Reliable network and security
capabilities rolled into one

Kaspersky
SD-WANIntroduction
For most companies today, business continuity directly depends on
network reliability and uninterrupted access to web resources. With
multiple branches, distributed teams, cloud resources, and remote
employees, it becomes increasingly complicated to provide andmanage security while properly maintaining your network infrastructure.
These conditions require a versatile approach that meets the evolving
demands of your business.

Customer challenges
when using traditional
WAN channels
Long lead time to connect new
locations, and labor-intensive
infrastructure scaling in general

Managing complex infrastructures,
and a shortage of qualified experts

Security threats and a lack of overall
security integrity across branches

High WAN link operating costs, low
bandwidth or utilization problems

A lack of overall infrastructure
reliability and inefficient performanceof applications

Make your life easier with
Kaspersky SD-WAN
Kaspersky SD-WAN builds fault-tolerant, secure networks with unifiedmanagement, addressing the challenges associated with traditional
WANs. The solution allows you to use diverse communication channels,
optimize cloud connections, enhance the security and improve theperformance of applications, and speed up implementation of newservices.
Kaspersky SD-WAN delivers capabilities to manage the transport
network and integrate data transfer tools (e.g. virtual routers) as
well as analytical and security services through the Virtual Network
Functions (VNFs) manager and the orchestrator within its architecture.
This approach helps you to easily create your own network security
ecosystem and implement a Secure Access Service Edge approach.

Secure Access Service Edge (SASE)
SASE stands for network and security services synergy, which aimsto provide agile and reliable networks, while shift left from different
security solutions to unified security available from private or public
clouds. The whole company network is secured, regardless of where
your users are or how they connect to it.

A large number of IT incidents, including
those related to human errors

Easy scalability

Centralized security

Connect new locations with a zerotouch experience to meet constantly
changing business demands

Automatically deploy virtualized traffic
control and security tools through theVNF manager

Cost optimization

Convenient management

Reduce infrastructure costs, converging
separate communication channels andnetwork functions

Manage your entire network from asingle console, modifying security
policies and traffic filtering rules

Key features
Reliable network for all branches
Privatedata centers

HQ

Use any communication channels
The solution provides access to all company resources (offices, private and public clouds,and data centers) with diverse communication channels: MPLS, Ethernet, 4G and otherwireless or wired channels.

4G

PPPoE

Instantly connect new locations

MPLS

Ethernet

Customer Premises Equipment (CPE) makes connecting to new locations smooth andfast, without additional configurations through Zero-Touch Provisioning (ZTP), reducing
deployment time to minutes.

Enjoy smooth data transfer
CloudsBranches

Single management console

The solution lets you configure dynamic tunnels between CPE, manage and prioritize
application traffic, optimize data transfer, and efficiently orchestrate network functions.

Single management consoleManage your entire network
A unified web interface lets you manage the entire network: configure CPE, create traffic
filtering rules and security policies and define SLAs for services.

Build and visualize your infrastructure
Devices

Policies

Security

The convenient graphical builder lets you plan and visualize your network infrastructure
while making integrating new services a breeze – just drag and drop virtual network
functions that can then be launched immediately.

Benefit from informative dashboards
The state of the entire infrastructure is in your control and at your fingertips, including CPE,
virtualized functions, and physical resources.

Unified security
DPIFW

Single security policy
The solution provides security for branches using VPN overlay, centralized device
configurations, security policies and traffic rules, pushing them out across the WAN.

Easily connect security tools
The network functions virtualization lets you automatically deploy traffic control andsecurity tools, including firewalls, secure web gateways and intrusion prevention systems.

SWGIPS

Versatile architecture
The solution lets you easily integrate security tools from different vendors thanks to Virtual
Network Functions (VNFs) manager and the orchestrator within its architecture.

Convenient and informative web interface
The key information about the solution and network status are on the main screen

The convenient graphical builder
of service chains with extensive
capabilities

Usage of virtual and server
resources based on a wide rangeof parameters

Conceptual architecture of the solution
Management

Security

DPIFW

SWG

WAN

Devices

ServicesIPS

Security

Orchestrator and controller
deployment options

Public cloudDatacenter

CPE

Orchestrator/controller

CPE

HQ

Major branch

CPE

Branch 1

Branch 2

CPE

Branch N

CPE

Communication channels

Access

Flexibility to choose communication channels
and their combinations

Secure access to:

4G

MPLS

PPPoE

CPE

Ethernet

CloudsDatacenter

Automatically set up
access to company
resources

environments (PaaS)Kaspersky SD-WAN tiers and capabilitiesKaspersky SD-WAN is available in two tiers: Standard and Advanced.

Capabilities
Support for CPE throughput up to 10 Gb/sConnection andmanagement

Management from private/public cloud or on-premise
Support for Hub and Spoke, Full Mesh, and Partial Mesh topologies
SLA policies for applications
Dynamic routing (BGP, OSPF)
VRF-Lite support
Built-in DPIStateful Firewall
NAT (PAT, SNAT, DNAT)
Zero Touch Provisioning

SD-WAN
Services

Real-time channel quality control
Support for OpenFlow
Channel optimization (FEC and Packet Duplication support)
Support for P2P, P2M, and L2/L3 VPN services
Support for built-in high-speed encryption
Support for integration of Kaspersky products

Virtualnetwork
functionsETSI MANO
Support for third-party VNFs
Service chain lifecycle managementuCPE support
Multicast support

Services

PIM support
Multi-Tenancy support

Standard Advanced

Licensing
The solution is licensing by CPE based on specific throughput. You can choose our recommended models fromthe Kaspersky SD-WAN Edge Service Router (KESR) line with various interfaces.

Soon

KESR
Model 1KESR
Model 2

KESR
Model 3150 Mb/s

300 Mb/s

Soon

KESR
Model 4

Reliable network and security capabilities
rolled into one

The transport
backbone ofunified security
Kaspersky SD-WAN is an
essential step in building unified
security on top of a reliable
distributed network. With
Kaspersky SD-WAN you canstart to build Secure Access
Service Edge (SASE) now.

The Kaspersky team has an unmatched track record of cybersecurity
expertise, and our products have been evaluated as the mosteffective security solutions in more than 700 independent tests. Whileactively developing our network security solutions, we aim to increasecustomers’ protection through Secure Access Service Edge (SASE)
capabilities.

It’s quick and easy to connect
Kaspersky SD-WAN
1

Deliver CPE
to the branch
3

It’s ready to use!

2Connect CPE
to the network

Learn more

www.kaspersky.com© 2024 AO Kaspersky Lab.
Registered trademarks and service marks are the propertyof their respective owners.

#kaspersky#bringonthefuture