Allied Telesis Secure Enterprise Software Defined Networking (SES) is a state-of-the-art network management and security solution. It provides what enterprises consistently tell us they need: reduced network management costs, increased security and an improved end-user experience. SES is an award-winning innovative SDN solution that works with security applications to instantly respond to alerts and block the movement of threats anywhere within your wired or wireless network. Automatic security threat isolation and remediation Most organizations utilize an Intrusion Detection System (IDS) or Intrusion Prevention System (IPS) to defend their network from attacks. However, an IPS can introduce latency and bottlenecks, and most IDS can only warn if a threat has been found; they cannot act to block the offending traffic. By the time the operator reacts to the warning, it may be too late. SES uses best-of-breed IDS applications to identify threats, then responds immediately to isolate the affected part of the network. It is then capable of automatically quarantining the suspect device and applying remediation so that it can re-join the network with a minimum of network disruption and without manual intervention. Responses are configurable and comprehensive logging provides a clear audit trail of the actions taken. This is a truly innovative feature that helps organizations avoid lost time and unnecessary disruption to services. Block threats at source Most IPS solutions are only capable of blocking suspicious traffic as it passes through the IPS device. Since this tends to be near the gateway to the Internet, only external threats can be detected and blocked (this is the traditional “secure border” model). However, SES can isolate traffic anywhere in the network, so it can prevent threats not only on the border, but threats inside the network too through USB drives, BYOD, etc. This makes SES an innovative security solution that can monitor traffic entering and traversing the local network without introducing latency or bottlenecks. Wired and wireless SDN SES is the first commercial SDN solution for wireless networks that offers programmability and control inside the network where it is most vulnerable. Allied Telesis wireless access points are OpenFlow capable and can be controlled by the SES controller to provide a dynamic wireless network that offers end-users a better experience. New policies and security updates can be easily implemented from the centralized controller to all access points in seconds, to dramatically cut the time required for network and security management, with a corresponding reduction in operating costs. Open and flexible SDN solution SES interoperates with networks containing compatible OpenFlow switches, and a range of physical and virtual firewall products. There is no need for a forklift upgrade of the network to take advantage of the benefits of SES – it can interoperate with a wide range of existing equipment. SES also integrates with Allied Telesis Autonomous Management Framework™ (AMF), which is a powerful network management and automation tool that also delivers cost and time savings. When used with AMF, SES no longer relies on the OpenFlow protocol to communicate with the network devices. Instead it can use AMF to deliver instructions to conventional network devices. Therefore, this provides all the benefits of an SDN solution without the need for OpenFlow. This lowers the risk and cost for enterprises to adopt SDN solutions since their existing network can remain unchanged. With SES, Allied Telesis will deliver real value by constantly monitoring for threats and instantly protecting the network. While other SDN solutions provide esoteric solutions for obscure networking problems, SES will deliver true business value every day.

Our Software Defined Wide Area Network (SD-WAN) technology ensures that your business-critical applications are prioritized across your Internet connections and that all traffic flows are routed over the best connection in real-time. Site-to-Cloud Architecture Unlike box-only solutions, Bigleaf leverages both an on-site router and a dedicated backbone network, controlling traffic both to and from the Cloud. Intelligent Software Experience a seamless connection with our Intelligent Load Balancing, Dynamic QoS, and Same IP Failover–with zero manual configurations or policies required. Firewall-friendly design Bigleaf installs outside your LAN, so you can leave your best-of-breed security solution in place, without disabling any of its features. Monitoring and alerts We monitor each ISP connection, end-to-end, 10 times per second for packet-loss, latency, jitter, and capacity. You'll have access to logs and graphs, plus configurable email alerts.

Cisco ACI, the industry leading software defined networking (SDN) solution enables application agility and data center automation. Customers can build multi-cloud networks with a consistent policy model. With ACI Anywhere, customers have the flexibility to move applications seamlessly without compromising high availability and creating a single fault domain environment. What Cisco ACI offers

• Automate IT workflows and help organizations shorten app deployment from weeks to minutes.
• Open and programmable. Build programmable SDN fabrics leveraging open APIs and over 65 Cisco ACI global partner ecosystems.
• Security and analytics. Secure applications through whitelist model, policy enforcement, and micro-segmentation.
• Workload mobility at scale. Deploy and migrate applications seamlessly across geographies with consistent policy.

