interface贝锐sdwan官网

ThreeUseCasesForTransformingBranchesWithFortinetSecureSD-WANWHITEPAPER2ExecutiveSummaryDigitaltransformation(DX)oftraditionalbranchnetworksoffersseveraladvantagesfordistributedenterprises.
Manyorganizationsareswitchingfromperformance-inhibitedwide-areanetworks(WANs)tosoftware-definedWAN(SD-WAN)architecturesthatofferfasterconnectivity,costsavings,andotherbenefits.
ButSD-WANhasitsownchallenges.
FortinetSecureSD-WANofferedasafeatureintegratedintoindustry'sleadingNextGenerationFirewall,poweredbyindustry'sonlySD-WANASICimprovesapplicationperformance,higherperformance,andbettercostefficiency.
AccurateapplicationidentificationensurescompletevisibilityandcontrolwithSD-WANbusinesspoliciestoprovidebestuserexperienceforcriticalreal-timeandcollaborationapplications.
Integratedsecurityprovidesadvancedprotectionagainstallthreatlandscapes.
ThreecommonusescasesshowhowFortinetenablesthefullbenefitsofanSD-WANarchitecturewithoutsacrificingsecurity.
IntroductionTraditionallyconnectivitytoexternalworldforbusinessesmeantasinglededicatedserviceprovider-basedaccessforallapplicationneeds.
Thoughexpensive,controlandsecuringthisconnectionhasbeenmanageablewhileprovidingaccesstocriticalresources.
Thistechnology/infrastructurehassevereimplicationsonreliableaccesstoexternalresourcesduetosinglepointofconnectivityoftensubjecttooutages.
Inaddition,higherbandwidthdemandsbygrowingnumberofusersandtrafficintenseapplicationscausemoredisruptionsandexperiencehighlatency.
Whilethisprocess(knownas"backhauling")issecure,italsogreatlyslowsnetworkperformance.
Withrapidincreaseincloudapplications,includingSaaSsuchasgoogleandvoice/videoconferencing,itmakesmoresensetoaccessthemonpublicinternetinsteadofsendingtoanalreadyburdenedcentralizedoffice.
Thishastranslatedtobusinessesaimingtoaugmenttheirconnectivitywithmultipleprovidersormoreaffordablebroadbandandothermeansofinternetconnectivity.
BusinessesstrivetoachievesecuritysensitiveWANedgetoprotectapplicationdatawithfastercloud-on-rampforSaaSapplications.
2Withmorethan21,550SD-WANcustomers,FortinetleadsthemarketwithSecureSD-WANinnovationsandfastestgrowingvendorwithover300%YoYgrowth.
Software-definedWANsolutionhasevolvedtomakeapplicationintelligentbusinessdecisionsonhybridWANlinks,includingserviceprovider,broadband,andLTE.
Accurateapplicationidentification,visibilityintonetworkperformance,andreliableswitchoverofapplicationtrafficbetweenbestperformingWANlinkshavepivotedSD-WANasthemostsought-afterWANtechnologiesbybusinessesacrossallverticals.
EvenafterSD-WANadoption,businesseskeptsendingalltheirsensitiveandcriticalapplicationstraffictodatacentersforsecuritypurposesorwereforcedtoinstallasophisticatedfirewallsolutiontoinspecttheirdirectinternetaccess.
Thisaddedanotherpointproductforsecurity,makingthenetworkmorecomplex,challengingtomanageanddelayedcloudadoptions.
1SD-WANChallengesButwhileSD-WANoffersinherentlyfasterandcheaperconnectivitythantraditionalWANs,itisnotapanaceaonitsown.
Despiteitstransformativecapabilitiesforbranchnetworks,severalchallengesmustbeaddressedtofullyarticulateandactualizeSD-WAN'spotential:PoorUserExperience.
DigitalinnovationshasincreasedthedemandforSaaSandUCaaSapplicationswhichrequiremulti-cloudaccess.
TraditionalWANnetworkhaslimitedaccessorabackhauledconnectivitythroughdatacenterstosuchcriticalapplications.
