This integration of IoT security into the SD-WAN framework ensures a secure, scalable, and manageable IoT environment within enterprise networks. Key capabilities include:

• Device Identifiction, fingerprinting
• Device ID, class based traffic management policies

Versa Networks' SD-WAN solution features Layer 4 (L4) load balancing capabilities, providing efficient traffic management at the transport layer. This functionality enables the even distribution of network traffic across multiple servers or network paths based on L4 information such as IP addresses and TCP/UDP ports. By optimizing the allocation of network resources and minimizing the risk of any single point of overload, Versa's L4 load balancing enhances network performance and reliability. This capability is particularly crucial for maintaining high availability and ensuring smooth operation of critical applications, especially in environments with heavy or fluctuating traffic loads. Key capabilities include:

• Layer 4 load balancing
• LB algorithms – Hash/RR/Cost
• Persistence profiles
• Health monitoring – L4 based (TCP/ICMP)
• Health monitoring – L7 based (HTTP)
• Direct server return – L2
• Direct server return – L3
• Traffic Load Balancer (TLB) and ADC functionality
• High-availability – active-backup

Versa Networks' Network Access Control (NAC) capabilities within its SD-WAN solution provide robust security and management of network access. These capabilities include the ability to authenticate and authorize users and devices, ensuring that only trusted entities gain access to network resources. Versa's NAC integrates seamlessly with SD-WAN, allowing for dynamic policy enforcement based on user identity, device type, and other contextual factors. This integration facilitates enhanced network visibility and control, enabling organizations to effectively manage access, enforce security policies, and mitigate potential risks associated with unauthorized access or non-compliant devices within their distributed network environments. Key capabilities include:

• User/Group based policies with support for Active Directory & LDAP
• Kerberos, Captive Portal Form, Oauth, SAML SP support
• 802.1x with RADIUS back-end
• 802.1x Certificate and MAC based access control

Versa Networks' Next Generation Firewall (NGFW) capabilities within its SD-WAN solution offer advanced security features beyond traditional firewalls. The NGFW includes application-aware filtering, intrusion prevention systems (IPS), and advanced threat protection to identify and block sophisticated cyber threats. Integrated seamlessly into the SD-WAN architecture, it allows for the enforcement of security policies at a granular level, ensuring secure and optimized connectivity across the network. Additionally, Versa's NGFW supports deep packet inspection and SSL decryption, enhancing visibility and control over network traffic, which is crucial for protecting against modern, complex security challenges in diverse enterprise environments.

Versa Networks' Next Generation Intrusion Prevention System (NG-IPS) within its SD-WAN solution offers advanced security capabilities to detect and prevent sophisticated cyber threats. The NG-IPS includes a comprehensive set of intrusion prevention tools that utilize both default and custom-defined signatures, along with support for Versa and Snort rule formats. It is equipped to handle Layer 7 DDoS attacks, Layer 7 anomaly detection, and protections against JavaScript attacks, ensuring robust defense mechanisms against a wide range of network threats. Additionally, the NG-IPS offers lateral movement detection, contributing to a multi-layered security posture, and integrates seamlessly with the SD-WAN architecture to provide real-time threat intelligence and dynamic response, ensuring secure and efficient network operations. Key capabilities include:

• Vulnerability Profiles - by CVE ID/signature set /CVSS Score/Packet direction/Class
• Multiple Vulnerability DB Reference
• OS/Product based
• Signature based & Protocol Anomaly based detection
• Packet capture - pre & post window
• WAN circuit support
• L7 anomaly detection
• Javascript anomaly detection

Versa Networks' SD-WAN solution includes sophisticated SSL (Secure Sockets Layer) and TLS (Transport Layer Security) proxy capabilities, essential for enhancing network security and visibility. These capabilities allow for the decryption and inspection of encrypted traffic, enabling the identification and mitigation of potential threats hidden within SSL/TLS encrypted data flows, including detecting and blocking data exfiltration, malware, viruses, and other cyber threats. Versa's SSL/TLS proxy ensures that even encrypted traffic adheres to compliance and security policies, without compromising user privacy or data integrity. This functionality is integral for maintaining a high-security standard across an enterprise’s network, particularly important in a landscape where encrypted traffic is increasingly used for both legitimate and malicious purposes. Key capabilities include:

• SSL Inspection for invalid, expired, untrusted certificates
• HTTPS Proxy
• SSLv4 & TLS 1.2 Proxy

Versa Networks' Stateful Firewall capabilities within its SD-WAN solution provide enhanced network security by monitoring and maintaining the state of active network connections. This feature allows the firewall to intelligently control and filter traffic based on the context of sessions, ensuring that only legitimate and secure data packets are allowed to pass through. The stateful inspection includes support for various protocols, address objects, and services, along with geo-location and time-of-day based rules and policies. Additionally, it offers advanced protections such as DoS (Denial of Service) protection, Syn-cookies, and port scan detection, ensuring comprehensive security across the enterprise's distributed network infrastructure. Key capabilities include:

• Zone and endpoint based stateful firewall
• 5 tuple flows based (zone, address, user, region), Geo-IP, blacklisting
• Rich actions (accept, drop/discard, rate-limit, log)
• ALG support
• Flow Mirroring
• IPv6 support

Versa Networks' URL and content filtering capabilities within its SD-WAN solution provide comprehensive control over web access and content security. These features enable the filtering of websites and online content based on URLs, categories, and reputations, ensuring that users can only access appropriate and safe websites. This is crucial for protecting against web-based threats, enforcing compliance with corporate internet usage policies, and preventing access to malicious or non-work-related sites. Additionally, Versa's solution offers customizable filtering options, allowing organizations to tailor the filtering criteria to their specific needs, and includes capabilities for blacklisting and whitelisting sites, as well as enforcing safe search parameters. These URL and content filtering tools are integrated seamlessly into the SD-WAN architecture, contributing to a secure and productive network environment. Key capabilities include:

• Predefined/user defined categories and actions
• Whitelist/blacklist
• Search patterns/strings
• Web reputation feeds
• Reputation/category based actions / captive portal
• URL filter based captive portal w/ rich set of actions
• Intelligent Path selection based on URL category
• Custom action messages
• IPv6 Support (URL Identification and Traffic Engineering)
• IPv6 Support (Categoization and Reputation)

Versa SD-WAN provides granular management of network traffic based on user identities and group memberships. This set of feature allows network administrators to create and enforce specific policies that tailor bandwidth and access privileges for different users and groups within an organization. Such capabilities ensure optimized network performance and enhanced security by aligning network resources and access rights with individual roles and business requirements, thereby improving both efficiency and compliance. Key capabilities include:

• User/Group based policies with support for Active Directory & LDAP
• Kerberos, Captive Portal Form, Oauth, SAML SP support
• SD-WAN QoS Control support by User-ID, Group
• SD-WAN Traffic Engineering Policy Control support by User-ID, Group
• SD-WAN L7 SLA policy based traffic engineering by User-ID and Group

VersaAI™ enhances traditional data loss prevention methods with AI-assisted technologies. This includes safeguarding sensitive data from being uploaded to generative AI tools and evolving DLP beyond pattern recognition to intent-based policies using advanced LLMs for more accurate detection and categorization of sensitive data.

Versa utilizes AI to preemptively address network challenges, predict network capacity needs, raise proactive alarms, and provide intelligent alerting for efficient network management. In addition, we leverage generative AI across our own LLM to facilitate user interaction with the system for troubleshooting and operational support, enhancing productivity and providing guided access to documentation and knowledgebase.

VersaAI™ offers a comprehensive solution to secure and manage complex enterprise networks effectively and efficiently. It excels in advanced threat detection, analyzing a broad spectrum of data within a unified data lake for optimal security. Notable features include Versa User Entity Behavior Analytics (UEBA) for anomaly detection and automated response to high-risk activities, AI/ML-enhanced Malware Detection for real-time threat identification, and AI-powered Adaptive Software-Defined Microsegmentation for isolating threats and enforcing Zero Trust access controls.

