firewall蒲公英sd-wan

FORTINETANDSILVERPEAKINTEGRATEDSECURITYSOLUTIONFORSD-WANEnd-to-endSecurityforBroadbandandHybridWANsAsapplicationsmigratetothecloud,geographicallydistributedenterprisesincreasinglyviewthewideareanetwork(WAN)ascriticaltoconnectinguserstoapplications,butarequicklyrealizinglegacyWANarchitectureswereneverdesignedfortoday'sdynamic,Internet-basedenvironments.
OneofthemoststrikingconsequencesofthemovetocloudistheshiftinenterpriseWANtraffic,withadramaticincreaseinthevolumeoftrafficdestinedforthecloud.
Cloud-hostedSaaSapplicationsperformoptimallywhenusersareconnecteddirectlytotheInternet.
LegacyMPLS-basedWANarchitecturesaredesignedtobackhaulallInternet-boundapplicationtraffictoacorporatedatacentergatewayandthenouttothecloud.
WiththeacceleratingadoptionofSaaSapplications,it'sclearthathub-and-spoketopologiesarenotwellsuitedtoconnectbranchuserstocloud-basedapplications.
Addtothis,thecostper-bitofMPLSisgenerallyabout10xthecostofbroadbandInternetservice.
ThecombinationofthesefactorsispromptingenterprisestolooktobroadbandInternetservicesasanalternativetoMPLS,enabledbySoftwareDefinedWAN(SD-WAN)solutions.
However,theadoptionofInternet-basedservicesaspartofanSD-WANarchitecturecomplicatestheenterprisenetworksecuritymodel.
FortinetandSilverPeakhavepartneredtodeliverajointsolutionwhichenablesenterprisestoembracetheeconomicsofbroadbandInternetserviceswithintheoverallWANarchitecture,whilemaintainingstrictcompliancewithcorporatesecuritystandards.
ThecombinationoftheSilverPeakUnityEdgeConnectSD-WANsolutionwiththeFortinetFortiGatefirewallplatformenablescustomerstodeployanenterprisenetworkthatcombinesasophisticated,applicationawarehybrid-WANwiththeindustry'smostextensivelyvalidatedsecuritysolution.
TheSilverPeakUnityEdgeConnectenablesanInternet-basedenterpriseWANservice,andtheFortiGatemitigatesexposuretonetworkthreatswhileusingtheFortinetsecurityprocessingarchitecturetoenableheavycontentprocessingfeatures,suchasSSLinspectionwithoutcompromisingnetworkorapplicationperformance.
HOWDOESITWORKToaddresstheneedsofgeographicallydistributedenterprises,SilverPeakUnityEdgeConnectprovidesreliableandsecurevirtualoverlaystoconnectuserstoapplications,andprovidesflexibilitytouseanycombinationoftransporttechnologieswithoutadverseimpacttonetworkorapplicationperformance.
Enterprisescanembracebroadbandconnectivitytoconnectuserstoapplicationswhethertheyresideinthedatacenterorthecloud,deliveringaconsistentuserexperiencewhilegreatlyreducingoperationalandcapitalexpenses.
Otherbenefitsincludeenhancedbusinessagilitytoquicklydeploynewapplicationsandrespondtorapidly-changingbusinessrequirements.
FortinetandSilverPeakhavecollaboratedtoprovideasolutionwhichcombinesFortinetFortiGateEnterpriseFirewallVirtualAppliance(NGFW)softwarewiththehigh-performanceSilverPeakEdgeConnectSD-WANsolution.
ThejointsolutionenablescustomerstodeployanSD-WANthatintegratesFortinetbest-in-classnetworksecurityacrosstheWAN.
SupportedarchitecturesincludebothdirecthandoffoftraffictothepublicInternet,andbackhaulingofInternettrafficoverSilverPeakSD-WANtunnelstocentral/hublocationsforhandofftotheFortinetenterprisefirewallforfurtherABOUTSILVERPEAKSilverPeakisthegloballeaderinbroadbandandhybridWANsolutions.