ThiscreatesahighlatencyWANlinkswhichadverselyaffectsuserexperience.
Lackofvisibility.
SD-WANsolutionstypicallylackvisibilityintoapplicationsatthebranchlevel.
ThiscanleadtoShadowITproblems,includingSaaSapplications(unauthorizedapplicationsthatmayintroducesecurityand/orcompliancerisks),aswellasbandwidthlimitationsfrombranchuserswastingbandwidthonnonessentialapplications(e.
g.
,Pandora,YouTube).
Complexity.
InadditiontotheothertypesofcomplexitythatDXtechnologiesintroduce,SD-WANarchitecturescanbedifficulttotroubleshootandhardtomanageacrossallthebranches.
Mostsolutionsdonotofferasinglemanagementinterfaceforconsolidatednetworkoversightandcontrolacrossalloftheenterprise'sremotelocations.
ThisaddstotheburdenonlimitedITstaffandoftencreatesdefensivegapsforthreatstoexploit.
3WHITEPAPER|ThreeUseCasesForTransformingBranchesWithFortinetSecureSD-WANSecurity.
Withoutthecentralizedprotectionprovidedbybackhaulingtrafficthroughthedatacenter,movingfromMPLStodirectinternetbroadbandconnectionsexposesorganizationstonewrisks—especiallyconsideringthatcyberattacksaregrowinginbothnumberandsophistication.
EffectiveSD-WANimplementationrequiresadditionalsecuritywithintheenterpriseinfrastructuretosecurethoseconnectionsandinspecthighvolumesoftraffic—allwithoutinhibitingnetworkperformance.
Toaddressthesechallenges,oneapproachtoeffectiveSD-WANimplementationcombinesbothnetworkingandsecurityfunctionsinaunifiedsolution.
TheFortinetSecureSD-WANsolutioncanbeenabledonFortinetNGFWs.
FortiGatecombinesNGFWandSD-WANfeaturesintoasinglesolutionthatimprovesbothWANefficiencyandsecurity.
Itprovides64%ofITdecision-makersbelievedtheirorganization'sSaaSadoptionisoutpacingtheirabilitytosecureit.
3efficientprotectionacrossallbranchoutpostsbyprovidingconsistentpolicyenforcementwithsingle-pane-of-glassmanagement.
ItalsoallowsenterprisestomitigaterisksassociatedwithDX.
ThreecommonusecasesdemonstratehowSecureSD-WANcansolvekeyenterprisechallengeswhileenablinggreaterbusinessvaluefororganizations.
UseCase:ImproveApplicationExperienceBusinesseskeptsendingalltheirsensitiveandcriticalapplicationstraffictodatacentersforsecuritypurposesorwereforcedtoinstallasophisticatedfirewallsolutiontoinspecttheirdirectinternetaccess.
4Thisaddedanotherpointproductforsecurity,makingthenetworkmorecomplex,challengingtomanageanddelayedcloudadoptions.
TheneedtointegrateSD-WAN,securityandnetworkingfunctionalitiesonasingleappliancemadeabsolutesensetoreducenetworkcomplexity,associatedcosts,andeaseofmanagement.
5Thisallowedbusinessestodisplacetheirmultiplepointproductswithapowerfulapplianceatareducedcostandeaseofmanagementusingacentralizedconsole.
Astrongsecuritypostureofferedbusinessestosendtheircloudapplicationsonmoreaffordable,lowlatencydirectinternetreliablywithoptimalapplicationperformanceandbestuserexperience.
ContinuednetworkperformancehealthchecksensuredthebestavailableWANlinkwaschosenbasedonuser-definedapplicationservicelevelagreementsandremediatenetworkdegradationwithfail-overoftraffictoabetterperformingWANlink.
Intuitivebusinesspolicyworkflowsmakeiteasytoconfigureandmanagetheapplicationneedswiththeflexibilityofprioritizingbusinesscriticalapplications.
AspartoftheFortinetSecurityFabric,aFortinetNGFWwithSecureSD-WANprovidesadvancedsecurityfeaturesforprotectingdirectinternetaccess.
