Palo Alto PA-3420 SD-WAN Lizenz

The effects of the cloud on network and security transformation are undeniable. As the number of devices at branch locations grows and applications become more bandwidth-intensive, businesses are forced to spend more to accommodate demand. As a result, traditional wide area network (WAN) architectures with multiprotocol label switching (MPLS), which tend to eat up bandwidth as they backhaul traffic from branches to the cloud, render legacy approaches ineffective.

Software-defined wide area networking (SD-WAN), an approach that uses commodity links and allows you to intelligently manage as well as control connectivity betweenbranches and cloud instances, is now a necessity for distributed enterprises. According to Gartner, by 2023, more than 90% of WAN edge infrastructure refreshes will be based on vCPE platforms or SD-WAN vs. traditional routers.1 However, with its benefits, SD-WAN also brings many challenges,such as lack of security, unreliable performance, and complexity. When security is an afterthought, it tends to be either subpar or bolted on, introducing management complexity. Moreover, network performance becomes less reliable because enterprises use the congested internet as the WAN middle mile—and when they try to address this by building their own SD-WAN hub infrastructures, they run into complexity. Ultimately, enterprises turn to multiple vendors or service providers to solve performance issues, which increases costs while decreasing control and visibility.

Secure SD-WAN by Palo Alto Networks

PAN-OS® SD-WAN from Palo Alto Networks lets you easily adopt an end-to-end SD-WAN architecture with natively integrated, world-class security and connectivity. Using huband-spoke and/or full-mesh branch-to-branch topologies,you can optimize the performance of your entire network. This minimizes latency and ensures reliability, resulting in an exceptional user experience at the branches. Each site automatically creates a meshed VPN connection to all other sites to load balance sessions, fail over to a better performing link, and take advantage of all available bandwidth to maximize throughput capacity. Regardless of your deployment model, our tight integration will allow you to manage security and SD-WAN on a single, intuitive interface.

Optimized Connectivity for Improved User Experience

PAN-OS SD-WAN lets you measure and monitor specific paths as well as dynamically move sessions to the optimal path, guaranteeing the best branch user experience. You can simply enable the subscription on your Next-Generation Firewalls and begin intelligently, securely routing branch traffic to your cloud applications and between other sites. Through aconcept called “link building,” the firewall will automatically combine all service provider links labeled with the same link tag to aggregate bandwidth and distribute traffic between them, maximizing all available capacity.

Complete Application Control

PAN-OS SD-WAN gives you full control on when to select a better path for your applications. Using profiles for path health quality, software-as-a-service (SaaS) application path monitoring, error correction (forward error correction and packet duplication), and traffic distribution, each application can have its own set of thresholds and path forwarding rules. With DIA AnyPath, you can tailor exactly how an internet application fails over—either to another DIA internet path at the same site or through a private VPN path to another location to get better internet service. This ensures that all mission-critical applications are performing at their best to provide the highest level of usability.