Versa Networks' AIOps capabilities within its SD-WAN framework represent a cutting-edge approach to network management and optimization. Leveraging artificial intelligence and machine learning, Versa's AIOps facilitates automated network analysis, enabling proactive identification and resolution of potential issues before they impact network performance. This intelligent system continuously monitors network conditions, user behavior, and application performance, providing insights for optimizing traffic routing, bandwidth allocation, and overall network efficiency. Additionally, Versa's AIOps enhances security by detecting and responding to anomalous network patterns, thereby maintaining a high level of performance and security across the enterprise’s SD-WAN infrastructure.

Versa Networks' SD-WAN solution features robust API (Application Programming Interface) capabilities, designed to enhance interoperability and automation within network infrastructures. These APIs allow for seamless integration with third-party applications, management systems, and orchestration tools, enabling a more flexible and customizable network environment. Through these APIs, network administrators can automate routine tasks, efficiently manage configurations, and rapidly deploy services across the network. The versatility of Versa's API capabilities ensures that enterprises can adapt their SD-WAN solutions to evolving business needs and technological advancements, fostering a dynamic and responsive network ecosystem.

Versa Networks' SD-WAN solution includes powerful automation templates and workflow capabilities, streamlining network management and reducing operational complexity. These templates allow network administrators to pre-define configurations and policies, facilitating rapid deployment across multiple sites with consistent and error-free settings. The automated workflows enable efficient orchestration of routine tasks, such as policy updates, network adjustments, and service rollouts, ensuring operational consistency and reducing manual intervention. This automation not only accelerates deployment and response times but also enhances overall network agility, making Versa's SD-WAN solution highly adaptable to changing network demands and business requirements.

Versa Networks' SD-WAN solution offers comprehensive analytics capabilities, providing deep insights into network performance, usage patterns, and security posture. These analytics tools collect and analyze data across the entire network, including WAN edge, cloud, campus, and remote locations, enabling detailed visibility into traffic flows, application performance, and user behavior. With real-time and historical data analysis, network administrators can identify trends, pinpoint bottlenecks, and detect potential security threats. This level of analytics empowers businesses to make data-driven decisions, optimize network performance, enhance security measures, and improve overall user experience across their SD-WAN infrastructure.

Versa Networks' SD-WAN solution includes template-based provisioning capabilities, designed to simplify and streamline the network deployment process. These templates allow network administrators to define standard configurations and policies that can be rapidly applied across multiple devices and sites. This approach significantly reduces manual configuration efforts, minimizes the potential for errors, and ensures consistency in network settings. By leveraging template-based provisioning, organizations can quickly scale their network infrastructure, maintain uniformity in deployment, and accelerate the rollout of new services or updates, enhancing operational efficiency and network management efficacy.

Versa Networks' SD-WAN solution incorporates Zero Touch Provisioning (ZTP), a feature that significantly simplifies the deployment of network devices and services. ZTP enables automatic configuration of SD-WAN devices as soon as they are connected to the network, without the need for manual intervention by IT staff. This process includes the automatic download and application of pre-defined configuration settings, making the deployment process faster, more efficient, and less prone to human error. The use of ZTP in Versa's SD-WAN solution allows for rapid scaling of network infrastructure, seamless integration of new devices, and reduced operational costs, all contributing to a more agile and responsive network environment.

Versa Networks' SD-WAN solution offers highly flexible deployment and topology options to accommodate a wide range of business and network requirements. Organizations can choose from various deployment models, including on-premises, cloud-based, or hybrid solutions, allowing for tailored implementation that aligns with specific operational needs and scalability goals. In terms of network topology, Versa supports multiple configurations such as hub-and-spoke, full mesh, or partial mesh, providing versatility in network design to optimize performance and redundancy. This flexibility ensures that enterprises can create a customized SD-WAN environment that efficiently supports their unique network architecture, traffic patterns, and application priorities. Key deployment options include:

• Behind a NAT device/firewall
• Encrypted and Non-encrypted overlays with MPLS/GRE or VXLAN
• SD-WAN Controller
• WAN circuit support
• Full Mesh Topology
• Hub-Spoke Topology
• Spoke-Hub-Hub-Spoke
• Controller behind branch / hub
• Collapsed Conroller & Hub (consolidation)
• Any Topology
• Dynamic IPSec overlays
• Direct Internet Access
• Number of WAN Links

Versa Networks' SD-WAN solution includes hosted headend capabilities, offering a centralized, cloud-based approach to network management and control. This feature allows enterprises to host their SD-WAN headend infrastructure in a cloud environment, rather than on-premises, facilitating enhanced scalability, redundancy, and disaster recovery. The hosted headend provides centralized orchestration and management of the SD-WAN network, enabling efficient deployment of policies, configurations, and updates across the entire network. This cloud-hosted model is ideal for businesses seeking to reduce their on-site hardware footprint and operational complexity while gaining the benefits of cloud agility and resource optimization.

