SD-WAN and Digital Transformation
How to secure digital transformation through hybrid networks
Alfonso Martinez, Consultant Sales Engineer, EMEA
September 2017
Copyright © 2017 Forcepoint. All rights reserved.
AGENDA
What do we mean by Digital Transformation and why are hybrid networks and
secure SD-WAN attracting interest?
Advantages and disadvantages of SD-WANs
The security control burden
How FORCEPOINT NGFW addresses these challenges
Q&A
Copyright © 2017 Forcepoint. All rights reserved. | 2
WHAT DO WE MEAN BY DIGITAL TRANSFORMATION?
Traditional networks have evolved to facilitate digital transformation:
• Hybrid Networks
• SD-WANS
Copyright © 2017 Forcepoint. All rights reserved. | 3
CLOUD
SYSTEMS
REMOTE
BRANCHES
MAIN
OFFICES
VIRTUALIZED
DATA CENTERS
Copyright © 2017 Forcepoint. All rights reserved. | 4
A changing tech
landscape
Where once wide area networks were all about
leased lines and, more recently, MPLS
(Multiprotocol Label Switching) services and
private VPN technologies, now there’s a whole
load of possibilities.
Everything from Carrier Ethernet to the
increasing use of regular broadband including
3G/4G mobile services, regularly employed by
46 percent of survey respondents.
Copyright © 2017 Forcepoint. All rights reserved. | 5
SD-WANs – the good
The benefits of hybrid networking aren’t that difficult to
understand, in particular when it comes to the most
common setup where MPLS is combined with ADSL or
other regular broadband services.
Once considered the gold standard for corporate WAN
connectivity, MPLS offers a high degree of security and
valuable performance guarantees but, as a mostly
outsourced solution it can be expensive, disruptive to
install and, due to encryption overheads, it can lead to
performance bottlenecks.
MPLS services can also be slow to provision and
modify in response to changes in demand, whereas
regular ADSL and other broadband services are both
cheaper and, in the main, a lot more agile, as confirmed
when we asked survey respondents to identify the
advantages of the SD-WAN approach as they saw
them.
Copyright © 2017 Forcepoint. All rights reserved. | 6
SD-WANS – THE NOT SO GOOD
Complexity
Security
Copyright © 2017 Forcepoint. All rights reserved. | 7
SD-WAN SECURITY CHALLENGES
Traffic Confidentiality
Ipsec VPN or SSL VPN
Information is protected with encryption
• Different SD-WAN lines have varying levels of security
SD-WAN Manageability
Number of WAN links is high
Security Needs centralized management
• Can be resource intensive
Highest Availability
Keeping Business Running
Several SD-WAN links and link types combined
• Maintenance breaks and unexpected outages
Copyright © 2017 Forcepoint. All rights reserved. | 8
SECURE SD-WAN – HIGH AVAILABILITY FOR MULTI-ISP NETWORKS
3/4G
VOIP
XDSL MPLS
WEB FORCEPOINT BROADBAND
FIBER
ERP SECURE SD-WAN
BACKUP SATELLITE
FTP
CABLE
High High High
Efficiency Availability Security
Centrally Managed Always-on Policy-based
Optimized Bandwidth Active-Active Performance Inspected
Controlled Costs Encrypted
Copyright © 2017 Forcepoint. All rights reserved. | 9
Availability & Scalability
Network resiliency and cost savings
Regular
90%
ISP 1 DSL 1
3/4G Traffic &
Back-up
ISP 2
Cable
DSL 2 links Up to
Multi-Link
ISP N
IPsec VPN
MPLS
Critical
Traffic
Savings on
MPLS costs
Multi-Link Augmented VPN Alternative to MPLS
Business Continuity Flexibility Cost Savings
• Transparent failover • Supports multiple access • Provider and technology
• Load-balancing technologies independent
or back-up links • QoS support • Add bandwidth easily
• Security • Optimize bandwidth usage
Copyright © 2016 Forcepoint. All rights reserved. | 10
Copyright © 2017 Forcepoint. All rights reserved. | 10
MULTI-LINK TECHNOLOGY
Enterprise-class performance
Scalable and resilient site-to-site
connectivity over multiple links and ISPs Remote
Support for ISP load balancing 2Mbps Site
Supports multiple access HQ
technologies including DSL, MPLS, 3G
Bandwidth management with QoS
+
Remote
2Mbps Site
+
Up to 90%
Savings on
2Mbps = up to 6Mbps
MPLS costs
Copyright © 2017 Forcepoint. All rights reserved. | 11
SD-WAN CONNECTIVITY
Data Center-Edge-Branch-Cloud
Instant-setup VPNs – drag & drop
Migration from backhauling to direct-to-Cloud
Modular network interface options
Simplifies new business processes
Consistent capabilities, policies, management everywhere
Boosts Business Productivity
Keeps access safe to data/apps wherever needed
Copyright © 2017 Forcepoint. All rights reserved. | 12
Deployment data from IDC Research