Cisco ACI building blocks Cisco Nexus 9000 Series High-performance, low-latency, and power-efficient switches operate in Cisco NX-OS software mode or in Cisco ACI mode. Cisco Application Policy Infrastructure Controller (APIC) Provides single-click access to all Cisco ACI fabric information, enabling network automation, programmability, and centralized management. Cisco ACI Virtual Edge (AVE) Cisco ACI Virtual Edge is designed to support Cisco ACI architecture. It provides support for ACI application policy model as well as switching capabilities with high performance and throughput. Cisco App Center Collaborate with developers, then publish and monetize innovative apps using Cisco APIC.

Modern businesses need a network that can keep up with the pace of digital – one that delivers the best experience for the applications central to innovation and growth. Citrix' next-generation WAN Edge solution delivers flexible, automated, secure connectivity and performance that keeps the workspace always-on. Only Citrix SD-WAN delivers:

• Unparalleled experience for SaaS, cloud, and virtual applications

• Choice of deployment options with automated connectivity to the cloud

• Integrated visibility and control over all aspects of the WAN

In connection with the increased use of business-critical web applications, modern global networks (WANs) operate under load that exceeds their capacity. Extending the network with Multiprotocol Label Switching (MPLS) solutions is a traditional approach, but can be expensive. On the other hand, alternatives like broadband and other types of Internet connections cost less, but they are not always acceptable for certain applications. Global network virtualization technologies can help optimize the bandwidth of such a network in an organization at a lower cost compared to traditional solutions.

Any business or entity that relies on public or private networks to operate their business. SD-WAN is the most disruptive technology to hit the telecom market in the last decade, delivering the benefits of increased bandwidth, network uptime and, in some cases, cost savings through the use of low-cost broadband connections. WHERE WE HELP

• We help you differentiate from direct
• We add incremental revenue streams and increase your margins with new and existing partners
• We can be your technical experts on SD-WAN helping you be the value-added partner
• We offer a variety of SD-WAN solutions with prices as low as $50/month

WHERE ECESSA TENDS TO WIN

• Voice, video and VDI environments
• SMB/SME with 1 to 500 sites are in Ecessa’s sweet spot
• Regulated markets where data must be controlled from end-to-end, e.g. medical, banking/finance
• Customers who need flexible networks

WHY WE ARE DIFFERENT

• Bandwidth and carrier agnostic
• Ecessa offers 3 unique, and upgradeable, platforms that can be mixed and matched to create the perfect solution for any environment
• Ecessa has products that range from 60 Mbps to 20 Gbps
• Easy to consume with both CapEx and OpEx pricing options
• Ecessa is a premise-based solution which means all the intelligence sits on the device
• Cloud-based SD-WAN can introduce issues with security, oversubscription, and latency

Forcepoint’s network security products combine the latest in software-defined wide area networking (SD-WAN) with the industry’s top-rated next-generation firewall (NGFW) security, all managed at enterprise scale from a single policy-based console. It is used by organizations of all sizes in retail, hospitality, and financial services around the globe. Forcepoint is depended upon by distributed organizations around the world to safely and efficiently connect and protect their remote stores, branches, and office buildings. Our SD-WAN technology enables sites to seamlessly use multiple connections from different ISPs, secure each of those links with the industry’s top-rated security, and manage all of it together from one console. Whether you’re a global organization that needs unified visibility and control, a growing business aspiring to have many locations, or a smaller organization that administers remote locations from a central office, Forcepoint’s enterprise-grade approach helps untangle unnecessary complexity to achieve new levels of operational efficiency. Zero-Touch Deployment Save time and money by deploying Forcepoint to remote offices and branch locations without an on-site technician. Devices can automatically download their initial configuration from Forcepoint’s Installation Cloud, eliminating the need for manual setup. Smarter Policies & Updates Forcepoint’s Smart Policies express your business processes in familiar terms, such as users, applications, locations and more. Easy grouping replaces hardcoded values, enabling policies to be dynamically reused throughout your network. Administrators can quickly update and publish policies to all affected devices, globally with a single click. Faster Incident Response Forcepoint SMC makes it easy to visualize and analyze what’s happening throughout your network.Network admins can interactively drill into the corresponding data to rapidly investigate patterns and anomalies and turn insights into immediate actions.