Versa Networks' SD-WAN solution offers robust multi-tenancy capabilities, making it an ideal choice for service providers and large enterprises managing multiple distinct networks or customer environments. This feature allows for the creation of separate, secure tenant environments within a single deployment, ensuring data and configuration isolation for each tenant. Multi-tenancy in Versa's SD-WAN enables efficient resource utilization and simplified management while maintaining privacy and security across different organizational units or customer groups. This capability is particularly beneficial for managed service providers who need to deliver customized services to multiple clients using a shared infrastructure, ensuring operational efficiency without compromising on security or performance.

Versa Networks' SD-WAN offering is "SASE Ready," indicating its readiness to integrate with the Secure Access Service Edge (SASE) architecture, a growing trend in network and security infrastructure. This readiness means that Versa's SD-WAN solution is designed to seamlessly converge network and security services in the cloud, aligning with the core principles of SASE. It provides the foundation for organizations to integrate advanced security features such as firewall-as-a-service, secure web gateway, cloud access security broker, and zero-trust network access directly into their SD-WAN infrastructure. Versa's SASE Ready capabilities enable businesses to adopt a more holistic, agile, and secure approach to managing their distributed network environments, ensuring both performance and protection are optimized across all locations and users.

Versa Networks' SD-WAN solution is designed to support large-scale deployments, with the capacity to efficiently manage over 20,000 locations. This capability makes it an ideal choice for enterprises with extensive geographic footprints, including multinational corporations and large retail chains. The solution provides centralized control and visibility, ensuring consistent policy enforcement, performance optimization, and security across all sites. Such scalability, combined with Versa's advanced networking and security features, enables organizations to maintain robust, unified network management and operational efficiency, even in highly distributed and diverse network environments.

Versa Networks offers comprehensive customer support for its SD-WAN solutions, ensuring clients receive timely and effective assistance for their network operations. This support includes access to a knowledgeable technical team for troubleshooting, configuration guidance, and optimization recommendations. Versa also provides various online resources, such as documentation, how-to guides, and FAQs, along with training and educational materials to help customers maximize the benefits of their SD-WAN deployment. Additionally, for critical issues, Versa offers dedicated support channels with prompt response times, ensuring that any challenges in the network are addressed swiftly to minimize impact on business operations.

Versa Networks' SD-WAN solution boasts extensive ecosystem integration capabilities, designed to seamlessly interact with a wide range of third-party software, hardware, and cloud services. This interoperability allows businesses to integrate Versa's SD-WAN with existing IT infrastructure, including cloud platforms, security systems, and network management tools, facilitating a unified and efficient network environment. The solution's API-driven architecture enables custom integrations, automation, and streamlined operations across various network components and applications. These ecosystem integration capabilities ensure that Versa's SD-WAN can adapt to diverse technological landscapes, allowing organizations to leverage new technologies and services without disrupting their existing network infrastructure.

Versa Networks' SD-WAN solution includes high-performance appliances designed to meet demanding enterprise network requirements. These appliances demonstrate superior benchmarks in terms of throughput, packet processing speed, and concurrent sessions, ensuring efficient handling of high traffic volumes. They are engineered to support advanced network functions like deep packet inspection, encryption/decryption, and complex routing with minimal latency, maintaining optimal performance even under heavy load. The scalability and reliability of these appliances make them well-suited for diverse enterprise environments, from small branch offices to large data centers, providing the backbone for a robust and high-performing SD-WAN infrastructure. Check out our hardware data sheets for specific benchmark data.

