Sangfor Secure SD-WAN
Businesses with multiple locations experience increasing difficulty in managing their wide area network (WAN) as they expand. This affects crucial functions like data transmission and application access. Combined with the high costs of traditional WAN solutions, such as MPLS and leased lines, there is a clear need for a more flexible and cost-effective approach.
Software-Defined Wide Area Network (SD-WAN) offers an innovative solution to these challenges. By decoupling the control functions from the physical network, SD-WAN simplifies the management of complex, multi-branch networks.
The Sangfor Secure SD-WAN solution creates secure, efficient, and reliable connections between different locations, ensuring safe communication and access to resources. The solution’s Network Secure device acts as the gatekeeper at the network edge, controlling access and allowing only authorized traffic through. This ensures the confidentiality, integrity, and availability of data.
Challenges at Network Edges
|
Resilience |
Security |
Management |
|---|---|---|
|
Link failover leads to business interruption; |
Gaming and streaming media while at work; |
Onsite deployment and troubleshooting |
What Solution Do You Need
|
Resilience |
Security |
Management |
|---|---|---|
|
Automatic link failover; |
Application/URL filtering & Bandwidth |
Lower link and management costs; |
Secure SD-WAN Key Values
The Secure SD-WAN solution not only ensures safe connections but also enhances network security with features like IPS, Application Control, URL Filtering, APT Prevention, and Malware Inspection. The SoC Lite module continuously monitors for potential attacks and vulnerabilities, ensuring comprehensive protection against various threats.
Centralized policy and report management in SD-WAN simplifies the process of setting and overseeing network rules and generates easy-to-understand reports about network performance and security incidents, ensuring consistent and effective security measures across the network.
Network Secure’s SOFAST Optimization sends redundant packets to minimize packet loss and uses the FEC algorithm to rebuild lost packets. This reduces packet loss at the application level, ensuring an optimal access experience.
The solution offers a cost-effective alternative to traditional WAN solutions by optimizing bandwidth usage and reducing reliance on expensive MPLS links. By consolidating network and security functions into a single platform, organizations can achieve significant cost savings while improving network performance and security.
Integrating Network Secure with Endpoint Secure allows for the correlation of network and endpoint data, thereby improving the detection of security threats and attacks. Verified incidents can easily be mitigated with one click on Network Secure.
Seamlessly integrates with hybrid WAN architectures, allowing businesses to leverage multiple network connections, including MPLS, broadband, and LTE, to create a resilient and cost-effective network infrastructure.
Frequently Asked Question
An SD-WAN (software defined wide area network) is a software-defined wide-area network that allows for the use of multiple WAN technologies such as MPLS, Frame Relay, ATM, Ethernet, etc. The main benefit of enterprises using an SD-WAN product is that it allows for the deployment of different protocols across the same physical infrastructure. This makes it easier to deploy new services and keep costs down.
Hackers often target branch offices to gain initial network access because they are typically less well protected than HQ. Once the branch is compromised, hackers can move laterally to the HQ environment via the MPLS or VPN links between the branch and HQ.
| Features | Sangfor Secure SD-WAN | Traditional SD-WAN |
| 1. Offerings | ||
| Central Management | YES | YES |
| CPE | Sangfor Network Secure Firewall | SD-WAN devices or Routers |
| SaaS Access | Sangfor Access Secure | NO |
| 2. SD-WAN & Orchestration | ||
| SD-WAN Path Selection Based on SLA (Latency, Jitter, Packet Loss, Application) |
YES | YES |
| SD-WAN Path Failover | YES | YES |
| Link Load Balancing | YES | YES |
| Zero-Touch Deployment | YES | YES |
| Centralized Policy Management | YES | YES |
| Centralized Traffic Visbility & Reporting | YES | YES |
| Centralized Config Backup & Restore | YES | YES |
| 3. Security Capabilities | ||
| Application Control & URL Filtering | YES | PARTIAL |
| Bandwidth Management | YES | YES |
| Intrusion Prevention System | YES | NO |
| APT, Malware Inspection | YES | NO |
| Security Operation & Response | YES | NO |
| Endpoint Security Integration | YES | NO |
| Security Service Team/MDR | YES | NO |
| 4. WAN Optimization | ||
| FEC or Packet Dulplication for Noisy Channels | YES | NO |
| Deduplication, Caching | NO | NO |
| SaaS Application Optimization | YES | NO |
The Secure SD-WAN solution is designed for the traditional branch-HQ business model. It protects both branch offices, headquarters, and data centers from cyberattacks.
The Secure Access solution is designed for the work-from-anywhere(WFX) and hybrid business models (Cloud, SaaS, On-prem). It focuses on identity-based security with a Zero-Trust Architecture, providing secure connectivity between users and applications. It offers elastic deployment, continuous evolution, and subscription models.
Recent News and Press Releases
Find out more about Sangfor’s achievements, including industry recognition, awards, and accreditation from the world’s leading analyst firms and test institutes.