Thisincludescomprehensivethreatprevention,suchaswebfiltering,anti-malware,andintrusionprevention(IPS).
Italsoencompassesthreatdetection,suchasSSL-encryptedtrafficinspection,andsandboxingviaFortiSandboxintegration.
VisibilityandcontrolarealsoimportantconsiderationsforSaaSadoptionacrossanextendedbranchworkforce.
Individualemployeescaneasilyinstallcloud-basedapplicationswithouttheinvolvementorapprovalofITmanagement.
ThisformofShadowITcandirectlyintroducemaliciousthreatstobranchnetworks,creategapsinsecurity,andevenviolatecompliancewithprivacylawsandindustryregulationsifleftunchecked.
SecureSD-WANsupportsfullapplicationvisibilityandcontrolthroughseveralkeyfeatures:Figure1:AFortiGatefeaturingsecureSD-WANcantransformenterprisebrancharchitectures.
4WHITEPAPER|ThreeUseCasesForTransformingBranchesWithFortinetSecureSD-WANBroadapplicationawareness.
FortiGate'sapplicationdatabasesupportsmorethan5,000+applicationsignatures,itprovidesaccuratedetectionofsuchcriticalreal-timeapplications.
Thislevelofapplicationvisibilityenablessystemsadministratorstodefinebusinesspolicieswithpreciseservicelevelagreementsfornetworkparameters(latency,packetlossandjitter)becausetheSD-WANsolutionautomaticallyensuresthatthebestpossibleWANlinkischosenfortrafficforwarding.
Newapplications—includingencryptedandcloudapplicationtraffic—canbeidentifiedandclassifiedviaanoptionalFortiGuardSecuritySubscriptionService.
FortinetNGFWscanreceiveongoingthreat-intelligenceupdatesfromFortiGuardLabsresearchersformoreefficientapplicationroutingaswellasreal-timethreatprotection.
Automatedmulti-pathintelligence.
FortinetSecureSD-WANcontinuouslymonitorsthoseconnections,soshouldbandwidthconditionsdegradeforagivenapplication,"…theareasofprimarydifferentiationforSD-WANproductsarequalityofexperience(QoE)forVoIPandvideoperformance.
"FortinetSecureSD-WANcanseamlesslyswitchtoabetterperformingWANlink–withoutanyimpactonapplicationdelivery.
Andinaworst-casescenario,whereallWANlinksaredegraded,itcanremediatethesenetworkconditionswithadvancedtechniquessuchasforwarderrorcorrection.
Maintaininghigh-qualityperformanceforcommunicationsapplicationsisespeciallyimportantforregionalbranchesandremoteofficesthatrelyoncollaborativeinteractionforproductiveoperations.
Intheir2019SD-WANGroupTestResults,NSSLabsmeasuredthequalityofexperience(QoE)ofVoIPandvideoapplicationperformanceofferedbydifferentSD-WANsolutions.
FortinetSecureSD-WANreceivedtopmarksforbothVoIP(wasthehighestscore)andvideoQoEandanoverall"Recommended"rating.
Compliancetrackingandreporting.
SecureSD-WAN-enabledtrackingandreportinghelpsensureadherencetoprivacylaws,securitystandards,andindustryregulationswhilereducingcollateralrisksoffinesandlegalcostsintheeventofabreach.
Thesefeaturestrackreal-timethreatactivity,facilitateriskassessment,detectpotentialissues,andmitigateproblems.
Theyalsomonitorfirewallpoliciesandhelpautomatecomplianceaudits.
TheFortinetSecurityRatingServiceprovidesbestpracticesforcompliancestandardssuchasthePaymentCardIndustryDataSecurityStandard(PCIDSS),theHealthInsurancePortabilityandAccountabilityAct(HIPAA),andotherregulations.
Aspartoftheservice,organizationsreceivetheirownsecurityposturescoreandarethenabletocomparethattothescoresoftheirpeers.
UseCase:AcceleratedCloudAccessDigitalinnovationisthekeyinitiativeformanydistributedenterprisesacrossallmajorsectors.
Organizationsareadoptingacloud-firststrategywith83%oftheenterpriseworkloadsestimatedtoruninthecloudbyendof2020.
