Secure Access Service Edge, or SASE, is an emerging cybersecurity concept. In this video, you understand how the key capabilities of SASE address the demands of growing network sprawl and the challenges of digitally transforming your business.
Versa has made it simple for organizations to offer Secure SD-WAN for Work-From-Home users on home appliances or working from anywhere
A large, publicly traded energy company operating in all areas of the oil and gas industry has dramatically simplified their network stack and realized huge cost savings with Versa SASE.
EMA evaluates the different SASE vendors and their approaches to architecture, go-to-market, and support for their cloud-delivered and hybrid services.
Gartner 2020 Magic Quadrant report analyzes the various vendors in the WAN edge market and Versa is positioned as a Leader.
Learn about the Versa Secure SD-WAN solution in a high-level, one minute overview.
SASE is the simplest, most scalable way to continuously secure and connect the millions points of access in and out of the corporate resources regardless of location
Versa Secure SD-WAN is a single software platform that offers multi-layered security and enables multi-cloud connectivity for Enterprises.
The hallmarks of SD-WAN are simplified branch office connectivity, increased reliability, optimized application performance, and increased network agility. SD-WAN lowers total costs, by providing more resource usage and a more automated branch and WAN architecture that is required to fulfill modern IT business initiatives.
SD-WAN aggregates diverse network circuits, like broadband, DIA, and LTE. These circuits can be added to existing MPLS to create a hybrid network, or they can be an alternative to MPLS using all-Internet wired and wireless connections.
SD-WAN creates an overlay to virtualize the WAN with centralized control to simplify the management and deployment of branch-office services.
SD-WAN creates a WAN transport agnostic overlay network and can replace legacy branch office routers simplifying the WAN infrastructure. SD-WAN provides greater control and management, providing application-layer control of application service policies, to ensure optimum application performance.
A key element of SD-WAN is application-awareness. SD-WAN understands individual applications and their SLA requirements and translates them into policies that the network must adhere to. This provides active network and application experience monitoring that ensures optimal traffic delivery and QoE – whether on-premises, private/public cloud, or SaaS.
SD-WAN also provides an automated policy-based framework that is propagated from unified control and management, all from a single-pane-of-glass interface. Visibility is enhanced, allowing better IT insights into applications, devices, users, and networking, to ensure adherence to their business goals and objectives. This simplifies ITs ability to define, control, and change business requirements across their branches, data centers, and cloud/SaaS.
SD-WAN solutions often offer the following:
Rather than spending time and resources tediously by configuring and managing networks, an effective SD-WAN solution allows enterprises to focus on deploying applications, like IoT, VoIP, unified communications, and edge computing services.
Focusing on improving these business-oriented services, rather than managing WAN complexities, IT can add these (OTT) services to automated and programmable cloud-native platforms. Secure SD-WAN is a cloud-native platform that provides IT with an automated policy-driven, virtual WAN infrastructure. This transforms the network from a bottle-neck impediment to a business service implementation engine.
Secure SD-WAN is a transformative technology that simplifies IT infrastructure control and management by delivering a virtual WAN architecture that securely connects users to their applications.
A comprehensive demonstration providing you with the basics of Versa terminology, device onboarding, application service templates, security, and troubleshooting.
Quick video to show how easy and intuitive it is to configure connectivity for Microsoft Azure vWAN and Versa Secure SD-WAN branch sites.
Secure SD-WAN adds features that provide a self-healing architecture all while natively inserting network and security functions into the WAN. Secure SD-WAN accomplishes this by being application user-experience driven, monitoring the applications and network, and improving and increasing the security posture with an integrated platform.
Driven by application-based policies, the WAN and branch dynamically adapt to ensure network uptime, application reliability, and optimal user experience all while protecting the organization from threats and vulnerabilities.
