devopsy.kinsta.cloud

Tag: SD-WAN

SonicWall Adds Multi-Gigabit Switches to SD-Branch Portfolio

SonicWall has added a line of multi-gigabit switches to its software-defined (SD)-branch offering that unifies the management of wireless access points and firewalls that include software-defined wide area network (SD-WAN) capabilities.

Dmitriy Ayrapetov, vice president of platform architecture for SonicWall, said the switches will replace a series of switches that SonicWall had been reselling from Dell Technologies. SonicWall spun out of Dell at the end of 2018 after being acquired in 2012.

SonicWall has been making a case for unifying the management of remote office networking via a central management console dubbed Capture Security Center. To achieve that goal, the company embedded SD-WAN capabilities in its firewalls while expanding its portfolio to include wireless access points and switches.

Ayrapetov said in the wake of the COVID-19 pandemic, interest in centralizing the management of remote offices has increased for two reasons: First, IT teams are no longer inclined to travel to remote offices unless there is an absolute requirement; and second, following the economic downturn brought on by the pandemic, there’s more interest in reducing costs—an issue SonicWall addresses by consolidating the management of networking and security.

As part of its SD-Branch offering, SonicWall also makes available client software in multiple forms, providing IT teams with capabilities such as URL filtering to block access to malicious websites that can be applied to any device on the network, including systems that employees are using to work from home. That capability makes it possible for IT organizations to enforce cybersecurity policies regardless of where employees are located or what network they are using to access IT resources in a branch office, said Ayrapetov.

Longer-term, Ayrapetov said it’s clear organizations are moving toward zero-trust networking architecture to better ensure cybersecurity using SD-WANs and other technologies to access cloud applications. However, in the short-term, most organizations will continue to rely on virtual private networks (VPNs) to access IT resources located in a branch office, on-premises data center or public cloud.

SonicWall has been making a case for its Boundless Cybersecurity platform, which can be broadly applied across a distributed computing environment. At the core of that platform is its Capture Advanced Threat Protection (ATP) cloud sandbox service that relies on deep memory inspection in real-time, machine learning and cyber threat intelligence to identify malware and other potential threats.

As part of that architecture, SonicWall also provides zero-touch deployment capabilities, which eliminate the need for extensive cybersecurity expertise to deploy its appliances and services.

It’s not clear to what degree organizations will be consolidating the management of networking and cybersecurity. However, the smaller the organization, the more likely one team is managing both networking and security. As the number of cybersecurity threats organizations face continues to rise at a time when IT budgets are under massive pressure, chances are high many larger IT organizations soon also will be consolidating the management of networking and security.

June 11, 2020
How SD-WAN Is Driving Business Continuity in a COVID World

The coronavirus outbreak has thrown the economy into flux, creating changes to entire industries that would have been unpredictable a few months ago. While demand for travel has decreased dramatically, other businesses such as grocery chains, financial services and retailers are under immense pressure to serve customers in new ways. Enterprises with thousands of employees have been forced to work from home on a moment’s notice. For the IT departments powering these industries, SD-WAN will be key in increasing visibility for newly remote companies, ensuring company data is heavily guarded and managing demand for products.

As stay at home orders made their way across the U.S., companies with thousands of employees had to immediately start working from home, many for the first time. In other words, companies were forced to navigate a completely remote workforce with little opportunity to put the infrastructure and tools in place to support its employees. Without adequate time to prepare for a smooth transition, a number of issues arose, such as realizing that IT departments didn’t have insight into the user experience of business applications for their employees’ home networks. As a result, they were unable to monitor performance and usage patterns to anticipate potential issues for employees. IT workers were unable to remotely troubleshoot and fix networking issues, increasing pain points across teams and decreasing overall productivity.

SD-WAN Becomes IT’s Saving Grace

This is where an AI-Driven SD-WAN can play a major role in managing remote enterprise networks to deliver better experiences and ultimately boost productivity. By providing full visibility into what’s happening across the network, AI-driven SD-WAN solutions can ease the burden of a remote workforce by proactivity responding to real-time issues. The sources of problems across the network can be vast. Intelligent SD-WAN systems not only find the root causes of problems, but also provide solutions. This can save IT departments significant time and effort in troubleshooting an issue, improving the remote IT operational experience as well as the employee work from home experience.

