Introduction To The ExtremeCloud SD-WAN Solution

Transcription

Data SheetIntroduction to the ExtremeCloud SD-WAN SolutionExtremeCloud SD-WAN is a cloud-native SD-WAN platform,unifying networking and security operations through asimple-to-use management, seamlessly integrated intoExtremeCloud IQ. Cloud-native SD-WAN means workloadsare automatically secure, high performing, and reliablyavailable to any user anywhere in the world. IT can focuson innovation and digital experiences, instead of justmaintenance, release cycles, and starts. Users are moreproductive and IT can sleep at night.ExtremeCloud SD-WAN is designed to deliver differentworkloads and applications faster and more securelyacross WAN and multi-cloud environments, focusing onthree principal areas: Automated connectivity: build your SD-WAN fromground up, fast, risk free, and while maintaining lowtotal cost of ownership (TCO). Benefit from flexibledeployment modes and zero-touch provisioning withtransparent/hybrid deployment topology. Business continuity and resiliency: guarantee siteresiliency through multiple WAN network supportand high availability SD-WAN appliances. EnforceApplication Performance in site-site and site-cloudtraffic scenarios, detect applications automatically, andapply performance-based dynamic WAN Selection. Always up-to-date security: secure your SD-WANSites, fast and while optimizing TCO. Leverage a set ofalways up-to-date advanced networking technologies,including FWaaS and SWG, deliveredas-a-cloud-service.Delivering on the promise of Extreme Networks InfiniteEnterprise vision, ExtremeCloud SD-WAN platform is: Infinitely distributed: in the post-pandemic world, thenumber of users, devices, locations, and applicationsunder management have exploded exponentially.Legacy security models are no longer effective inaddressing this evolved IT environment. WithExtremeCloud SD-WAN, you will be able to extendyour Extreme network connectivity securely forinfinite distribution. At scale: ExtremeCloud SD-WAN Enterprise simplifiescustomers’ onboarding of SD-WAN into their networkadministration by leveraging the unifiedExtremeCloud architecture.ExtremeCloud SD-WAN is the market-first “all-inclusive”SD-WAN Service in a subscription only model, offering animmediate benefit of optimized TCO by including: The SD-WAN Appliance with Support and Maintenancein the Subscription, which reduces the TCO comparedto pure-play SD-WAN solutions on the market. Customer Success offering helps to achieve strategicgoals and targeted business outcomes. Integration into the ExtremeCloud IQ environmentand including SD-WAN Orchestrator by default in thesubscription. This customers extend their networkingecosystem end-to-end from branch into data centerand finally into the Cloud, all from a single vendor whileleveraging cloud-economics. Well-tailored offering structure comprising anaffordable Enterprise Package, designed to cover basicSD-WAN functionality. This is complemented by a rangeof Add-on Packages, delivering advanced networkingfeatures (e.g., Advanced Security, WAN Optimization,Enhance Reporting).WWW.EXTREMENETWORKS.COM1

ExtremeCloud SD-WAN: Architecture and Feature-setDesigned for TransformationIn 2020, organizations had to completely rethink how to keep business connected. ExtremeCloud SD-WAN is designed togive the customer network agility and cloud-first capabilities required to transform how customers, teams and businessesconnect. All of this delivered in a frictionless, at-your-pace WAN evolution motion.To address those key priorities, ExtremeCloud SD-WAN solution is equipped with a robust feature set:ConnectivitySecurity Leverage MPLS and Internet transports(L2/L3) IPsec overlay (hub and spoke, full mesh) Routing capabilities Integration with IaaS workloads VPN traffic segmentationInternet access control policiesSWG capabilitiesIntegration with third part SWGSD-WANApplication Performance Performance reportingBusiness critically orientedObjective-based QoSPer-session QoS enforcementDynamic Path SelectionDelivered based on a cloud-native system architecture,ExtremeCloud SD-WAN closely integrates a key set ofsolution components: ExtremeCloud SD-WAN Orchestrator, cloud-hostedand part of ExtremeCloud IQ, providing a single paneof glass interface for configuration and policy definitionacross entire WAN. Policy includes SD-WAN appliances,SD-WAN topology, security profiles and multi-cloudon-ramp rules. All of this topped with end-to-endQuality of Experience (QoE) policy enforcement andapplication performance reporting. Hardware SD-WAN Appliances offering a range ofdeployment modes (routed, route/bridge hybrid,bridge) and site resiliency features designed to ensurea risk-free SD-WAN technology introduction. Site-DC-IaaS connectivity established over any WANtransport, creating flexible secure overlay topologiesincluding hub and spoke and full mesh or remoteconnections to public clouds; Proprietary DynamicWAN Selection algorithm is used to distribute thetraffic across different transport networks, based on theapplication performance driven ExperienceQuality Score.WWW.EXTREMENETWORKS.COMOrchestration Cloud-delivered through XIQSingle pane of glassZero Touch ProvisioningBuilt-in multitenancy, RBACInventory, configuration,supervision, reporting Full security stack featuring a Zone-Based Firewallused for VPN traffic segmentation and Internet trafficsteering (direct to internet, backhauling in DC, webgateways) and cloud-based advanced networkingplatform EdgeSentry (powered by Check Point)designed to bolster Site-based security using FWaaSand SWG (including Web filtering, HTTPs inspection,DLP, and more). Unrivaled Application Performance including layer7 Application Performance Monitoring analyzingall application flows traversing the SD-WAN overlay,an Application Performance Guarantee algorithmenforcing an advanced, end-to-end, per-session QoSacross the entire SD-WAN and WAN optimizationfor usage on highly congested networks; ApplicationPerformance specific data is immediately availablefor Customer analysis in the SD-WAN OrchestratorReporting Module.2