As the use of business-critical, cloud-based applications and tools continue to increase, distributed organizations with multiple remote offices are switching from performance-inhibited wide-area networks (WANs) to software-defined WAN (SD-WAN) architectures. SD-WAN offers business application steering, cost savings, and performance for Software-as-a-Service (SaaS) applications, as well as unified communication services. However, SD-WAN has its own shortcomings—especially when it comes to security with direct internet access. Fortinet FortiGate Secure SD-WAN includes best-of-breed next-generation firewall (NGFW) security, SD-WAN, advanced routing, and WAN optimization capabilities, delivering a security-driven networking WAN edge transformation in a unified offering. Fortinet has received a “Recommended” rating in the first ever test conducted by NSS Labs for Software-Defined Wide Area Networking. Fortinet was ranked highly for delivering excellent quality of experience for voice and video, high overlay VPN throughput, and best price/performance. FortiGate Secure SD-WAN Product Details:

• Best WAN Edge Price/Performance
• WAN Path Controller with Remediation
• Fastest Application Identification and Steering
• Advance Routing Capabilities and WAN Optimization

The Juniper Networks Cloud Customer premises equipment (CPE) and SD-WAN solutions use the Contrail Service Orchestration (CSO) to transform traditional branch networks, offering opportunities for high flexibility of the network, rapid introduction of new services, automation of network administration, and cost savings. The solutions can be implemented by service providers for their customers or by Enterprise IT departments in a campus and branch environment. In this documentation, service providers and Enterprise IT departments are called service providers, and the consumers of their services are called customers. The Cloud CPE solution supports both Juniper Networks and third-party virtualized network functions (VNFs) that network providers use to create network services. The following deployment models are available:

• Cloud CPE Centralized Deployment Model (centralized deployment). In the centralized deployment, customers access network services in a service provider’s cloud. Sites that access network services in this way are called service edge sites in this documentation.
• Cloud CPE Distributed Deployment Model (distributed deployment), also known as a hybrid WAN deployment. In the distributed deployment, customers access network services on a CPE device, located at a customer’s site. These sites are called on-premise sites in this documentation.
• A combined centralized and distributed deployment. In this deployment, the network contains both service edge sites and on-premise sites. A customer can have both cloud sites and tenant sites; however, you cannot share a network service between the centralized and distributed deployments. If you require the same network service for the centralized deployment and the distributed deployment, you must create two identical network services with different names.

You must consider several issues when choosing whether to employ one or both types of deployment. The centralized deployment offers a fast migration route and this deployment is the recommended model for sites that can accommodate network services—particularly security services—in the cloud. In contrast, the distributed deployment supports private hosting of network services on a CPE device at a customer’s site and can be extended to offer software-defined wide area networking (SD-WAN) capabilities. Implementing a combination network in which some sites use the centralized deployment and some sites use the distributed deployment provides appropriate access for different sites. The SD-WAN solution offers a flexible and automated way to route traffic through the cloud. Similar to a distributed deployment, this implementation uses CPE devices located at on-premise sites to connect to the LAN segments. Hub-and-spoke and full mesh topologies are supported. The CSO software uses SD-WAN policies and service-level agreement measurements to differentiate and route traffic for different applications. One CSO installation can support a combined centralized and distributed deployment and an SD-WAN solution simultaneously. The same set of CPE devices can be used for the distributed deployment and the SD-WAN solution. Alternatively, you can implement only the deployments that you need. You can either use the solutions as turnkey implementations or connect to other operational support and business support systems (OSS/BSS) through northbound Representational State Transfer (REST) APIs.

