KESR Model 2Kaspersky
SD-WAN Edge
Service RouterOverview
The Kaspersky SD-WAN Edge Service Router (KESR) Model 2 isCustomer Premises Equipment (CPE) located at a company’s sites –branches, for example – connecting them to the corporate SD-WAN
network. CPE is controlled by pre-installed Kaspersky SD-WAN
software. KESR Model 2 makes this connection smooth and fast, anddoesn’t require any additional configurations thanks to Zero-Touch
Provisioning, reducing deployment time to minutes.

Behind the interaction of KESR devices
are the centralized Kaspersky SD-WANcomponents such as controller andorchestrator. A unified web interface
lets you manage the solution itself as
well as lots of devices, automating
their configuration. This approachstreamlines troubleshooting and makes
managing your entire branch network abreeze for IT staff.

Under the hoodKaspersky SD-WAN, together with KESR devices, provides access to allcompany resources via diverse communication channels, including LTE,and converges them to unify the network infrastructure of distributed
companies. Kaspersky SD-WAN offers a number of smart features
such as Quality of Service (QoS), built-in Deep Packet Inspection (DPI),
Forward Error Correction (FEC), Packet Duplication and more, thatdeliver efficient data transfer and application performance even withunstable connections. The solution secures all locations using VPN
overlay, and centralizes device configurations, security policies andtraffic rules.

Key features

KESR
Model 2KESR Model 2 is the junior modelin the Kaspersky SD-WAN Edge
Service Router line. This device
offers a wide range of features,and is powered by an Intel Atom
C3000 4-core processor. KESR
Model 2 is suitable for small andmedium businesses that needefficient performance at anaffordable price.

150 Mb/s
Total throughput in full-duplex modewith DPI analysis for IMIX packets

Desktop setup as well as wallor 19' rack mount

LTE with 2 x SIMs, Wi-Fi and10 Gb/s SFP+ ports

Powered by a 4-core Intelprocessor

Zero-Touch Provisioning for
new locations

Kaspersky SD-WAN single
management console

KESR Model 2 specifications
Specification

Description

CPU4 × cores Intel® Atom® C3000

Memory1-channel, single-rank DDR4 down, 8 GB total

StorageOnboard eMMC SSD: 64 GBWAN• 1 × 4G LTE radio card, 2 × external LTE antennas, 2 × SIM cards• 2 × auto media detect 1 Gb/s copper/fiber ports• 2 × 10 Gb/s SFP+ cages for xgsPON or SFP transceivers

LAN• Dual-band 802.11ax Wi-Fi, 2 × internal Wi-Fi antennas• 4 × 2.5 Gb/s RJ-45

Local access

RJ-45 and micro-USB console ports (auto-detect)

Security• Secure boot• Kensington lock receptacle

LED3 × front panel multicolor LEDs:• power indicator• operation readiness• SD-WAN controller connection

RTC• RTC embedded in CPU• Internal battery

Bootloader

Embedded UEFI BIOS

Power input+12 VDC locking barrel jackPower supply• External desktop PSU• Regional AC cord options included

Environmental

0 ºC to +40 ºC operating temperature

Dimensions

256 × 200 × 44 mm (W × D × H)

Mounting options• Desktop• Wall-mount accessory kit (optional)• Rackmount accessory kit (optional)Kaspersky SD-WAN capabilities
Capability

Description

Deployment• On-premise• Clouds (private or public)

Virtual Network Functions (VNFs)• ETSI MANO
• VNF support (Kaspersky as well as third-party vendors’ products). KESR Model 2doesn't support VNFs for uCPE. VNF can be deployed on separate equipment (e.g.
server)• Service-chain lifecycle management

CPE types• Servers• Virtual CPE• Universal СPE (x86, ARM 64)• Light-CPE (x86, ARM v8/64, MIPS)Management• Centralized management of CPE software versions and Kaspersky SD-WAN centralcomponents• Out-of-Band management for CPE (through underlay network without customer’stunnels)

SD-Branch• LAN segmentation• Local services (Wi-Fi, DHCP and etc.)• Local internet access

Supported communication channels• 4G• MPLS• Ethernet• PPPoE

Supported network topologies• Full mesh
• Partial mesh
• Hub-and-Spoke

Zero Touch Provisioning• DHCP• Static• Two-factor authentication support• URL Auth

VPN/Overlay• L2 Point-to-Point• Point-to-Multipoint• Multipoint-to-Multipoint• L3 VPN

Fault tolerance and redundancy• High-availability cluster of central components• SD-WAN gateways redundancy (active/active)• CPE redundancy (VRRP)

LAN segmentation

Full 802.1q support for CPE LAN-ports (Access, Trunk, Q-in-Q)

Routing• Static• BGP• OSPF• BFD• PIM• NAT (PAT, SNAT, DNAT)• VRF Lite
• Multicast service support for SD-WAN network• Path MTU discovery support

WAN load balancing and fault tolerance• Active/Standby• Active/Active• Bonding

Channel quality control• SLA assessment based on traffic active probes• BFD

Channel optimization• FEC• Packet Duplication

Quality of Service (QoS)• Multilayer QoS• 8 queues per virtual service• DSCP support• SLA assessment (loss, jitter and delay)• QoS remapping support for CPE WAN interfaces• Policing and shaping support

L7 traffic routing• Built-in DPI• Application aware routing• Application SLASecurity• Stateful Firewall• Built-in High-Speed Encryption support• Encryption configuration per channel

Monitoring• Monitoring of central components, CPEs
• Network Test Access Point (TAP)• NetFlowOrder your own KESR Model 2
SKU
Kaspersky SD-WAN ESR (GI) Model 2

1

Define the numberof CPEs you need.

2

Contact us and specify
the SKU.

Learn more

www.kaspersky.com/
www.securelist.com/© 2024 AO Kaspersky Lab.
Registered trademarks and service marks are the propertyof their respective owners.

#kaspersky#bringthefuture