ExtremeCloud SD-WAN Top-Level ArchitectureOverview of the ExtremeCloud SD-WAN ComponentsOrchestrationSD-WAN veCloud hosted and managed by Extreme Networks, integrated with ExtremeCloudIQ, natively multi-tenant, multiple tenant levelsSecure communicationshttps, TLSv2, mutual authentication, secure device enrollmentUser Access Controlper user RBAC, suited for flexible delivery models, managed service vs DIYAzure hostedAzure firewall, Azure security audit toolset, Azure resiliency implementationIntegrationRESTful Alerting APILicensingSubscription (flexible term)Zero Touch Provisioningsecure SD-WAN Appliance inventory, per device SN-based enrollmentBranch Office50Mbps-250MbpsDatacenter500Mbps-2GbpsHAVRRP, OSPF, BGP, L2 proprietary synchronizationNetworking and RoutingDHCP client, DHCP relay, NAT, VLANs, BGP, OSPF, static routes, BFD, DPD,local preferencesPhysical ConnectivityGE 10/100/1000 base-T, 10G base SR/LR, optical, copperMultiple Site deployment modesFull-routed, bridge-routed hybrid, full-bridgedTransparent L2 connectivityBridge mode, fail to wire (HW model dependent), Link State PropagationAutomated Hub and Spoke topologyIPsec IKEv2, automatic tunnels setup between spokes and hubsAutomated full-mesh topology(Coming soon): automatic tunnels setup between SitesIPsec IKEv2, manual hub interconnection, manual site-to-site shortcut, manualsite-to-IaaSWWW.EXTREMENETWORKS.COM3

Overview of the ExtremeCloud SD-WAN Components (cont.)FeaturesDescriptionEdgeSentry(advanced Internet Security)SecurityIPsec IKEv2, Threat Prevention, Access control policies, HTTPS Inspection, logsand reporting, IPS, Antivirus, Antibot, powered by Check PointDirect to InternetStateful firewall, NAT, log export, local port forwardingZone Based FirewallL3 VPN segmentation, Internet Traffic policies with application granularityCompatibility with external WSGIPsec IKEv2, ZScaler Internet Access, Symantec WSS, Palo Alto Prisma AccessApplication recognition4000 SaaS applications, DPI dictionary, custom L3-L7 applications definitionDynamic WAN Selectionper session, based on network performance versus application-specificrequirements and application criticalityControlper session prioritization, based on application-specific requirements andapplication criticalityFlexible reportingcomprehensive dynamic reports from technical troubleshooting to business levelgovernance, with flexible data retention period (Enhanced Reporting)WAN Optimizationcompression, SSL optimizationApplicationPerformanceSD-WAN OrchestratorThe Orchestrator is a cloud-hosted component of theExtremeCloud SD-WAN solution, operated by Extreme.Its role is to manage and operate the entire ExtremeCloudSD-WAN solution. It provides a multi-tenant, single-pane-ofglass configuration and the management of the systemand offers visibility and reporting over the customernetwork usage and performance. It does not participate nitraffic forwarding.SD-WAN ApplianceThe service is locally delivered by edge platforms deployedin the customer’s premises called SD-WAN Appliances.These are proprietary hardware appliances deployed onsite, between the WAN devices and the LAN switch. SDWAN Appliances are provided by Extreme, as part of theExtremeCloud SD-WAN solution.WWW.EXTREMENETWORKS.COMDeployment modes include a broad range of options froma pure bridge mode (e.g., for Application Performanceover MPLS use cases), to full SD-WAN router withcomprehensive networking, routing, overlay and securitycapabilities, as well as a unique hybrid routed/bridge beinga mix of both. A wide range of combinations of the abovecapabilities, applicable to a single Site, is fully configurablefrom the Orchestrator.ExtremeCloud SD-WAN offers a range of SD-WANappliances, presenting a common set of softwarecapabilities, differentiated by performance metrics andconnectivity capabilities. Appliances are associated firmlyto specific Enterprise Packages and divided into twoprimary usage groups based on the designation towardsBranch or Data Center.4