Benefits and advantages specific to Versa Secure SD-WAN:
Secure multi-cloud connectivity that supports cloud-to-cloud, branch to multi-cloud, and business to multi-cloud
Embedded and robust next-generation security features such as Universal Threat Management and Role-Based Access Control
Micro-segmentation across the entire network to reduce risk zones and lateral movement
Secure private/public cloud connectivity, regardless of cloud platforms, applications, and transports
Full multi-tenancy for micro-segmentation of line of business, tenant, and control, with unique policies per segment
Context-based network and security policies, and traffic steering, based on users, devices, locations, and applications
Cloud, virtualization, mobility, IoT, and the use of artificial intelligence and machine learning are all contributing massive amounts of traffic and data over enterprise WANs. Unfortunately, they are also creating network reliability and performance challenges and causing security breaches by exponentially expanding the attack surface.
These technologies have created the need for a simplified and consolidated IT infrastructure. Robust cloud-native VNF-based network and security services are needed in the service provider core, or central enterprise IT infrastructure, and within the network edges.
Secure SD-WAN enables flexibility to be deployed as the uCPE platform to host other services, or as a VNF on a third-party uCPE or virtualization platform. Secure SD-WAN has the routing, SD-WAN, analytics, security, and more, all within a single software platform.
This provides a cohesive, virtualized network, and a multi-layered security approach that eliminates siloed, single-function appliances that add unnecessary risk, complexity, and cost.
Any multi-location or digital-first organization that uses the WAN to communicate and connect with employees, customers, and partners, should have the business objectives directly influencing its entire WAN fabric. Yet, enterprise WANs, for the most part, unintentionally hinder their business goals. A legacy WAN becomes the bottleneck for the business operations because of an archaic approach to policy creation, adherence, and execution.
With an SD-WAN-driven network, business intent and application experience drive the underlying policy architecture, automates the deployment, and creates a dynamic environment that can quickly adhere and execute on the business objectives.
So, how does an enterprise WAN adhere to become driven by business intent quickly and dynamically? Two key components are required to accomplish this; a business-aware architecture, and a simplified and consolidated platform.
Secure SD-WAN addresses network challenges by providing a secure cloud IP platform that simplifies management and administration. Secure SD-WAN brings business goals and intent into the WAN through our business-aware architecture. Secure SD-WAN simplifies network and security infrastructure with a multi-purpose platform with native networking and security apps and services capabilities.
Secure SD-WAN removes the complexity of maintaining uniform policies by ensuring that all policies are up-to-date and fit their objectives across all disparate platforms:
SD-WAN is different from SDN because it is used for connecting geographically distributed locations, sites, and remote users while an SDN is used for managing Local Area Networks (LAN) or carrier’s core networks.
Because SDN is primarily used in traditional data centers, SDN enables services on-demand, reducing the high operational costs all while improving the network performance. SD-WAN differs by being a cost-effective alternative to the traditional Multiprotocol Label Switching (MPLS) networks by providing scalable and secure connectivity anywhere in the world. Essentially, SD-WAN performs SDN functions but for the Wide Area Network (WAN).
Both SDN and SD-WAN serve a similar purpose and are based on the same architecture of separating the control and data forwarding planes. Both SDN and SD-WAN can be virtualized to implement additional Virtual Network Functions (VNF) such as firewall and unified threat management functionality as well as WAN optimization.
Here is a breakdown of the two technologies:
| SDN | SD-WAN |
|---|---|
| Used for on-premises data centers and service provider infrastructure | Used for branch sites and remote users as well as data centers |
| Configured by a user or administrator | Configured and managed by the vendor |
| Delivers high-bandwidth on-demand | Delivers secure access and intelligent traffic prioritization |
| Provides a centralized console for orchestration and control | Provides a centralized console for orchestration, control, and zero-touch provisioning |
| Underpins core network infrastructure | Underpins existing Virtual Private Networks (VPN) |
| Leverages a variety of commodity and specialized switching hardware | Leverages off-the-shelf x86 appliances – physical, virtual, cloud |
| Reduces OpEx Costs | Reduces both OpEx and CapEx costs |
The major distinction between SD-WAN and MPLS is that SD-WAN is a virtualized infrastructure and MPLS is hardware-based. SD-WAN is often times considered the software abstraction of MPLS technology that brings secure, private connection to branch sites and remote users. MPLS is more expensive, dedicated to a specific organization, and handles failover with backup links. SD-WAN, on the other hand, is more cost efficient by handling multiple types of network connections and handles failover with real-time traffic steering and intelligence.
