11062b_f0cd2b56e86443d68d21b6bc12fe055c_

SDN/SD-WAN

Network traffic patterns have witnessed numerous changes due to the increasing popularity of cloud-based applications. In a traditional network, accommodating complex network patterns and adapting to constant changes has always been a tedious task. Most organizations are now switching to software-defined networking (SDN) infrastructures, a dramatic departure from the way standard networks are designed. SDN centralizes control of your network, improving the network's flexibility and efficiency.

Dual Stack IPv4/IPv6 Ready

SDN/SD-WAN features

Zero Touch Provisioning
(ZTP)

ZTP is a method of setting up devices that automatically configures the device using a feature. ZTP helps IT teams quickly deploy network devices in a large-scale environment, eliminating most of the manual labor involved with adding them to a network.

Visibility

Wider visibility is necessary to determine the true root cause when issues arise. Scrutinizer complements SD-WAN with end-to-end visibility from the user all the way into the cloud. And Network Intelligence that provides ML-driven insights to improve SD-WAN capacity planning.

Intent-Based Networking
(IBN)

Network administration that incorporates artificial intelligence (AI), network orchestration and machine learning (ML) to automate administrative tasks across a network. The goal of IBN is to reduce the complexity of creating, managing and enforcing network policies and reduce the manual labor associated with traditional configuration management.

Security

Secure access service edge (SASE) is a network architecture that rolls software-defined wide area networking (SD-WAN) and security into a cloud service that promises simplified WAN deployment, improved efficiency and security, and to provide appropriate bandwidth per application. SASE combines SD-WAN capabilities with security and delivers them as a service.

100% Real SDN Architecture

The Control Plane refers to the network architecture component that defines the traffic routing and network topology.
The Data Plane is the network architecture layer that physically handles the traffic based on the configurations supplied from the Control Plane.
The Management Plane takes care of the wider network configuration, monitoring and management processes across all layers of the network stack.

Routing

BGP (IPv4 and IPv6), OSPF (v2 and v3), MP-BGP (MPLS based L3VPN, MPLS based EVPN, VXLAN based EVPN), IGMP, PIM, VRRP, RIP and RIPng, PBR (policy-based routing).

Firewall and NAT

Stateful firewall, zone-based firewall, all types of source and destination NAT (one to one, one to many, many to many).

Network Services

DHCP and DHCPv6 server and relay, IPv6 RA, DNS forwarding, TFTP server, web proxy QoS.

Application Visibility

Identifies more than 3000+ applications and protocols, Supports Application group, filters, visibility and log.

High Availability

VRRP for IPv4 and IPv6, ability to execute custom health checks and transition scripts; ECMP, stateful load balancing.

IDS/IPS

Default and custom defined signatures and profiles, Snort rule formats support, L7 DDoS, Layer7 Anomaly detection

IP Filtering

Filtering of traffic based on Geo-Location, DNS name, Reputation of Source / Destination IP Addresses – support for both IPv4 and IPv6.

URL Filtering

Policy trigger based on URL category, URL profile (blacklist, whitelist, category reputation)

Cloud Connect

Seamless extension to multiple public clouds, real-time optimized cloud connectivity performance

Dynamic Path Selection

Integrate true link Aggregation across diverse transport technologies and latencies

Passive Scanning Sensor

Automatically detect and profile all network-connected systems, eliminating blind spots across your IT environment.

Real-Time

Analytics

Centralized Portal for cohesive visibility, Simplicity, Scalability, Secure.

Active-Active Architecture

Sites connect to applications through Internet & private WAN