Doubling Down on Secure SD-WAN

Security is another network concern that comes into play when employees work from home. There is an overwhelming amount of confidential data flowing across each network, and in this new environment, enterprises must take extra precautions to ensure data is heavily protected. As employees move out of the office, they’re relying more on home and public networks, moving sensitive corporate data to insecure spaces.

IT teams are increasingly relying on SD-WAN to help improve network security by encrypting traffic and segmenting the network to minimize damage if breaches do occur. Secure SD-WAN incorporates security solutions including firewall, anti-spam and web filtering. These solutions work together to prevent remote employees from accidentally leaking data or causing network security disruptions that can affect the rest of the workforce. SD-WAN is critical in improving a company’s overall security posture. By implementing a secure SD-WAN solution, companies can have more peace of mind, and employees can focus on their task at hand.

The Role of SD-WAN in Evolving Supply Chains

As employees spend more time working and living at home, their new consumer behaviors are quickly changing overall demand and forcing supply chains to evolve accordingly. Companies have scrambled to get a handle on their supply chains, and SD-WAN has become a key component in managing the demand for products; by shifting to the cloud and integrating SD-WAN into product inventory, companies can have access to cloud resources to power their inventory systems. For example, by integrating SD-WAN into grocery store chains, individual stores have been able to communicate with each other and support constantly changing customer needs. An increased demand for yeast at one store can be balanced by a decrease in demand in another. Enterprises can use the inventory system to allocate their products accordingly and record patterns to provide restocking guidance that is up to date as consumer behaviors continue to evolve.

The Bottom Line

Ease of management, security and visibility are the key pillars to ensure business continuity for enterprises in a COVID world, and by doubling down on SD-WAN, organizations can benefit from all three.

SD-WAN is quickly becoming the unsung hero in this shift to remote work by giving organizations the network visibility IT managers require as well as extra security precautions that are more critical than ever. And as businesses and our ways of working continue to evolve with the times, SD-WAN will enable employees across organizational networks to communicate safely and securely.

May 25, 2020
Cisco Aligns With Google to Meld DevOps and NetOps

The extension of a partnership between Cisco Systems and Google to drive tighter integration between their respective software-defined wide area network (SD-WANs) offerings and cloud platforms promises to accelerate the convergence of NetOps and DevOps.

John Apostolopoulos, vice president and CTO for Intent-Based Networking Group at Cisco, said in the wake of the COVID-19 pandemic it’s clear more organizations will be employing SD-WANs as an alternative to virtual private networks. Many of those SD-WAN deployments, however, will be on public clouds rather than in a traditional on-premises data center, he added.

As that transition occurs, DevOps teams will increasingly invoke SD-WAN services via application programming interfaces (APIs) residing in the cloud to provide users with access to cloud applications, noted Apostolopoulos.

Cisco and Google have a technology alliance in place that spans everything from Kubernetes to cloud management software. That partnership is now being extended to include forthcoming deployments of Cisco SD-WAN software on Google Anthos, a cloud platform based on Kubernetes that can be deployed on any cloud or on-premises IT environment, sometime in the first half of 2021.

The availability of SD-WAN services from Cisco on multiple cloud platforms will naturally have significant implications for NetOps teams. Rather than having to manage individual routers and switches, the future of SD-WANs is moving more toward being a set of software services that are programmatically invoked. It’s not clear to what degree NetOps teams might be folded into DevOps teams as that transition occurs. IT teams will always require networking experts to optimize networking services to one degree or another, said Apostolopoulos. However, the days when DevOps teams had to wait days or weeks for a NetOps team to manually provision network services on their behalf are coming to an end.

Apostolopoulos said in the wake of the COVID-19 pandemic, flexibility has become a highly prized IT asset. As such, more applications will soon be deployed in the cloud than ever. Cisco is betting that rather than having to manage multiple cloud network services, more organizations will prefer to extend enterprise networking services from Cisco across multiple clouds. That approach will enable IT organizations to more easily centralize the management of network services via a management console built on top of a consistent set of APIs, he noted.

Just as importantly, Cisco will provide the integrated tools needed to secure those network services, added Apostolopoulos.

In effect, Cisco is betting that enterprise IT organizations are going to consolidate networking and security services as part of an effort to reduce the total cost of IT. Cisco may not always be the least expensive provider of an individual router or switch. However, the total cost of integrating networking and security offerings from multiple vendors can add up quickly. The degree to which organizations have the political will and economic capital required to achieve that goal, of course, remains to be seen. Nevertheless, it’s also clear that maintaining the current networking and security status quo is not going to be able to hold for very much longer.