SD-WAN Appliance for Branch Offices - Technical SpecificationsModelipe-30soipe-30axWAN interfacesipe-40ax-v23x GE 10/100/1000Base-TXLAN Interfaces1x GE 10/100/1000Base-TXBypass (Fail-to-wire)1 interface pair2x GE 10/100/1000Base-TX2 interface pairsLink State PropagationYesWAN Interface OperationBridged, RoutedApplication PerformanceVisibility, Control, Dynamic WAN Selection, Cloud Application Database (6000 Applications)WAN OptimizationCompression, Deduplication, incl. httpsNetwork and RoutingIPv4: Static, BGP, BFD, local preferences, OSPF, DHCP Relay, DHCP Client, NATSecurityFull Internet security (with EdgeSentry), Direct to Internet, Stateful Firewall, Zone Based Firewall, Web Security GatewaysOverlayIPsec based, Full-mesh, automated Hub and Spoke topology with manual Spoke-to-Spoke and Hub-to-Hub shortcuts,external VPN Gateway supportHigh AvailabilityVRRP for routed mode, proprietary for hybrid and bridge modeRecommended Usersup to 100up to 100up to 300SD-WAN Appliance for DC - Technical -SR-10Gipe-2000ax-LR-10GWAN interfaces3x GE 10/100/1000Base-TX3x GE 10/100/1000Base-TX3x GE 10GBase-SR/LR LCLAN Interfaces2x GE 10/100/1000Base-TX2x GE 10/100/1000Base-TX2x 10GBase-SR/LR LCBypass (Fail-to-wire)2 interface pairsLink State PropagationYesWAN Interface OperationBridged, RoutedApplication PerformanceVisibility, Control, Dynamic WAN Selection, Cloud Application Database (6000 Applications)WAN OptimizationCompression, Deduplication, incl. httpsNetworking and RoutingIPv4: Static, BGP, BFD, local preferences, OSPF, DHCP Relay, DHCP Client, NATSecurityFull Internet security (with EdgeSentry), Direct to Internet, Stateful Firewall, Zone Based Firewall, Web Security GatewaysOverlayIPsec based, Full-mesh, automated Hub and Spoke topology with manual Spoke-to-Spoke and Hub-to-Hub shortcuts,external VPN Gateway supportHigh AvailabilityVRRP for routed mode, proprietary for hybrid and bridge modeRecommended Usersup to 5000up to 50,000up to 50,000ConnectivityExtremeCloud SD-WAN provides full connectivity betweenyour sites, Data Center and Infrastructure-as-a-Service(IaaS), with flexible topologies: An automated hub and spoke topology is availablefor customer sites in geographical proximity, which donot require site-to-site communications; and do notintegrate with MultiCloud. This hub and spoke topologycan be completed with site-to-site shortcuts to followthe customer traffic requirements. Customers can also integrate remote sites notequipped with SD-WAN Appliances by connecting thirdparty gateways with their overlay network. IaaS workloads integration can also be achieved usingsite-to-IaaS connections.WWW.EXTREMENETWORKS.COMAll these overlay connectivity options implement IPsec toprovide secure application traffic protection. In addition to the construction of secure overlays,ExtremeCloud SD-WAN can also leverage the existingMPLS connectivity in a fully transparent manner.Depending on the deployment and configuration,the default gateway may either remain the existingconfigured router (using bridge capability of the SDWAN Appliance) or become the SD-WAN Appliance.ExtremeCloud SD-WAN Dynamic WAN Selection featureprovides dynamic traffic steering across the differenttransports to ensure resilience, application performance andcost optimization by leveraging a mix of up to 3 transportnetworks (MPLS-MPLS, MPLS-Internet or Internet-Internet).5