Versa Networks' SD-WAN solution is recognized for its high-performance benchmarks, setting industry standards in terms of speed, reliability, and scalability. The solution is engineered to handle high volumes of network traffic efficiently, ensuring minimal latency and maximum throughput, which is crucial for bandwidth-intensive applications and large-scale enterprise operations. Versa's SD-WAN architecture is optimized for peak performance, even in complex network environments, supporting advanced features like deep packet inspection and real-time traffic management without compromising speed. Furthermore, the robustness of Versa's SD-WAN ensures consistent performance across thousands of sites, making it a reliable choice for enterprises demanding high availability and uninterrupted service.

Versa Networks' SD-WAN solution offers comprehensive support for IPv6, the latest version of the Internet Protocol, ensuring future-proof network architecture and expanded addressing capabilities. This support enables seamless handling of IPv6 traffic alongside IPv4, providing flexibility and compatibility with modern network infrastructures and internet services. Versa's SD-WAN facilitates smooth transition and coexistence strategies for networks migrating from IPv4 to IPv6, ensuring no disruption in service. The inclusion of IPv6 support in Versa's SD-WAN solution is critical for meeting the growing demand for IP addresses, particularly in large-scale and globally distributed enterprise environments.

Versa Networks offers a suite of professional and advanced services to support the deployment, optimization, and management of its SD-WAN solutions. These services include expert consultation for network design and planning, ensuring that the SD-WAN architecture aligns with specific business objectives and requirements. The advanced services provide in-depth technical support, including custom configuration, performance tuning, and security optimization, to maximize the efficiency and effectiveness of the SD-WAN deployment. Additionally, Versa's professional services team assists with ongoing management and troubleshooting, offering specialized expertise to ensure smooth operation and quick resolution of any network issues, thereby enhancing the overall value and impact of the SD-WAN solution for businesses.

Versa Networks' SD-WAN solution features a single pane of glass management interface, offering a centralized and intuitive platform for overseeing the entire network. This unified management console provides comprehensive visibility into network performance, security, and configuration across all branches and deployment sites. Administrators can easily monitor traffic flows, manage policies, and troubleshoot issues from this centralized dashboard, significantly simplifying network operations. The single pane of glass approach streamlines the management process, enabling efficient and effective control of the SD-WAN infrastructure, and enhances decision-making through real-time analytics and reporting.

Versa Networks' SD-WAN solution boasts unified policy capabilities, enabling a cohesive and streamlined approach to network management and security. This feature allows administrators to create and enforce consistent network policies across all locations and devices from a single interface, ensuring uniformity in security, access control, and application usage. The unified policy framework simplifies the complexity of managing diverse network environments, particularly for organizations with multiple branches or global operations. It also enhances security and compliance by ensuring that all network segments adhere to the same standards and protocols, reducing the risk of configuration errors and vulnerabilities.

Versa Networks' SD-WAN incorporates a unified data lake, a centralized repository that aggregates a wide range of network data across the entire infrastructure. This data lake collects information from various sources, including WAN edge devices, cloud services, and campus or remote locations, providing a comprehensive view of network performance, security, and user behavior. The integration of this vast array of data into a single data lake enables advanced analytics and AI-driven insights, facilitating more informed decision-making and proactive network management. By leveraging this unified data resource, Versa's SD-WAN solution can offer enhanced visibility, improved troubleshooting capabilities, and more effective optimization of network resources and policies.

Versa Networks' SD-WAN solution demonstrates a strong commitment to security and regulatory compliance, as evidenced by its adherence to several key certifications. It is compliant with ISO 27001, a prestigious standard for information security management systems, ensuring a systematic and consistent approach to managing sensitive company and customer information. Versa's solution also meets the requirements of SOC 2 Type II, which focuses on the security, availability, processing integrity, confidentiality, and privacy of customer data. Additionally, it aligns with the Common Criteria EAL4+ (Evaluation Assurance Level 4), providing a high level of assurance in the product's security architecture, and FIPS 140-2, a U.S. government standard that certifies cryptographic modules are secure and suitable for handling sensitive information. These certifications underscore Versa's commitment to maintaining the highest levels of security and compliance in its SD-WAN offerings.

