mpls, sd-wan and cloud network: the path to a better, secure and more affordable wan
TRANSCRIPT
CatoNetworksMPLS, SD-WAN and Cloud Network: The path to a better, secure and more affordable WAN
CATONETWORKS©2016
ExpandingthevisionfortheNextGenerationWAN
• Security isneededeverywherethenetworkis
• Shouldn'twesimplybuildsecurityintothenetwork?
• TheInternethasunpredictablerouting,packetlossandlatency
• WillweneedtopayforMPLSforever?
DecoupledNetworkingandSecurity?
InternetorMPLS?
• WeneedtosecurelyconnectCloud infrastructureandMobileworkforce
• HowwillthefutureWANhandlethem?
WAN=Branches?
2
CATONETWORKS©2016
DissolvingNetworkPerimeter
CloudApps(SaaS)
MobileUsers
Cloud DataCenter(IaaS)
Users
DataCenter
Locations
#1:CloudAndMobilityMessUpTheNetwork
NetworkSecurityAppliance
Madeforthis
Notforthis
ClearNetworkPerimeter
Users
DataCenter
Locations
3
CATONETWORKS©2016
#2:MakingNetworkSecurityVeryComplex
MobileUsers
Cloud DataCenters(IaaS)
HQ / DataCenter RemoteBranchRemoteBranch
SlowandExpensiveBackhaul toaSecure
Location
Cloud Apps(SaaS)andPublicInternet
SecureInternet Accessw/ApplianceSprawl
MeshoverUnmanagedInternet Connections
PointSolutions,SplitPolicy forCloud Integration
Insecure Direct CloudAccess
4
CATONETWORKS©2016
#3:OnTopofAnAlreadyCostlyAndComplexAppliance-based NetworkSecurityEnvironment
CostlyApplianceLifeCycleBuy,Install,Configure, Repair,Upgrade,Retire,LicenseRenewal
CapacityConstrainedToobigortoosmall,YoupayforItall
LocationBoundandRigidCoversonly specificlocations orspecific pathstothedata
Dependenton SkilledStaffComplex configuration,affectedbyscarceexpertiseandstaffoverload
SlowtoEvolveandAdaptSlowdeployment ofnewfeatures,limitedthreattrafficvisibility
5
Catopresents:NetworkSecurityasaService
CATONETWORKS©2016
NetworkingandSecuritymustmovetotheCloud
WhatisCatoNetworksAbout?
Becauseappliance-basedinfrastructureis
toocomplexandcostlytoown
7
CatoWantstoTakeStuffOffYourPlate
CATONETWORKS©2016
NetworkSecurityIsSimpleAgain
CloudInfrastructure
HQDatacenter
MobileUsers
Branches
CatoSecurityServices
SecurityPolicy
CatoCloudNetwork
OneSecurity: Builtintothenetwork
OnePolicy: Allusers, locations, resources
OneNetwork:CarryingWAN&Internettraffic
8
CATONETWORKS©2016
Routing Reliability Optimization Encryption
OneNetwork
Global,low latency,optimizedbackboneofCatoPoPs
Securetunnels tothebackbone:FWIPSEC,CatoSocket(Branch),CatovSocket(Cloud),CatoClient(MobileVPN),PartnerISP(backendtunneling)
Onelogicalnetwork withfulltrafficvisibilityandcontrol(WAN,Internet)
CatoCloud
Cato ClientCato Socket Cato vSocket
Mobile UsersHQ /Data Center Cloud DataCenterBranch
Network
Security
9
CATONETWORKS©2016
OneSecurity
Enterprisegradesecurityavailableeverywhere(LOCALsecureInternetexit)
ElasticandAgile:scaleup,seamlesslyupdated
Cloud trafficvisibilityacceleratesdefenseadaptation
Routing Reliability Optimization Encryption
URLFiltering
AppControl
NGFirewall
CatoCloud
Cato Socket Cato vSocket Cato Client
Mobile UsersHQ /Data Center Cloud DataCenterBranch
InfectionPrevention
CloudAccessControl
ExtrusionPrevention
NetworkForensics
Network
Security
10
CATONETWORKS©2016
OnePolicy
CatoNOC/SOC,MSPPartners,Enterprise IT
Unifiedpolicyacrossallusers,locationsandaccesstobothinternalandCloudapps/data
ManagedservicebyCatoandPartnerswithFullEnterpriseITsupervision
Routing Reliability Optimization Encryption
URLFiltering
AppControl
NGFirewall
CatoCloud
Cato Socket Cato vSocket Cato Client
Mobile UsersHQ /Data Center Cloud DataCenterBranch
InfectionPrevention
CloudAccessControl
ExtrusionPrevention
NetworkForensics
Network
Security
11
CATONETWORKS©2016
MPLS
Expensive,Slowtodeploy,Custom
DoitYourself
HirePeople,OwnProducts
ManagedServices
SharedResources&Expertise
SoftwareAgile,Elastic
Internet
Lowprices,MassiveCapacity,Open
HardwareCustom,Rigid
OLD
NEW VS.
CATONETWORKS©2016
Summary:BenefitsoftheCatoArchitecture
• EliminatesbranchFirewalls,UTMs,WANoptimization,URLfiltering
• EliminatesbackhaulingofInternettraffic
• MPLS-likelatencyforglobalconnectivityatafractionofthecost
• HigherqualityserviceforcustomersusingVPNtunnelsoverIPVPNconnections
BranchOfficeFootprintReduction
LowLatencyandAffordableNetwork
• ConnectallmobileusersandCloud resourcestotheEnterpriseWAN
• NoneedtomanageCloudandmobilesecuritypolicieswithinpointsolutions
MobileandCloudSecureNetworkIntegration
13