May 14, 2020
Laying the Foundation for a Successful Digital Future

Digital infrastructure is under mounting pressure from a variety of powerful technology trends. Whether that pressure stems from DevOps, the cloud, AI, mobile or big data, almost every organization is looking to the future with an eye on modernizing their mission-critical IT systems.

Unfortunately, the challenge of future-proofing IT infrastructure is often exacerbated by the widespread reliance on legacy technology. Add to that the growing data connectivity complexities across the entire technology landscape, and you face the difficult task of balancing your networking strategy with your other—sometimes competing—technology priorities.

In particular, legacy networks often lack the performance, control and flexibility today’s digital business models rely on. And they’re increasingly vulnerable to security risks. If that wasn’t enough to give you pause about your network, older technologies often consume a disproportionate amount of your IT budget that you could otherwise invest in modernizing your underlying IT infrastructure.

That fundamental disconnect leaves little room for maneuvering when current thinking shows that agility is so closely linked to success—and where having a purpose-built network infrastructure is key to successful digital transformation. Just as a new house needs a solid foundation, your digital future requires the right digital infrastructure to meet your long-term challenges.

The Issues of Network Modernization Raise Some Big Questions

Think for a moment about the key issues you face. Can you afford to be at the mercy of an outdated or inflexible network? Can you ignore the enormous potential of transformative technologies? Are you prepared to risk falling behind more agile competitors? Or, alternatively, can digital transformation give you a significant competitive advantage?

Whatever your priorities are, the bottom line is digital transformation almost always requires advanced on-demand connectivity that can be deployed quickly and cost-effectively. To meet this need, many businesses are turning to software-defined wide area networks (SD-WANs) and network functions virtualization (NFV) to build agile networks designed to solve your data connectivity needs today and well into the future.

Meeting the Challenge 1: SD-WANs

SD-WANs are purpose-built solutions that deliver agile, secure and scalable connectivity by leveraging intelligent software. One of their main advantages is the centralized network orchestration, control and zero-touch provisioning that provides high-performance networking within a borderless infrastructure across highly distributed enterprises.

This high level of flexibility facilitates digital transformation, because SD-WANs can leverage all types of connectivity options (such as MPLS, broadband, 4G and 5G) while automating network functions. One big advantage is the ability to simplify the connection of people, devices and locations to the cloud, providing seamless access to the virtual functions and business services they need.

SD-WANs also help abstract the complexity of the underlying network to create a virtual layer that simplifies a wide range of network operations. The major benefit here is that there’s no need to manage multiple layers of hardware (such as routers, firewalls and load balancers) that have historically complicated network management.

This is particularly important for geographically distributed organizations that want to simplify branch or remote office networks, given that SD-WANs can connect new offices or branch locations to the corporate network in hours, rather than weeks or months. This provides a proven way to quickly deploy new apps and services while controlling, or even reducing, networking costs.

Meeting the Challenge 2: NFV

Combining SD-WANs with NFV can deliver even greater business benefits since NFV utilizes key network functions on an “as-a-service” basis, improving both network agility and efficiency. It achieves this by replacing legacy network hardware with software that runs in the cloud.

This approach offers a cost-effective way to modernize diverse network functions ranging from intrusion detection to traffic prioritization and network performance optimization. In this way, you can easily reconfigure your networks to meet the data connectivity needs that lie at the heart of digital transformation. Best of all, you can do so without introducing unnecessary risk, complexity or cost.

Modernizing Your Network for Digital Transformation

Modernizing your network infrastructure can deliver the appropriate scale, security and performance needed for modern business. In particular, SD-WANs can help ensure your digital transformation goes hand-in-hand with an equivalent modernization of your network infrastructure. As a result, you can simplify your operations, improve security, respond more quickly to business demands and deliver a much more compelling customer experience.

— Michael Cabra

March 27, 2020
Why SDN’s Hot Streak Continues in 2020
The software-defined networking (SDN) market is expected to grow by double-digits between now and 2023, driven by the increasing mainstream adoption of this technology. And for good reason: SDN gives IT the ability to make changes through software code instead of reconfiguring each device, and manage data traffic from a central console to move it in any direction.

Communication gear still drives the physical movement of bits, but software drives the data plan and the control plan. This allows network managers—and even applications—to dynamically manage network resources based on complex system needs. SDN supports real-time integration across multiple servers, services and clouds, and it also processes huge volumes of data. IT departments can now overcome traditional networking issues such as performance bottlenecks and develop a more responsive network strategy.