Yet,asmoreapplicationssuchasOffice365andSalesforcemovetothecloud,thetraditionalapproachofbackhaulingtrafficoverlegacyWANstothedatacenterhasbecomeanobstacle,resultinginapoorcloudapplicationexperience.
LeveragingFortinetSecureSD-WANforcloudon-ramptoSaaSandmulti-cloudimprovestheuserexperienceforbusinessapplications.
Withintegratedadvancesecurity,theenterprisebranchsecuritypostureremainsstrongevenwithdirectinternetaccesstothecloud.
Managingedges,cloudandSaaSapplicationsthroughsingle-pane-of-glassmanagementreducesthecostandcomplexityofthebranch.
Multi-cloudaccessforbusinesscontinuity.
FortinetSecureSD-WANisavailableasahardwareappliance,asanetworkfunctionvirtualization(NFV)foron-premisesdeployments,andasavirtualapplianceinAmazonWebServices(AWS),VMwareCloud,Azure,GoogleCloud,Oracle,andAlibabaMarketplaces.
TheSecureSD-WANsolutionassuresacceleratedconnectivitytoSoftware-as-a-Service(SaaS)applicationsaswellasapplicationslocatedinmajorpubliccloudprovidersglobally.
DeeplyintegratedwithAzureVirtualWAN,SecureSD-WANcanbeautomaticallysetup,iseaseofuse,andprovidesvisibilityacrosstheentiredistributedinfrastructure.
RemoteVPNoverlayconnectivity.
Virtualprivatenetworks(VPNs)areusedtoensureasecureremotenetworkconnectionbycreatingaprotected"tunnel"overalesssecurenetworktransport(e.
g.
,thepublicinternet).
OneofthereasonsforSD-WAN'spopularityisconnectedtothecost-performancebenefitsofinternet-basedVPNswiththeperformanceandagilityofMPLSVPNs.
FortinetSecureSD-WANprovidesnativemanagementofremoteVPNconnectivitytoalloworganizationstomaintainappropriatelevelsofsecurityprotectionandinspection,whileensuringhighlevelsofvisibilityandcontrol.
ThisappliesnotonlytodataandapplicationspassingthroughtheSD-WANenvironmentbutalsoacrosstheentiredistributednetwork.
Foranorganizationwithmanyremotelocations,high-performancescaleforvirtualVPNoverlayisanothercriticalfeatureofsecureandeffectiveSD-WAN.
VPNoverlaystypicallyfeaturemultiplelayersofthesenetworktunnelsperbranch.
Whenmultipliedacrossan5WHITEPAPER|ThreeUseCasesForTransformingBranchesWithFortinetSecureSD-WANorganizationwithalargenumberofbranchesorremotelocations,networkperformancecandegrade.
FortinetNGFWsfeaturepowerful,purpose-builtsecurityprocessors(SPUs)thataccelerateperformanceandscalabilityforhigh-volumevirtualVPNoverlay.
UseCase:SimplifywithCentralizedManagementandControlManyenterprisebranchesmaywanttosimultaneouslyreplaceboththeirWANandLANdevicesinfavorofasolutionwithdeeperintegrationandsimplifiedbranchoperationsmanagement.
UsingseparateWANandLANinfrastructuresnotonlyincreasesbranchcomplexity(moredevicestodeployandupdatewithmultiplemanagementconsoles).
Italsoreducesvisibilityandcontrolofoperationswhileincreasingtheopportunitiesforsecuritygapsthathackerscanexploit.
Single-pane-of-glassmanagement.
Fortinetenablescustomerstofocusondigitalinnovationsandmakenetworkmoreagile.
FortinetoffersintuitiveSecureSD-WANorchestratoraspartofitsFabricManagementCenter.
Thisallowscustomerstosignificantlysimplifycentralizeddeployment,enableautomationtosavetimeandofferbusinesscentricpolicies.
FortinetSecureSD-WANoffersenhancedanalyticsandnewSD-WANreportswithFabricManagementCenter.
