SilverPeak SDWAN Data Flow

Back to GigaNetworkers 

 

 

SilverPeak SDWAN Data Flow

Conceptual look at how packets are processed as they pass through an appliance. Traffic enters on the left, from the LAN, and proceeds to the right to the output interface.

 

 Steps below : 

 1. Packets come in from the LAN and the flows are inspected for matches with Route, QoS and
Optimization Policies. Traffic is classified and processed according to those policy matches
2. TCP traffic that is being accelerated is sent to TCP for processing where local proxy functions etc.
are performed.
3. Then it is processed with Network Memory, if optimization policy dictates,
4. And sent to the shaper
5. Otherwise it is classified according to QoS policies and then placed in the correct traffic class
queue for its destination tunnel.
6. UDP and other traffic receives Network Memory processing if optimization policy dictates, and
sent to the shaper for processing
7. Otherwise it is classified according to QoS policies, and placed in the correct traffic class queue for
its destination tunnel.
8. Pass-through Shaped traffic is sent to the Shaper for processing.
9. Pass-through Unshaped, at the bottom, is sent directly to the output interface.
10. The Shaper processes traffic according to the shaper configuration. QoS queues are serviced
according to priority unless their maximum wait time has been exceeded.
11. Packets are then processed according to Network Integrity and FEC packets are generated as
dictated by Link Bonding Policy configuration in the Business Intent Overlay.
12. Passthrough shaped traffic, which does not receive Network Integrity processing, is sent to the
output interface for processing and transmission.
13. Packets to be tunnelized are then encapsulated, based on the destination tunnel and tunnel type,
encrypted if necessary, and
14. Finally, they are sent to the appropriate output interface, either a physical NIC or VNIC for
transmission to the next-hop switch or router.
15. Starting in release 8.1.8, which introduces the zone based firewall, security policy is applied last,
when the output interface or overlay zone is known.

Common Network Issue and Solutions :

 

Back to GigaNetworkers 

 

Cisco Viptela Combining Best of Breed in Security and SD-WAN :)

Back to GigaNetworkers 

Cisco  SD-WAN offering both networking and security to include full-stack multilayer security capabilities on the platform and in the cloud. Its integrated on-premises and cloud security arms IT with advanced threat defense wherever it is needed – for branches connecting to multiple SaaS or IaaS clouds, to data centers, or everything on the internet.

itself spans a different combinationof security features. These security features are:

IPSec Encryption: An underlying WAN fabric forsecuring on-prem WAN access and direct internet access

IPS: A built-in intrusion prevention system within on-prem enterprise firewall based on Snort and powered by Talos

App Controls: A built-in security practice within every part of the security stack, able to control 1400+ apps using on-prem enterprise firewall

Malware Protection: An extended security feature across both on-prem and cloud security using Cisco AMP and Threat Grid to prevent/detect malicious files with sandboxing

SSL/TLS Decryption: A security feature with unlimited scale for either cloud security or on-premsecurity with sufficient resources.

URL Filtering: An extended security feature across both on-prem and cloud platforms with 80+ web categories covering millions of domains and billions of web pages

 Cisco vManage had logically grouped all the Threats and giving customer & admins the ease to configure the security policy as they want , Summary of Threat Surface below :




 If you login to vManage , goto configuration > Security and find the Screen below :





You can see how easily is to group the Various security flaws and apply tight security on top of that ,
so we have options :
1) Compliance ( FW + IPS/IDS)
2) Guest access ( FW + URL Filter)

3) Direct Cloud Access ( FW + IPS/IDS + AMP + DNS Security )
4) Direct Internet Access ( FW + IPS/IDS + URL Filter + AMP + DNS Security )
5) Custom ( That you can mix and match any combination not listed above )

You can find the videos And Full course

@Udemy link below :
https://www.udemy.com/course/sdwan-security/


 @YT below link :
https://www.youtube.com/watch?v=xfZeiMCVbtQ&list=PL1PiPEQOeKMZZH7rr4d4nNmQu1WD3Oi_f

Back to GigaNetworkers