Selection of the best network access for eachapplication session to maximize applicationperformance, continuity of service, and optimizenetwork utilization.The Application Control is a global, dynamic QoS solution atthe session and at the second. Each session, depending onits criticality and the congestion state of the network, isallocated the bandwidth necessary for its proper functioning. End-to-end characteristics of each available network(quality and bandwidth) are considered to determine inreal-time the best access for each application session.In case of congestion on remote sites, the SD-WAN Appliancesare positioned on the source site and the destination siteand coordinate to protect the most critical applications. Several selection strategies (fully automated, partially,or totally limited) in order to respect the variouspolicies defined by each company.Application ReportingThis mechanism operates under the control of theApplication Performance feature (in charge of dynamicbandwidth allocation for Quality of Service) to bettermaintain performance of critical applications.Security ExtremeCloud SD-WAN provides advancedsecurity enforcement, both for internal and externalcommunications. Zone-Based Firewall, configured at the domain level,implements segmentation of the VPN traffic andsteering of the Internet traffic. EdgeSentry provides advanced Internet Security,including Web App Control (https inspection), URLFiltering, DLP, IPS, Malware protection/Antivirus andSandboxing (threat emulation). This feature, poweredby our partner Check Point, is delivered from the cloud,and seamlessly integrates within the ExtremeCloud SDWAN orchestration. ExtremeCloud SD-WAN also provides facilitatedIntegration with third party Web SecurityGateways providers.Application PerformanceApplication Performance Monitoring (Visibility)The ExtremeCloud SD-WAN System analyzes each packetby providing application recognition and measuring endto-end performance with different network metrics suchas packet loss, delay, jitter, and application metrics suchas TCP RTT (Round Trip Time), TCP SRT (Server ResponseTime) and TCP retransmission rate.Application Performance Guarantee (Control)The ExtremeCloud SD-WAN system is goal oriented. Itdynamically allocates bandwidth for critical applicationsessions to reach their performance goals duringnetwork congestion.WWW.EXTREMENETWORKS.COMThe ExtremeCloud SD-WAN Reporting makes it possibleto compare the performance objectives defined at thelevel of the orchestrator with the actual performancemeasured on the network. This comparison results in aunique quality indicator: Experience Quality Score (EQS), ametric between 0 and 10 that translates in real time or in aconsolidated way the performance of a given application, asite, or a link.The data are kept for a period of one week in the dashboard.The Application Reporting collects the data and aggregatesit for a long-term view (up to 13 months) with the EnhancedReporting option.WAN OptimizationThe ExtremeCloud SD-WAN solution has all the mechanismsto improve application performance: compression/caching, TCP acceleration for high-latency links, and SSLOptimization for encrypted streams.All these mechanisms operate under the control ofthe Application Control feature (in charge of dynamicbandwidth allocation), the only way to better maintainperformance of priority applications.WAN optimization is a system option and requires diskresources (SD-WAN Appliance or disk-based host).Use CasesExtremeCloud SD-WAN is built with Enterprise WANevolution in mind. It addresses the need to deploy a resilient,cloud-native SD-WAN from ground up, fast and risk-free,while benefiting from low TCO. It also ensures extending anExtremeCloud IQ solution from the DC to the Branch usingan end-to-end Extreme based solution, while leveragingcloud economics.This paragraph breaks those motions down into specific usecases, presenting possible applications and benefits in bothtechnical and business orientated terms.6