SingleconsoleandrichSD-WANanalyticshelpscustomerstofine-tunetheirbusinessandsecuritypoliciestoimprovequalityofexperienceforalltheirusers.
UsersalsoseeaneedforWANsolutionsthateffectivelyintegratewithlocalwirelessLANsinthebranchandIoTapplicationsbeingdeployed.
ThismeansanopportunityofconvergenceanddeeperintegrationbetweentheWANandLANplatformsusedinthebranches.
"Asoftware-definedbranch(SD-Branch)modeleliminatesthesechallengesbyunifyingWANandLANoperationswithinasinglesolution.
AsanextensionoftheFortinetSecurityFabric,aFortinetNGFWfeaturingSecureSD-WANintegrateswithFortiAPandFortiSwitchsolutionsusingaspecialFortiLinkprotocol.
Thisenablescustomerstomanagelocalendpoints(suchasIoTdevices)connectedtoLANandautomaticallyquarantinedevicesshowingindicatorsofcompromise.
Fortinet-enabledSD-Branchdeployments(Figure2)providedeepWAN/LANintegration,simplicity,security,andthelowestTCOintheindustry.
Zero-touchdeployment.
DeployingSD-WANshouldalsobeaseasyasturningonafeature—andthisisexactlywhatFortinetSecureSD-WANzero-touchdeploymentoffers.
Newbranchescanbequicklyconnectedandsecuredwithlittleexpertiseandnoadditionaloverhead.
FortinetsimplifiesinfrastructureanddeliversSD-BranchoperationswithconsolidatedWAN/LANfunctionsandadvancedsecurityfeatures.
Noothervendorisabletoprovidethiscombinationofcapabilities.
EnhancedanalyticsforWANlinkavailability,performanceSLAandapplicationtrafficinrun-timeandhistoricalstatsallowInfrastructureteamtotroubleshootandquicklyresolvenetworkissues.
FabricManagementCenteroffersadvancedtelemetryforapplicationvisibilityandnetworkperformancetoachievefasterresolutionandreducethenumberofITsupporttickets.
On-demandSD-WANreportsprovidesfurtherinsightintothreatlandscape,trustlevelandassetaccesswhicharemandatedforcompliancepurposes.
Figure2:TheFortinetHigh-levelSD-BranchmodelconsolidatesWANandLANinfrastructures.
May26,202010:00PMD:\Fortinet\WhitePaper\redwhitepaper\RED-Refresh-3usecasesfortransformingbreaches\wp-FA-three-use-cases-for-transforming-branches-5262020\wp-FA-three-use-cases-for-transforming-branches-5262020WHITEPAPER|ThreeUseCasesForTransformingBranchesWithFortinetSecureSD-WAN1"SD-WANInfrastructureMarketPoisedtoReach$5.
25Billionin2023",IDC,July2019.
2"SD-WANShouldbeaFeature,NotaStand-AloneSolution,"NetworkWorld,May2020.
3"FortinetLeadstheMarketwithSecureSD-WANInnovation,"May2020.
4"LearnmoreaboutaFortune500customerthatachieveda65%costreduction,"Fortinet,Apr2020.
5"FortinetSecureSD-WANreceivesasecondconsecutive"Recommended"ratinginNSSLabsreport,"FortinetJuly2019.
344544-A-0-ENRealizingtheBenefitsofSD-WANWithcontinuinggrowthinSaaS,VoIP,andvideoapplications,SD-WANcanhelpdistributedenterprisesembracethebenefitsofDXwithoutbottleneckingnetworkperformanceorimpactingtheproductivityofendusers.
TheperformanceandsecuritychallengesthatoftencomewithSD-WANaresolvedbyFortinetSecureSD-WAN—anativecomponentoftheFortinetSecurityFabricandtheFortinetNGFW.
SecureSD-WANallowsorganizationstorapidlyadoptcloudapplicationswhilekeepingsecurityatoppriority.
IthelpsreduceOpExcostswhilemaintaininghigh-qualityperformanceforVoIP,video,andVPN.
Italsosimplifiesthebranchnetworkinfrastructurebycombiningnetworkingandadvancedsecurityinasingle,unifiedsolution.