VMware NSX SD-WAN by VeloCloud enables enterprises to support application growth, network agility and simplified branch implementations while delivering optimized access to cloud services, private data centers and enterprise applications simultaneously over both ordinary broadband Internet and private links. NSXSD-WAN combines the economics and flexibility of a hybrid WAN with the deployment speed and low maintenance of a cloud-based service. It includes policy-based network-wide application performance, visibility and control while dramatically simplifying the WAN by delivering virtualized services from the cloud to branch offices. The VMware NSX SD-WAN Edge by VeloCloud appliance is a compact, thin edge device that is zero-touch provisioned from the cloud for secure,optimized connectivity to applications and data. The NSX SD-WANEdge is also available as a VNF (virtual network function) for instantiation on a virtual CPE platform. The NSX SD-WAN Edge with Dynamic Multi-Path Optimization (DMPO) and deep application recognition aggregates multiple links (e.g. Private, Cable, DSL, 4G-LTE) and steers traffic over the optimal links to other on-premises NSX SD-WAN Edges in branch offices, private data centers, campuses, and headquarters. The NSX SD-WAN Edge can also optionally connect to the system of global VMware NSX SD-WAN Gateway by VeloCloud to provide performance, security,and visibility for cloud services (SaaS, IaaS, B2B Internet). This system of NSX SD-WAN Gateways is deployed globally at top-tier cloud data centers to provide scalable and on-demand cloud network services. NSX SD-WAN Gateways implement NSX SD-WAN DMPO, cloud VPN and NSX SD-WAN Multisource Inbound Quality of Service between global cloud services (SaaS, IaaS, network services) and each NSX SD-WAN Edge, enabling multiple broadband and private leased lines to appear as a single, high-performance WAN. The cloud-based VMware NSX SD-WAN Orchestrator by VeloCloud is used to provision network-wide business policy, enable services insertion, perform real-time monitoring,and analyze application performance. Deploy in Minutes Using NSX SD-WAN’s zero-touch deployment capability, NSX SD-WAN can be quickly installed. The NSX SD-WAN Edge is shipped to the branch office where a non-technical person simply plugs in power and a few cables. Activation, configuration, and ongoing management are all handled in the cloud. Enterprise-wide Business Policies NSX SD-WAN makes setting policy as simple as a single click. Enterprises or their managed service providers can define business level policies that apply enterprise wide across many Edges, all througha centralized, cloud based NSX SD-WAN Orchestrator. Link steering, link remediation and QoS are all applied automatically based on the business policies; however specific configuration overrides may also be applied. The centralized NSX SD-WAN Orchestratoralso provides an enterprise wide view and configurability of routing in an overlay flow control table, eliminating complex node by node route configurations. SDN for the WAN NSX SD-WAN brings SDN concepts to the enterprise branch WAN. Business policies implemented across the logical overlay deliver abstraction of application flows from the underlying physical transport. Agility is achieved based on adjusting forwarding to meet policy as well as real-time link conditions. NSX SD-WAN has a distributed control plane for forwarding decisions to be made locally with context, so there are no latency issues nor points of failure across the WAN. Yet each NSX SD-WAN node receives centralized control policies for easy programmability and enterprise wide visibility. A software based approach enables the flexibility and portability of deploying virtual NSX SD-WAN Edges on off-the-shelf x86 based hardware or as virtual network functions (VNFs) on virtual CPEs. Management is configurable via both a GUI and a Rest API. Solution Benefits The WAN is in transition as enterprises seek to improve agility and economics, and adapt to the shift of applications to the cloud. NSX SD-WAN offers enterprise-grade performance, security, visibility, and control over both public Internet and private networks.NSX SD-WAN dramatically simplifies the WAN with zero touch deployment, one-click business policy and services insertion, and cloud-based network as a service.