SDN Plays a Critical Role in Cloud Adoption and Improves Security for IT Departments

SDN architecture integrates easily with cloud-based environments, both public and private ones. This gives network managers greater flexibility, speed and automation in managing their network clouds.

On the security front, SDN allows an IT department to divide a network connection between an end user and the data center, and provide different security settings for the various types of network traffic. For example, a network could have one public-facing, low security network without any sensitive information. But another network segment could have a software-based firewall and encryption policies that allow for more sensitive data to travel over it. Having the ability to match security policies to specific workloads is a key advantage of SDN.

One of the hottest trends with SDN is microsegmentation, where IT professionals customize security settings to different types of traffic. With this security model, the goal is to apply segmentation rules down to the workload or application. This mitigates the likelihood of an attacker migrating between compromised workloads or applications to others. Basically, microsegmentation creates intelligent groupings of workloads based on their characteristics as communicated inside the data center. This approach does not depend on dynamically changing networks, specific business or technical requirements which means microsegmentation provides enhanced security.

The software-defined wide area network (SD-WAN) takes SDN even further by connecting enterprise networks over large geographical areas, such as branch offices and data centers. Traditional WAN connections typically needed technology that required special proprietary hardware. SD-WAN moves more of the network control into the cloud through software, allowing for greater scalability, flexibility and reduced hardware costs. SD-WAN is expected to grow even faster than SDN in the coming years for several reasons:
- Greater reliability of application performance, a huge advantage for users in today’s digital workspaces.
- High level of connection security for cloud applications without performance trade-offs.
- Increased bandwidth which reduces congestion and slowdowns.
- More business agility through faster deployments of new applications.
- Simpler IT administration through a centralized console instead of in-field configurations.
SDN and its offspring of SD-WANs continue to defy expectations in creating greater agility, flexibility, security and reliability. Leading-edge IT organizations are embracing the imperatives of digital transformation through SDN and SD-WAN to provide for agile deployment, provisioning and operational management.

— Melinda Cross
March 27, 2020
Cato Networks Offers Instant SD-WAN Service

Cato Networks has added an instant-on capability to its software-defined wide area network service (SD-WAN) service to make it easier for IT teams to provide employees with remote access to applications.

Dave Greenfield, technology evangelist for Cato Networks, said rather than having to configure and install a virtual private network (VPN) client on every device to access applications, IT teams can simply share a URL to provide network access via a single sign-on protocol without requiring client software. At a time when many IT teams are scrambling to allow every employee to work at home to help combat the spread of the COVID-19 coronavirus, the Cato Software Defined Perimeter (SDP) service provides an alternative approach to achieve that goal at scale, he said.

The Cato SDP network is an instance of a global SD-WAN service co-managed by Cato Networks. IT teams still control who gains access to what applications using multifactor authentication, while Cato Networks manages the underlying network and security infrastructure, including all the firewalls and endpoint protection software. As such, Greenfield said, Cato SDP is one of the first instances of a service based on what Gartner is now describing as a secure access service edge (SASE) architecture.

Greenfield said trying to scale access using legacy VPN software is problematic because it requires IT teams to acquire more software licenses and bandwidth, while end users are provided with passwords to access the corporate network, which can be easily hacked. And, perhaps most problematic, most VPNs limit the number of simultaneous users allowed on the network.

Cato SDP provides access to a zero trust network environment that only provides access to applications that end users have been specifically authorized to use, said Greenfield, noting all of that can be accomplished in as little as 10 minutes.

Since the beginning of the COVID-19 outbreak, Greenfield said Cato Networks has seen a sharp increase in usage of its global network, which consists of points-of-presence residing in third-party data centers distributed around the world. This setup makes it possible to optimize application experiences based on where end users are physically accessing the internet.

It may be a few months to as long as two years before the COVID-19 pandemic subsides. What today may be viewed as a singular disruptive event could very well be a harbinger for how organizations will need to work from now on. Even once IT teams get everyone in their organization up and running from home, many of them will have to ask themselves how long they are prepared to manage IT as a remote service. The emergence of SASE-based services provides an alternative co-managed approach that allows IT teams to rely on an external service provider without having to give up control over their applications to a managed service provider (MSP).

Naturally, it may be a while before the current crisis subsides enough for organizations to realize they may need to fundamentally change the way they consume IT. The only thing that is for certain right now is that conversation is all but inevitable.

— Mike Vizard

March 23, 2020