Moving Beyond the Router to a Thin-branch or Application-driven SD-WAN
- 1. © 2018 Silver Peak Systems, Inc. All Rights Reserved.1 Moving Beyond the Router to a Thin-branch or Application- driven SD-WAN Simon Pamplin Director, Technical Sales EMEA [email protected]
- 2. © 2018 Silver Peak Systems, Inc. All Rights Reserved.2 BOOTH COMPETITION 1. What two features help us achieve Private Line Reliability over Broadband? 2. What are the 4 building blocks added to SDWAN that make it the Market leading SDWAN Solution? 3. What is the failover time if one of the physical links in the WAN goes down? 4. What licensed feature can add optimization to the SDWAN solution?
- 3. © 2018 Silver Peak Systems, Inc. All Rights Reserved.3 SILVER PEAK AT-A-GLANCE Best-in-Class WAN Solution Portfolio • Hardware, software, and cloud-based offerings • SD-WAN, WAN optimization, and replication acceleration • Highly scalable multi-tenant service provider solutions • 24 / 7 / 365 follow-the-sun support and logistics • Recognized as most visionary Gartner MQ leader Industry-leading Technology Alliances • Network and SD-WAN • Storage, security and SAN • Founded in 2004 • David Hughes (Founder and CEO) • 50+ patents for WAN innovations • Profitable and growing rapidly • Global channel partner ecosystem across 81 countries Leader in Broadband and Hybrid WAN Solutions Serving the World’s Most Demanding Businesses • 2,000+ global customers in 77 countries • 700+ new SD-WAN customers Focused on building a better Wide Area Network (WAN)
- 4. © 2018 Silver Peak Systems, Inc. All Rights Reserved.4 BACK IN THE 1980’S…….
- 5. © 2018 Silver Peak Systems, Inc. All Rights Reserved.5 “CLOUD FIRST” STRATEGY 78%Workloads in Cloud data centers by 2018 70%Have 2 or 3 WAN connections per branch Source: IDC, Cisco Cloud Index, Gartner 80%Of business transacted from branch offices
- 6. © 2018 Silver Peak Systems, Inc. All Rights Reserved.6 SD-WAN – MORE THAN JUST COST SAVINGS 50%WAN Edge Refresh based on SD-WAN (vs. legacy routers) by 2020 Source: Gartner
- 7. © 2018 Silver Peak Systems, Inc. All Rights Reserved.7 BUILDING BLOCKS FOR A BETTER WAN SD-WAN Performance Visibility Extensible Security Internet (~50 – 200Mbps) MPLS (~1.5 – 10Mbps) 4G / LTE Bonded Tunnels Packets Out-of- Order Packet Lost 123P Lost Packet Rebuilt from Parity 123P 123P **Packet Order Correction 123 12 3 23 1 12 3 Detect Out-of-Order **Forward Error Correction Brownout Aware Packet Based Multipathing Resiliency or Throughput Emphasis
- 8. © 2018 Silver Peak Systems, Inc. All Rights Reserved.8 BUSINESS INTENT OVERLAYS Virtual WAN overlays built for applications based on business priority TOPOLOGY WAN PATH SLAAPPLICATIONOVERLAY BONDING POLICY QOS SECURITY POLICY BOOST MPLS Internet LTE (Backup) 1% Loss 150ms Jitter 300ms Latency Mesh High Availability Real- Time Real-Time REAL-TIME Trust 2% Loss 200ms Jitter 500ms Latency Hub and Spoke High Throughput Interactive MPLS Internet LTE (Backup) ENTERPRISE APPS Enterprise Trust ✔ None Local Internet Breakout High Efficiency Best Effort GUEST WIFI Internet Send to SWGDrop Internet None Local Internet Breakout High Efficiency Best Effort Internet MPLS (Backup) WEB TRAFFIC Internet Stateful Firewall
- 9. © 2018 Silver Peak Systems, Inc. All Rights Reserved.9 CIO: “PRIORITIZE OFFICE 365 AS HIGH PRIORITY” Without SD-WAN Administrator must login to each device at each site to define Office365, create QoS configuration and apply it to the appropriate networks. SD-WAN Administrator defines the new QoS policy in the Orchestrator and then applies it across the entire network. Orchestrator High Priority QoSNew Policy Checklist Define App Create Configuration Apply Configuration Repeat * Number Sites
- 10. © 2018 Silver Peak Systems, Inc. All Rights Reserved.10 Untrusted or Suspicious Apps • Backhaul to HQ-based next-gen firewall and IDS/IPS • Advanced security screening required “Home from Work” or Recreational Apps • Steer to secure web gateway • Web-based security screening to protect intellectual property Trusted Business Apps • Steer directly to internet from branch • Built-in stateful firewall protects branch from threats CLOUD APP SECURITY POLICY EXAMPLE It’s all about the apps, but…not all cloud apps are equal Security Policy Security Policy Security Policy
