WIXLIB

ENTERPRISEUnityEdgeConnectSD-WANEdge PlatformAs cloud-based application adoption continues to accelerate,geographically distributed enterprises increasingly viewthe wide area network (WAN) as critical to connecting usersto applications.As enterprise applications migrate from thecorporate data center to the cloud, private lineconnections such as multi-protocol label switching(MPLS) have proven to be overly rigid and expensive.With greater reliance on the internet, the opportunity to achieve “cloud speed” is better served byintegrating broadband services into the WANtransport mix.Silver Peak Unity EdgeConnect SD-WAN edge platform enables enterprises to dramatically reduce thecost and complexity of building a WAN by leveragingbroadband to connect users to applications. Byempowering customers to use broadbandconnections to augment or replace their currentMPLS networks, Silver Peak improves customerresponsiveness, increases application performance,and significantly reduces capital and operationalexpenses by up to 90%.Silver Peak Data SheetUnity EdgeConnect SolutionThree components comprise the Unity EdgeConnectSD-WAN solution: Unity EdgeConnect physical or virtualappliances (supporting any common hypervisorsand public clouds) deployed in branch officesto create a secure, virtual network overlay. Thisenables customers to move to a broadband WANat their own pace, whether site-by-site, or via ahybrid WAN approach that leverages MPLS andbroadband internet connectivity. Unity Orchestrator , included with the Edge-Connect solution, provides unprecedented levelsof visibility into both legacy and cloud applications with the unique ability to centrally assignpolicies based on business intent to secure and01

control all WAN traffic. Policy automation speedsand simplifies the deployment of multiple branchoffices and enables consistent policies acrossapplications. Unity Boost WAN Optimization is an optionalWAN optimization performance pack that combines Silver Peak WAN optimization technologieswith EdgeConnect to create a single, unified WANedge platform. Boost allows companies to accelerate performance of latency-sensitive applications and minimize transmission of repetitivedata across the WAN in a single, fully integratedSD-WAN solution.EdgeConnect Key Features Zero-Touch Provisioning: A plug-and-playdeployment model enables Unity EdgeConnectto be deployed at a branch office in seconds,automatically connecting with other Silver Peakinstances in the data center, other branches, orin cloud Infrastructure as a Service (IaaS) such asAmazon Web Services, Microsoft Azure, OracleCloud Infrastructure and Google Cloud Platform. Tunnel Bonding: Configured from two or morephysical WAN transport services, bondedtunnels form a single logical overlay connection,aggregating the performance of all underlyinglinks. If a link fails, the remaining transportlinks continue to carry all traffic avoidingapplication interruption. Virtual WAN Overlays: The EdgeConnectSD-WAN edge platform is built upon an application-specific virtual WAN overlay model. Multipleoverlays may be defined to abstract the underlyingphysical transport services from the virtual overlays, each supporting different QoS, transport, andfailover characteristics. Applications are mappedto different overlays based upon business intent.Virtual WAN overlays may also be deployed toextend micro-segmentation of specific applicationtraffic from the data center across the WAN to helpmaintain security compliance mandates. Dynamic Path Control (DPC): Real-time traffic steering is applied over any broadband or02Figure 1: EdgeConnect XS shown here. Also available as a virtualappliance.MPLS link, or any combination of links based oncompany-defined policies based upon businessintent. In the event of an outage or brownout,EdgeConnect automatically continues to carrytraffic on the remaining links or switches over toa secondary connection. WAN Hardening: Each WAN overlay is securededge-to-edge via 256-bit AES encrypted tunnels.No unauthorized outside traffic can enter thebranch. With the option to deploy EdgeConnect directly onto the internet, WAN hardeningsecures branch offices without the appliancesprawl and operating costs of deploying andmanaging dedicated firewalls. Path Conditioning: This feature providesprivate-line-like performance over the publicinternet. Includes techniques to overcome theadverse effects of dropped and out-of-orderpackets that are common with broadband internet and MPLS connections to improve application performance. First-packet iQ Application Classification:EdgeConnect First-packet iQ application classification identifies applications on the first packetto deliver trusted SaaS and web traffic directly tothe Internet while directing unknown or suspicious traffic to the data center firewall or IDS/ IPS.Identifying applications on the first packet is especially important when branches are deployedbehind Network Address Translation (NAT); thecorrect path must be selected based on the firstpacket to avoid session interruption. Local Internet Breakout: Granular, intelligenttraffic steering enabled by First-packet iQ eliminates the inefficiency of backhauling all HTTP/HTTPS traffic to the data center. The solutioneliminates the potential for wasted bandwidthand performance bottlenecks for trusted SaaSSilver Peak Data Sheet