Nuage Networks Virtualized Network Services (VNS) is a fresh approach to business networking that seamlessly links your enterprise customers’ locations regardless of size or geography while reducing the requirement for custom networking. With Nuage Networks VNS the network that underpins customer locations is unshackled to deliver services where enterprises need them when they need them. Your customers gain the flexibility and functionality they need to drive their business into the cloud era. Nuage Networks VNS provides a comprehensive networking service that removes the limitations that exist with traditional Virtual Private Networks (VPNs). Solution benefits include:

• Customer self-service management and control of the network service tailored to the individual requirements of their businesses
• Separation of the network service from the network transport, which provides you with flexibility to utilize any access network within your footprint
• Customer-driven quick and simple move, add and change requests to ensure their network service matches their dynamic business environment
• Advanced functionality that can reduce the requirement for specialist security and network devices at customers’ locations
• Enhanced customer monitoring and service visibility to reduce the costs associated with service assurance

Riverbed SteelConnect is the cornerstone of Riverbed’s strategy for next-generation, application-defined enterprise networking. SteelConnect is a complete SD-WAN system for securely connecting users and business to the applications they need, wherever they reside - on a remote LAN, in a data center, or in the cloud. SteelConnect offers several differentiators - ubiquitous and unified connectivity across LAN, WAN, and the Cloud; business aligned orchestration for fast, agile, and secure application delivery; and unique cloud-centric workflow, easy menu-driven network design of sites, zones, uplinks, and rules, and centralized, business intent-based policy management—all within a simple graphical user interface - for ease of use and greater business agility. SteelConnect provides:

• WAN optimization and SD-WAN capabilities
• Identification and classification of over 1300 applications with deep packet inspection
• Optimization and acceleration of applications—on-premises and cloud—leveraging data (scalable data referencing or SDR), transport, and application streamlining
• Centralized network management capabilities based on a single intent-and user-based “plain-language” global business policy
• The ability to enforce application policy (path quality, path selection, network QoS, and security)
• Pre-defined Application Groups (for example, business critical) for traffic path rule and security policy creation, as well as scalability with fewer policy rules. Add custom applications and leverage a constantly updated catalog of public applications to identify applications for advanced classification
• Instant, single-click provisioning to the cloud with SteelHead™ CX for Cloud to automate cloud networking and accelerate cloud performance
• Automated zero-touch provisioning of devices
• Dynamic Native Routing – branch-  and WAN-side—to eliminate routers and reduce complexity
• Path monitoring and quality-based, Hybrid WAN path selection
• Integrated and third-party security providers
• Scalability (up to 1000 branches/sites)
• Cloud (AWS and Microsoft Azure) and self-hosting in a physical or virtual data center (for example, VMware)
• End-to-end visibility with unified views, plus reporting and troubleshooting of application and network performance

With SteelConnect, Riverbed is integrating its centralized, policy-based management and core SD-WAN capabilities with its industry-leading network and application optimization, enterprise-class scalability and end-to-end visibility into clouds, thus extending Riverbed’s Application-Defined Networking and End-to-End Unified Visibility for large-scale enterprises. Benefits:

• Agility: Faster IT response times based on deep automation and intuitive GUI design.
• Efficiency: High ROI and quick payback delivered through network infrastructure savings and operational ease.
• Security: Native security capabilities supplemented with deep automation with 3rd party security vendors for cloud-first security.
• Flexibility: Ability to integrate into complex, secure, enterprise environments while catalyzing successful digital transformations.

Unlike router-centric and basic SD-WAN solutions, EdgeConnect enables you to shift to a business-first networking model. Built for Today’s Cloud-First Enterprise Unity EdgeConnect physical or virtual appliances deliver:

• Always-consistent, always-available application performance
• The highest quality of voice and video, across any combination of transport services

Unity Orchestrator enables IT to rapidly and centrally define:

• Application Quality of Service and security policies to 1000s of sites
• Simplified service chaining to third-party network and security services

Unity Boost optional WAN optimization performance pack:

• Improves the performance of latency-sensitive applications
• Reduces transmission of repetitive data