- 11. © 2018 Silver Peak Systems, Inc. All Rights Reserved.11 PROTECT BRANCHES • Zone-based stateful firewall – Segment network into zones spanning the LAN and WAN – Only allow connections initiated at the branch – Block unauthorized incoming connections – Exception: whitelist ports for known trusted apps, e.g. remote management of a printer or teleconferencing system • Complements simple service chaining to secure web gateways and next-generation firewalls Integrated stateful firewall for branches that do not host applications ISP Corporate NG-Firewall HQ / Hub Branch EdgeConnect
- 12. © 2018 Silver Peak Systems, Inc. All Rights Reserved.12 DIRECT-TO-NET FOR HIGHEST SAAS PERFORMANCE Trusted Business Apps “Home From Work” Apps Untrusted / Suspicious Apps Granular Internet Breakout First Packet IQ EdgeConnectBranch HQ / Hub / Data Center Custom Apps Application-driven traffic steering requires first-packet application identification Steer Apps Intelligently Intelligent breakout of SaaS and trusted web traffic directly from the branch Improve App Response Time Avoid added latency through direct access to where the app resides Reduce Backhaul Backhaul only untrusted traffic to corporate FW Save Valuable WAN Bandwidth Avoid consumption of expensive MPLS circuits where not necessary 6 5 4 3 2 1 10,000+ Apps | 300 Million+ Web Domains
- 13. © 2018 Silver Peak Systems, Inc. All Rights Reserved.13 DAILY INTERNET MAP UPDATES 1. Internet map update 2. New addresses updated in Cloud Portal 3. Orchestrator polls and downloads latest version daily 3. Upon notification, EdgeConnect appliance loads latest version dynamically and non-disruptively Unity EdgeConnect Orchestrator Cloud Portal
- 14. © 2018 Silver Peak Systems, Inc. All Rights Reserved.14 SINGLE PANE, NETWORK WIDE VISIBILITY
- 15. © 2018 Silver Peak Systems, Inc. All Rights Reserved.15 WHAT IS SD-WAN IN 2018? ONE PLATFORM VLANs DHCP Zone Based Firewall Business Intent Routing WAN Optimization Internet QoS Using Any Circuit Type (Broadband, DIA, MPLS, LTE) WAN Routing Integration Orchestrated across thousands of appliances, through a single pane of glass, driven by simple business intent policies. Orchestrator WANFirst Packet Visibility LAN Secure Internet Breakout LAN Routing Integration Network Segmentation Network Analytics
- 16. © 2018 Silver Peak Systems, Inc. All Rights Reserved.16 LEGACY BRANCH WAN EDGE Firewall SD-WAN Appliance Router WAN Opt Appliance LAN Switch • Network-driven • Rigid • Complex • Inefficient • Expensive Same way we designed networks in the 80’s
- 17. © 2018 Silver Peak Systems, Inc. All Rights Reserved.17 COMPLETE APP-DRIVEN THIN BRANCH SOLUTION Simplifying the WAN edge while improving business agility and productivity LAN Switch 240 mm EdgeConnect XS 124 mm EdgeConnect US • Application Focused Network • Streamlined Management • Simple, Agile • Cost-effective • Improved Application Performance and Availability
- 18. © 2018 Silver Peak Systems, Inc. All Rights Reserved.18 Inflexible model based on legacy routers • Requires specialized IT expertise to configure and manage • Expensive and hard to manage and maintain • Network-driven that makes it difficult to respond quickly to business needs Traditional Campus WAN THE THIN WAN EDGE Increase bandwidth and app availability, reduce WAN footprint, streamline management Traditional Campus WAN WAN Optimization RouterSwitch SD-WAN InefficientComplex ExpensiveInefficientComplex Expensive Firewall • Business level intent architecture responds quickly to business needs • Simplified architecture and management that drastically reduces IT time required to operate a site • Orchestrated and consolidated network functions resulting in tremendous savings • Enables using cost-effective and reliable broadband connectivity to access critical apps Thin Campus WAN Edge Thin Campus WAN Edge Switch Simple Agile Cost- Effective Simple Agile Cost- Effective
- 19. © 2018 Silver Peak Systems, Inc. All Rights Reserved.19 Thank You
- 20. © 2018 Silver Peak Systems, Inc. All Rights Reserved.20 BOOTH COMPETITION 1. What two features help us achieve Private Line Reliability over Broadband? 2. What are the 4 building blocks added to SDWAN that make it the Market leading SDWAN Solution? 3. What is the failover time if one of the physical links in the WAN goes down? 4. What licensed feature can add optimization to the SDWAN solution?