and web traffic. Trusted traffic is sent directlyacross the Internet while unknown or suspicioustraffic may be sent automatically to more robustsecurity services in accordance with corporatesecurity policies. Routing: EdgeConnect supports standard Layer2 and Layer 3 open networking protocols suchas VLAN (802.1Q), LAG (802.3ad), IPv4 and IPv6forwarding, GRE, IPsec, VRRP, WCCP, PBR, BGP(version 4), OSPF. Cloud Intelligence: Real-time updates on thebest performing path to reach hundreds ofSoftware-as-a-Service (SaaS) applications,ensuring users connect to those applicationsin the fastest, most intelligent way available. Additionally, automated daily updates of the applicationIP address database to EdgeConnect applianceskeep pace with SaaS and web address changes.interface, to enable enterprises to automateand accelerate the integration of security partners’ advanced services , like Palo Alto Networks,Checkpoint, Fortinet, ForcePoint, Symantec, secure web gateways (e.g., Zscaler), and secure DNS(e.g., Infoblox) utilizing private secure encryptedIPSec tunnels. High Availability: The EdgeConnect HA clusterprotects from hardware, software and transportfailures. High Availability is achieved by providingfault tolerance on both the network side (WAN)and on the equipment side. The EdgeConnectappliances are inter-connected with a HA linkthat allows tunnels over each underlay to connect to both appliances.Orchestrator Key Features Single Screen Administration: Enables quickand easy implementation of network-wide business intent policies, which eliminates complexand error-prone policy changes at every branch Real-Time Monitoring and Historical Report-ing: Provides specific details into application,location, and network statistics, including continuous performance monitoring of loss, latency,and packet ordering for each enterprise customers’ network path. All HTTP and native applicationtraffic are identified by name and location, andalarms and alerts allow for faster resolution ofnetwork issuesFigure 2: Unity Orchestrator enables centralized definition and automated distribution of network-wide business intent policies to multiplebranch offices. Zone-based Firewall: Centrally visualize, defineand orchestrate granular security policies andcreate secure end-to-end zones across any combination of users, application groups and virtualoverlays, pushing configuration updates to sitesin accordance with business intent. Using simpletemplates to create unique zones that enforcegranular perimeter security policies across LANWAN-LAN and LAN-WAN-Data Center use cases. Service Chaining: EdgeConnect supportssimplified service chaining, using a drag-and-dropSilver Peak Data Sheet Bandwidth Cost Savings Reports: Documentsthe cost savings for moving to broadband connectivityOrchestrator Enables FasterSD-WAN DeploymentsUnity Orchestrator, included with Unity EdgeConnect,enables zero-touch provisioning of EdgeConnect appliances in the branch. Orchestrator automates theassignment of business intent policies to ensurefaster and easier connectivity across multiple branches, eliminating the configuration drift that can comefrom manually updating rules and access control03

lists (ACLs) on a site-by-site basis. Unity Orchestratorenables customers to: Avoid WAN reconfigurations by delivering applications to users in customized virtual overlays Align application delivery to business goalsthrough virtual WAN overlays based onbusiness intent Simplify branch deployments with EdgeConnectProfiles that describe the virtual and physicalconfiguration of the locationGain Control over the CloudGain an accurate picture of how Infrastructure- as-aService (IaaS) and Software-as-a-Service (SaaS) andare being used within your organization. Name-based identification and reporting of allcloud applications. Tracking of SaaS provider network traffic. Cloud Intelligence provides Internet mapping ofoptimal egress to SaaS services.Strengthening WAN SecurityFigure 3: Orchestrator enables centralized and automated overlaymanagement.In addition to centralized and automated controlof the entire SD-WAN topology (Figure 3), UnityOrchestrator provides specific detail into WANperformance, including:Advanced capabilities provide cloud-first enterprises with the control to centralize and automatesecurity policy governance and safely connect usersdirectly to applications. They enable distributedenterprises to centrally segment users, applicationsand WAN services into secure zones and automateapplication traffic steering across the LAN andWAN in compliance with predefined security policies, regulatory mandates and business intent. Forenterprises with multivendor security architectures,Unity Orchestrator offers seamless drag and dropservice chaining to next-generation security infrastructure and service. Detailed reporting on application, location, andnetwork statistics Continuous performance monitoring of throughput, loss, latency, jitter and packet ordering forall network paths Identification of all application traffic by nameand location Alarms and alerts to visualize and prioritize software and hardware issues within the WAN allowfor faster problem resolution Bandwidth cost savings report for documentingthe cost savings of moving to broadbandFigure 4: A matrix view from Orchestrator, provides an easy-to-read,intuitive visualization of configured zones and defined whitelistexceptions.Boost Application Performanceas NeededUnity Boost WAN Optimization is an optional WANOptimization performance that includes:04Silver Peak Data Sheet