Technical Use CasesUse Case 1: Connectivity Build your SD-WAN from the ground up, fast, risk free and whilemaintaining low TCO. Benefit from flexible deployment modes and zero-touch provisioningwith transparent/hybrid deployment topology. Augment your EXTR stack with SD-WAN, fast from a shared cloudmanagement. Underlying technology: ExtremeCloud IQ, zero-touch provisioningand single pane of glass management, transparent/hybrid deploymenttopology, Hardware included in Subscription.Use Case 2: Resiliency Guarantee site resiliency through multiple WAN network support andhigh availability SD-WAN Appliances. Guarantee application performance for critical workloads in site-siteand site-cloud traffic scenarios, detect applications automatically andcondition performance-based dynamic WAN Selection. Underlying technology: Dynamic WAN Selection (performance based) SD-WAN Appliance HA, Application aware (CAD), AppPerf monitoringand guarantee.Use Case 3: Security Secure your SD-WAN Sites, fast and while optimizing TCO. Leverage advanced networking technologies of FWaaS and SWGdelivered as-a-cloud-service (always up to date). Underlying technology: (EdgeSentry, powered by Check Point) deploycloud based FWaaS/SWG from unified orchestration, without the needto implement physical NGFW at Site.WWW.EXTREMENETWORKS.COM7

Business Use CasesUse Case 4: Reduce Cost Deploy cloud-native SD-WAN in 30% less time, through an optimizedend-to-end cloud-managed process, including a true zero-touchprovisioning process. Gain low TCO with subscription model, including CPE as part of the Service. Extending your ExtremeCloud IQ from the data center to the Branchwhile leveraging cloud economics.Use Case 5: Increase Revenue Enforce WAN network provider agnostic, experience-based businesscontinuity policy, end-to-end across the entire Extreme solution. Resiliency based on best user experience vs network metrics. Enforcing business continuity and strategic principles into networkpolicy when deploying end-to-end Extreme solution.Use Case 6: Lower Risk Reduce risk and TCO through a centralized, automated and always upto-date firewall deployment, delivered as part of the SD-WAN project. Single pane of glass policy definition in a cloud-based delivery modelguaranteeing low TCO.WWW.EXTREMENETWORKS.COM8

ExtremeCloud SD-WAN LicensingExtremeCloud SD-WAN Licensing structureExtremeCloud SD-WAN is the market-first “all-inclusive”SD-WAN Service in Subscription only model, structured tooffer an immediate benefit of optimized TCO. Commercialoffering comprises: An affordable Enterprise Package, designed to coverEnterprise SD-WAN functionality. Complemented by a range of Add-on Packages,delivering advanced networking features (e.g.,Advanced Security, WAN Optimization,Enhance Reporting).The “all-inclusive” subscription concept is best presentedusing the example of Enterprise Package, which delivers allcomponents necessary to build an EnterpriseSD-WAN network: Each Enterprise Package represents an SD-WAN Siteand provides the appropriate SD-WAN Appliance aspart of subscription. Subscription includes the SD-WAN Service Levelenabling use of Enterprise SD-WAN functionality. SD-WAN Service Level t-shirt size defines whatperformance/capacity given SD-WAN Site willoperate at. Enterprise Package, by default, guarantees access tothe SD-WAN Orchestrator.WWW.EXTREMENETWORKS.COM Support and Maintenance services for anycomponent included in Enterprise Package is alsoincluded by default. Lastly, ExtremeCloud SD-WAN includes a uniqueCustomer Success service with every EnterprisePackage, guaranteeing maximizing value from SD-WANdeployments.Feature availability in Enterprise Package andAdd-on PackagesFeatureXSD-WAN EnterpriseSD-WAN Service Level Cloud Orchestration, ZTP SD-WAN Appliance (Branch or DC) Basic AppPerf Remote V C Cloud Application Database Advanced AppPerf/WANopt Hight Availability (Site Resiliency) Hybrid of full-stack deployments(bridge routed, or fully-routed) Basic Security (ZBF) Advanced Security (EdgeSentry) Enhanced Reporting Included per Site Optional per Site Optional multiSite9