Both SD-WAN and MPLS offer network performance, quality, and availability to data centers and branch offices. SD-WAN often manages MPLS connections along with other types such as broadband, long-term evolution (LTE), and route traffic over the best available path in real-time. Both options offer reliable, secure, and private connections but differ greatly in flexibility, costs, and capabilities.
Here is a breakdown of the two technologies:
| MPLS | SD-WAN |
|---|---|
| Traffic is backhauled to the datacenter | Traffic can be routed to branch without backhauling |
| Dedicated private network with limited but reliable bandwidth | Multiple transport media are available: DIA, Broadband, LTE, MPLS, and more |
| Data partition but no encryption | Encrypted VPN tunnels |
| Higher costs due to predetermined paths and hardware | Lower costs due to traffic steering and software |
| User experience and application performance is affected by traffic volume | User experience and application performance is not affected by traffic volume |
| No built-in security | Integrated security stack |
| Manual configuration and no application visibility | Real-time automation and analytics for visibility |
Network architectures have always found ways to adapt to changing business dynamics to address modern requirements. Legacy WANs are no longer adequate to meet business needs and most organizations are deploying a hybrid WAN architecture. Hybrid WANs benefited from adopting a software-defined approach, which led to the automation, agility, and increased intelligence from SD-WAN architecture.
Today, SD-WAN has gained greater value through being delivered and managed from the cloud: allowing better speed, scalability, and flexibility. Cloud-delivered SD-WAN is a powerful automated, on-demand, and proactive business approach that enterprises leverage to streamline secure connectivity services that can greatly optimize branch offices and IoT.
SD-WAN devices are better at understanding application traffic flows than legacy WAN. This optimization in application traffic flow allows an administrator to use application and identity-driven policies to make intelligent decisions that adhere to business goals and objectives.
For example: to ensure voice service is always optimal, an administrator can analyze voice traffic to determine how well the user experience is or analyze network circuits to determine how well they are performing. Then, the administrator can correlate those together to make dynamic decisions that optimally traffic steer across the WAN. Application and identity-driven policies can be contextual to who you are, what you are using, and where you are.
Secure SD-WAN ensures application security, reliability, and performance for every industry, vertical, and use cases such as enabling healthcare records, banking systems, retail POS systems, airline reservations, transportation logistics, and much more. Whether the application is for internal business operations, commerce, customer relationship management, industrial and utility systems - everything today is network connected and can be enhanced by SD-WAN.
Secure SD-WAN frees IT from single-function and proprietary hardware, eliminating the need for dedicated hardware for each network function. Virtual network services can be provisioned on a universal CPE (uCPE), using an x86-based appliance that hosts Secure SD-WAN’s software and supports 3rd-party VNFs.
Enterprises can take advantage of a software-only solution, that gives them the cost and operational flexibility, and ensures they have the control to deliver on their business objectives. Furthermore, organizations can leverage an open-standard-based cloud-native, multi-stack solution for embedded and robust network and security capabilities that optimize application performance all while increasing security hygiene. Secure SD-Wan needs to integrate with existing brownfield networks at the underlay level while providing a migration to complete Software-Defined networking on-premises and in the cloud. By doing so, enterprises can meet the demands of a modern IT landscape.
Unlike traditional WAN, SD-WAN is software-defined and comes with several advantages. First, it allows for the elimination of costly MPLS circuits. SD-WAN also enlists local internet offloading and helps get user traffic closer to cloud services.
It provides real-time traffic monitoring as well and is able to support high-bandwidth intensive applications, which can be a challenge for traditional WAN infrastructures.
No. The SD-WAN model effectively replaces a router. Traditional WANs based on conventional routers are not designed for the cloud. SD-WANs, on the other hand, fully support applications hosted in on-premise data centers, public or private clouds, and SaaS services.
No. VPNs send all traffic over a single network link. SD-WANs route traffic over multiple transport media. For enterprises that require scalability, high performance, reliability, and agility, SD-WAN is far preferred over a VPN.
Find more research, analysis, and information on SASE (Secure Access Service Edge), networking, security, SD-WAN, and cloud from industry thought leaders, analysts, and experts.