Talari's SD-WAN solution creates a smart and responsive network, one that adapts in real time to bandwidth demand and actual network conditions, ensuring that presently and regardless of network issues, critical applications have priority and all applications take the best quality path through the network, ensuring uptime so the business can get done. Whether the WAN is all MPLS, a hybrid WAN of MPLS and broadband, all Internet links, backed up with wireless or extended to the cloud, Talari's Software-Defined or ‘Simplified-Defined’ WAN solution will ensure continuous availability and predictable application performance to keep productivity moving at optimal speed. SD-WAN Benefits For organizations hampered by expensive and rigid private legacy networks and locked into a single carrier per location, an SD-WAN unlocks untapped WAN connectivity.  It achieves this by simplifying network deployments, automating network management, lowering bandwidth and management costs, and enabling service provider independence. The Talari SD-WAN takes advantage of existing private network bandwidth (e.g., MPLS), while combining low-cost Internet broadband bandwidth (e.g. cable, DSL, LTE), to enable a more open, reliable, resilient, agile and cost-efficient enterprise WAN. Talari SD-WAN components include:

• Talari Controller – centrally manages and distributes services and application policies
• Talari Appliances – deliver cost-effective services, and address application needs
• Talari Overlay Network – securely links all appliances and controller
• Talari Reporting – Aware provides real-time analytics, visibility for troubleshooting, and capacity planning
• Talari Cloud Connect - a platform available to service provider partners to enable failsafe, multi-link- multi-path access to cloud services and SaaS for Talari SD-WAN customers.

Talari SD-WAN enables an open and extensible wide-area network that supports enterprise data centers, remote offices, and cloud services with a new paradigm in which packets are routed deterministically, based on bandwidth suitability for the packet’s protocol. Talari embeds this capability in the packet header to allow low latency applications that are less business-critical to be subordinated in favor of business-critical applications.

Versa’s software-based approach provides unmatched agility, cost savings, and flexibility vs. traditional network hardware. For service providers, Versa Cloud IP Platform enables next-generation managed services for virtual customer premises equipment (vCPE), managed software-defined router (SD-Router), managed software-defined WAN (SD-WAN), managed software-defined security (SD-Security) and to fully software-defined the branch (SD-Branch) with a unified multi-service next-generation secure software platform. For enterprises, it provides a secure multi-cloud and multi-site software-defined branch connectivity solution for SD-WAN and branch security projects.

The Viptela Secure Extensible Network (SEN) solution is an industry-leading platform that delivers secure end-to-end network virtualization. Enterprises can use the SEN solution to build large-scale networks with full integration of routing, security, centralized policy,  and orchestration. The end result is a network that is operationally easy to manage and that eliminates disconnects between business and IT. Viptela Secure Extensible Network comprises of five key architectural elements:

1. Enables transport independence
2. Automatically secures any routed end-points
3. Provides end-to-end network segmentation
4. Enforces policies with a centralized controller
5. Enables advertisement of network services

Viptela Secure Extensible Network enables your business to:

• Securely extend the enterprise’s footprint anywhere
• Have the freedom to choose any transport network, independent of the carrier’s service
• Optimize performance for public clouds and the Internet
• Centralize enforcement of access control and network policies
• Achieve network-wide segmentation for lines of business, compliance and business partners
• Centralize network-based services

Viptela Secure Extensible Network is made up of the following four major components:

• vSmart Controller
• vEdge Router
• vBond Orchestrator
• vManage Configuring and Monitoring System

Today most of the people in the branch offices are consuming more and more WAN bandwidth as they are collaborating online applications (e.g., Skype, Webex…) and will access large rich-media files. As more Internet communication and cloud-based application adoption, it becomes a critical challenge for how to efficiently optimize the WAN bandwidth, manage Internet application usage, and secure the connection between B2B and B2C. Combining the flexibility of cloud-based technology and its high-speed deployment benefit, Zyxel SD-WAN solution helps IT administrators to simplify branch network deployment. With the variety of optimization design for internet connectivity and applications, Zyxel SD-WAN also enables ZyWALL VPN Series to support online application growth, efficiency WAN bandwidth usage and increase network agility. Key Features:

• WAN Optimization
• Application Prioritized for Assuring Delivery
• Dynamic Route for Simplifying Configuration
• Zero Touch Provisioning (ZTP)
• Dynamic Path Selection
• Mobile Application