Enterprise Package SubscriptionEnterprise Package subscription term:Foundational element of any SD-WAN deployment is a Site.ExtremeCloud SD-WAN licensing model recognizes an SDWAN Site through Enterprise Package subscription: One Enterprise Package identifies a single SD-WAN Site. New Subscription: 1, 3 or 5 years fixed term. Renewal Term: Flexible (min 1 year).Deployment flexibility There are two main Enterprise Package designations:Branch and DC, suggesting appropriate Site assignmentin an SD-WAN network. Each Enterprise Package is described by a “t-shirt size”(XS, S, M, L, XL), which specifies the SD-WAN ServiceLevel performance. The “t-shirt size” coupled with Branch/DC designationidentifies the specific SD-WAN Appliance that will bedelivered with a particular Enterprise Package. Enterprise Packages with different Service Levels andtherefore different SD-WAN Appliances can coexist in asingle SD-WAN Domain. Enterprise Packages with different terms can coexist ina single SD-WAN Domain. Enterprise Package can be upgraded to a higherService Level by ordering a new Enterprise Package. Enterprise Package cannot be downgraded. SD-WAN Appliance cannot be sold outside of theassigned Enterprise PackageEnterprise Package SubscriptionService SubscriptionSD-WAN ServiceLevel/BWSubscr. -TENT-DC-LXL/2GbpsSiteipe-2000ax-10G-SR oripe-2000ax-10G-LRNew Subscr. TermRenewal TermAssociated HW (incl.)ipe-30so1/3/5YFlexible (Min 1Y)ipe-420axHigh Availability Add-on SubscriptionOn top of the Enterprise Package Service License a High Availability Add-on license can be ordered, delivering the SiteResiliency functionality and forming a High Availability pair: High Availability Service License needs to match the paired Enterprise Package Service License, e.g., ENT-HA-Branch-Scan be paired only with ENT-Branch-S. High Availability Add-on license term needs to match the paired Enterprise Package.HA Add-On SubscriptionsService SubscriptionSubscr. TypeNew Subscr. TermRenewal TermHW YesENT-HA-Branch-MSite1/3/5YFlexible (Min SiteYesWWW.EXTREMENETWORKS.COMYes10

Other Add-On SubscriptionsOn top of the Site Service License and HA Add-on, optional licenses, providing added value, are available. Top-level rulesgoverning Add-on licenses: New Subscription Term: Flexible (min 1 year). Renewal Term: Flexible (min 1 year). License Type: per-Site or per-Domain (licensed functionality will be available to all Sites in an SD-WAN Domain). Stackable licenses: per-Domain licenses are stackable, which means that to increase capacity of a certain licensedfeature, more than one can be assigned to an SD-WAN Domain.Other Add-On SubscriptionsService SubscriptionSubscr. TypeService LevelENT-WANOpt-BranchSiteWAN Optimization add-on for Branch S or M Enterprise Packages, one licenseper package.ENT-WANOpt-DCSiteWAN Optimization add-on for DC S, M or L Enterprise Package, one license per packageENT-EnhancedReporting-5DomainStackable license Enhanced Reporting functionality inside a Domain. Licensed pernumber of Sites in a Domain. License covers 5 sites and license stack must reflect all sitesin domain.ENT-Remote-VandC-5DomainStackable license enabling 5 RVC destinations within a Domain with Remote V Cfunctionality. Licensed per number of configurable RVC destinations.ENT-EdgeSentry-10DomainStackable 10Mbps license to reach desired BW of EdgeSentry functionality in a Domain.Licensed per volume of traffic processed by EdgeSentry inside a Domain. Must be at least50Mbps per Domain.CloudMeshNot available at 2022-Q2 GA, delivery planned end of 2022Service InformationExtremeCloud SD-WAN subscriptions include industry-leading 7x24x365 Global technical support and access to ourTechnical Support Portal, Next-Business-Day Advance Hardware Replacement (NBD AHR) services, and digital CustomerSuccess.Customer Success provides content and insights so customers get the most value quickly from their ExtremeCloud SDWAN subscription. ExtremeCloud SD-WAN Customer Success provides the following value-add access: OnDemand Training. Prescriptive material to help you onboard quickly. Self-Serve Technical Audit to help mitigate future issues. Best practice tips on the SD-WAN solution to help you manage your solution. Stay focused on your business outcomes with templatized Success Plans. Periodic reviews with a Customer Success Advocate to ensure you are on the right path to success.http://www.extremenetworks.com/contact 2022 Extreme Networks, Inc. All rights reserved. Extreme Networks and the Extreme Networks logo are trademarks or registered trademarks of Extreme Networks, Inc.in the United States and/or other countries. All other names are the property of their respective owners. For additional information on Extreme Networks Trademarksplease see marks. Specifications and product availability are subject to change without notice. 43134-0320-07WWW.EXTREMENETWORKS.COM11

Azure hosted Azure firewall, Azure security audit toolset, Azure resiliency implementation Integration RESTful Alerting API Licensing Subscription (flexible term) SD-WAN Appliance Zero Touch Provisioning secure SD-WAN Appliance inventory, per device SN-based enrollment Branch Office 50Mbps-250Mbps Datacenter 500Mbps-2Gbps