Versa Networks' open hardware strategy signifies a flexible and forward-thinking approach to networking and security hardware. This strategy allows customers to deploy Versa's software solutions on certified hardware platforms from approved vendors. By embracing an open hardware model, Versa ensures that its customers are not locked into a specific hardware ecosystem, offering them the freedom to choose hardware based on their performance needs, budget constraints, and existing infrastructure. This approach not only enhances cost-effectiveness and choice for clients, but also fosters a more adaptable and future-proof network environment, accommodating evolving business needs and technological advancements. Hardware options include:

• Versa CSG Appliances for SD-WAN
• Versa CSX Appliances for SD-LAN
• Dell Appliances

Versa Networks' SD-WAN solution offers robust high availability support, ensuring maximum network uptime and resilience. This support includes redundant configurations and automatic failover mechanisms, which minimize the impact of hardware failures, link outages, or other disruptions. The system continuously monitors the health and performance of network paths and devices, enabling real-time switching to backup options in the event of an issue. This high availability feature is essential for maintaining continuous business operations and providing reliable connectivity, especially in critical enterprise environments where downtime can have significant operational and financial consequences.

Versa Networks' support for LTE and 5G encompasses seamless integration with these cellular technologies, providing additional connectivity options for SD-WAN deployments. This capability ensures resilient failover and bandwidth augmentation, leveraging high-speed wireless connections to maintain uninterrupted service and optimal performance. Versa's incorporation of LTE and 5G is essential for modern enterprises looking for flexible, reliable, and fast network solutions, especially in remote or mobile environments where traditional connectivity may be limited or unavailable. Key capabilities include:

• LTE or 5G support as primary interface
• LTE or 5G support as backup interface
• Multiple LTE / 5G modems

Versa Networks' SD-WAN solution offers rich interface support, accommodating a wide variety of network connection types and protocols. This includes support for Ethernet, MPLS, LTE/5G, satellite, broadband, and Wi-Fi, among others, allowing businesses to leverage diverse connectivity options for their network architecture. The solution's flexibility in interfacing with different transport mediums ensures seamless integration with existing network infrastructure and facilitates easy adaptation to evolving connectivity needs. Moreover, this extensive interface support enables Versa's SD-WAN to provide reliable, high-performance connections across varied geographic locations and deployment scenarios, enhancing network agility and resilience. Key interface features include:

• VLAN tagging - single tags, dual tags
• Aggregated Ethernet (on LAN interfaces)
• PPPoE
• T1/E1 interfaces
• PPP on T1/E1 interfaces
• Frame Relay on T1/E1 interfaces
• HDLC on T1/E1 interfaces (CSG platforms only)
• Multi-link PPP on T1/E1 interfaces
• ADSL2+/VDSL2 interface support (CSG platforms only)
• ATM over xDSL interfaces

The Versa Operating System (VOS) underlying Versa Secure SD-WAN employs a single pass architecture, a highly efficient framework that streamlines network operations. In this architecture, data packets are inspected and processed just once, regardless of the number of security and routing services applied. This approach significantly reduces latency and improves overall network performance, as it eliminates the need for packets to traverse multiple, discrete processing stages. The single pass architecture also simplifies the network's complexity, leading to easier management and maintenance, while ensuring comprehensive security and policy enforcement across the network traffic.

Versa Networks' SD-WAN solution includes Universal Customer Premises Equipment (uCPE) capabilities, offering a versatile and consolidated networking platform for enterprise environments. The uCPE integrates multiple network functions into a single hardware device, including routing, firewall, SD-WAN, and WAN optimization. This convergence simplifies the network infrastructure, reduces the need for multiple dedicated hardware devices, and offers greater flexibility in deploying and managing network services. Versa's uCPE is designed for easy deployment and management, supporting a range of virtual network functions (VNFs) that can be dynamically added or updated, enabling businesses to rapidly adapt to changing network requirements and technologies.

Versa Networks' integration of WiFi support in its SD-WAN solution enables seamless and efficient wireless connectivity within the network infrastructure. This feature allows for easy integration and management of WiFi as part of the overall SD-WAN deployment, ensuring consistent policy enforcement, security, and performance management across both wired and wireless connections. Such support is crucial for businesses seeking a unified network approach that accommodates the growing prevalence of wireless devices and the need for flexible, scalable connectivity options in diverse environments. Key capabilities include:

• WiFi AP support
• Multiple SSID support