SilverPeakoffersahigh-performanceSD-WANsolutionthatprovidessecureandreliablevirtualoverlaystoconnectuserstoapplicationswiththeflexibilitytouseanycombinationofunderlyingtransportwithoutcompromisingnetworkorapplicationperformance.
Thisresultsingreaterbusinessagilityandlowercosts.
Morethan2,000globallydistributedenterpriseshavedeployedSilverPeakbroadbandandhybridWANsolutionsacross80countries.
Learnmoreatwww.
silver-peak.
com/.
KEYBENEFITSnnEasilyextendtheFortinetSecurityFabricarchitectureend-to-endacrossthewideareanetwork.
nnReducecostsbydeployingbothFortinetFortiGateandSilverPeakUnityEdgeConnectasvirtualappliancesonapurpose-builtFortiHypervisororanyindustry-standardx86server.
nnUtilizeinexpensiveInternetconnectivityfrominanybranchlocationwhilemaintainingcorporatesecuritypoliciesincludingvisibilityintoSSLencryptedtraffic.
nnRapidlydeploynewbranchofficelocationsthatincludeintegrationwiththeFortinetFortiGateenterprisefirewallplatform.
inspection.
SilverPeakandFortinetbothsupportinstallationasaphysicalorvirtualappliance,providingcustomerswiththeflexibilitytoarchitectthedeploymentmodelthatbestalignswiththeirrequirements.
Fortinet'sFortiGateandFortiOShavemorethanahundreduniquesecurityandnetworkingfeatureswhicheliminatepointproducts,simplifydeploymentsandlowerTCO(TotalCostofOwnership),allwhiledeliveringrobustsecurity.
Wirelessandwired(switch)management,protectionandguest-networkingcanoftenbethenextstepsinaprocessfordeployingabranchoffice.
Theprovisioningofportsandwirelessaccesscanbeacumbersomeandexpensivetask.
TheFortinetFortiGatewirelessAPandswitchcontrollereasesAPdeployment,eliminatingthecomplexityandsecurityconcernstypicallyassociatedwithdeployingportsforphonesanduserdata.
FortinetprovidesphysicalandlogicaltopologyvisualizationandotherpowerfulcapabilitiesinFortiOS'sFortiView,whichleveragestheFortinetSecurityFabricfunctionalitytoallowgreatervisibility,oversightandcontrolofthenetwork.
TheSecurityFabricenablesnetworkandsecuritycomponentstocollectandshareinformationinordertocoordinateandeffectivelypreemptexposuretosecuritythreats.
Asillustratedinthefigurebelow,thesepowerfulfeaturesprovideunparallelednetworksecurity,visibilityandcontrol.
SOLUTIONBENEFITSnnOptimizedcloudapplicationperformance:SecureInternetbreakoutfromthebranchenablesdirecthand-offofSaaSapplicationtraffic,maximizingapplicationperformanceandprovidingvisibilityintoSSLencryptedtraffic.
nnEnablesmigrationtohybridWAN:Easestheintegrationofcost-effectiveFORTIVIEWTOPOLOGYVISUALIZATION.
broadbandInternetservicesintotheenterpriseWAN.
nnReducednetworkingcosts:SilverPeakUnityEdgeConnectdynamicpathcontrolsupportsactive-activeloadsharingacrossmultipleWANlinks,enablingtheuseofinexpensiveInternetbandwidth,therebyreducingoreliminatingtherequirementforexpensiveMPLSservice.
nnCompatiblewithexistingFortinetsecurityposture:SupportslocalorcentralizedFortiGatefirewallsandrequiresnochangetoexistingsecurityarchitecture.
ProvidesmultipleoptionsforflexibilityincludingboththePhysicalandVirtualFortiGatefirewalls,withtheoptiontousetheFortiHypervisorforimprovedVMperformance.
EnablessecurehostingofservicesfrombranchfirewallDMZ.
61806-A-0-EN