Barracuda achieves Recommended rating in 2019 NSS Labs SD-WAN group test.

×

Secure SD-WAN

Boost application performance and reduce costs.

What Is SD-WAN And Why Do I Need It?

More than ever, today’s businesses rely on connectivity. Organizations are growing more reliant on advanced distributed networks and new network topologies are emerging, to accommodate the accelerating adoption of SaaS solutions and public cloud platforms. It is increasingly critical to ensure predictable application performance and reliability, along with secure, uninterrupted connectivity at all locations.

Backhauling internet traffic to a central breakout is no longer sustainable once you decide to leverage SaaS applications like Exchange Online or SharePoint Online in Office 365. These cloud-connected applications increase overall traffic while requiring very low latency to work. To manage these demands, you need a different architecture that enables local internet breakouts at every location for direct access to cloud services.

Software-Defined Wide-Area-Networks (SD-WAN) are an increasingly popular and cost-effective alternative to hardwired network connections and MPLS infrastructures. SD-WAN significantly increases WAN network reliability, agility, and performance by using and aggregating multiple active, load-sharing connections of any type (Broadband/cable, MPLS, 3G/4G). Advanced data caching, traffic compression, and other WAN optimization capabilities leverage the available bandwidth. This lets you ensure that there is always enough bandwidth for business-critical applications, by automatically making dynamic, on-the-fly adjustments to QoS and application usage policies depending on real-time bandwidth and latency measurements.

“The future of SD-WAN lies in balanced security and advanced WAN capabilities”

Bjarne Munch

Four architectures to Secure SD-WAN

Key Benefits of Barracuda’s Secure SD-WAN Solution

Unlike SD-WAN solutions that only provide connectivity—requiring a separate security solution—Barracuda CloudGen Firewall combines a complete set of SD-WAN capabilities with advanced, multi-layered security technologies in a single unit.

Deploy it just the way you need: Barracuda CloudGen Firewall is available on-premises as a physical or virtual appliance, or in the cloud.

Avoid deployment hassles with Zero-Touch Deployment—remote-location personnel without IT expertise can simply plug in the appliance, and it will automatically connect to Barracuda Firewall Control Center, download and install its configuration file, and deploy itself on the network.

Maintain a unified security posture across your hybrid and multi-cloud environment simply and cost-effectively with Barracuda Firewall Control Center—no matter how complex or distributed your networks become.

Barracuda CloudGen Firewall gives you the SD-WAN tools you need to easily:

  • Improve overall connectivity
  • Increase network flexibility and agility
  • Improve application performance
  • Reduce overall cost
  • Reduce cost for MPLS services
  • Reduce physical infrastructure

Barracuda’s Secure SD-WAN Solution vs Competing Deployment Options

In a recent survey conducted by Vanson Bourne for Barracuda, a majority of your peers agree that security is the top concern when moving to SD-WAN. To address those concerns, organizations like yours typically adopt one of these four strategies.

Cloud-only based security and SD‑WAN solution

Despite the hype over cloud-managed SD-WAN, many organizations are avoiding this option. IT professionals express their concerns about disclosing confidential data like VPN credentials to a cloud-managed SD-WAN vendor. What’s more, many organizations see that regulatory compliance prevents them from rolling-out cloud-managed or cloud-hosted SD-WAN solutions globally.

Pure-cloud managed security and SD‑WAN solution

Adding pure-play SD-WAN products featuring basic security like cloud-based web filtering and basic firewalling on top of their existing security can provide cost savings and help organizations save on bandwidth costs. However, it is a two-box solution, which means less flexibility and higher IT overhead. Yet the built-in security capabilities of many SD‑WAN appliances are inadequate to provide sufficient protection against today’s increasingly advanced threats.

Two or more pure-play solutions for security and SD‑WAN

The best-of-breed approach: Implementing two or more pure-play solutions to address security and SD-WAN separately would seem to offer the best of both worlds. The downside is that it is extremely costly and will incur twice the management overhead as there are effectively two boxes not talking to each other.

Single-box solution combining advanced security and SD‑WAN

A majority of IT professionals claims they would favor an easier-to-administer single-box solution with the best possible security and SD-WAN connectivity and can compromise on WAN optimization capabilities. Advanced capabilities, like Advanced Threat Protection and centralized management are very important or crucial to their SD-WAN decision. Barracuda Networks provides this option via its CloudGen Firewall.

SD-WAN solution matrix

Advanced Security Sandboxing Central Management Reduced Complexity Network Agility Ease of Deployment WAN Optimization Capabilities Compliance
Cloud-only based security and SD‑WAN solution
Pure-cloud managed security and SD‑WAN solution
Two or more pure-play solutions for security and SD‑WAN
Single-box solution combining advanced security and SD‑WAN
+ Cloud-only based security and SD‑WAN solution

• Advanced Security

• Sandboxing

• Central Management

• Reduced Complexity

• Network Agility

• Ease of Deployment

• WAN Optimization Capabilities

• Compliance

+ Pure-cloud managed security and SD‑WAN solution

• Advanced Security

• Sandboxing

• Central Management

• Reduced Complexity

• Network Agility

• Ease of Deployment

• WAN Optimization Capabilities

• Compliance

+ Two or more pure-play solutions for security and SD‑WAN

• Advanced Security

• Sandboxing

• Central Management

• Reduced Complexity

• Network Agility

• Ease of Deployment

• WAN Optimization Capabilities

• Compliance

+ Single-box solution combining advanced security and SD‑WAN

• Advanced Security

• Sandboxing

• Central Management

• Reduced Complexity

• Network Agility

• Ease of Deployment

• WAN Optimization Capabilities

• Compliance

A single appliance that combines security and SD-WAN is more cost-effective and flexible than other options. It’s also easier to deploy, an important consideration if you have multiple remote locations to protect.

Typical SD-WAN Use Cases

Today’s widely distributed networks and accelerating cloud and SaaS adoption create numerous challenges that call for SD-WAN. Barracuda CloudGen Firewall’s secure SD-WAN is built to meet these challenges, and should be the cornerstone of your traffic-management, quality-of-service, and security strategy.

Optimize branch-to-branch, branch-to-cloud and cloud-to-cloud connectivity

If you have branch offices and remote locations that need to run SaaS applications or connect to your network, the traditional approach of backhauling traffic to a central breakout is unsustainable in the cloud era.

Barracuda enables you to establish direct internet breakouts for optimized cloud accessibility. Our SD-WAN capabilities maintain fully meshed VPN using affordable broadband connections.

Prioritize mission-critical traffic for improved user experiences

Barracuda CloudGen Firewall dynamically assigns available bandwidth, uplink, and routing information based not only on protocol, user, location, and content, but also on applications, application categories, and even web-content categories.

Available bandwidths and latencies between VPN endpoints are measured pro-actively in real-time to select the best suitable uplink per application. If the measured bandwidth of an uplink is not sufficient to sustain business-critical traffic, sessions for non-critical traffic are shifted automatically to secondary links, to free up high-quality bandwidth for critical traffic.

Cut MPLS costs with bandwidth optimization

Replacing expensive, leased MPLS lines with inexpensive broadband connectivity and smart VPN tunnels with traffic compression across multiple uplinks significantly minimizes WAN cost.

Why Barracuda?

Barracuda’s CloudGen Firewall redefines the role of the firewall from a pure perimeter security solution to a distributed network optimization solution that can scale across any number of locations and applications. In addition to typical security and application regulation functions, the firewall regulates traffic flows and provides SD-WAN features to economically route traffic across the extended network while improving performance.

SD-WAN NSS Labs Recommendation