BuiltWorlds 2024 Construction Tech Conference
July 17, 2024
Telco-Independent SASE
Support a Hybrid Workforce
Coevolve has been providing integrated network and security solutions for over 8 years, well before SASE existed as a phrase in the industry. We strongly believe that enterprises can benefit from moving away from traditional appliances for securing Internet access and providing protection against malware and other threats.
Our Telco-Independent SASE solution empowers enterprises to adopt a hybrid, “work from anywhere” model, providing significant advantages in terms of security, performance, scalability, and cost. Some of our notable solution capabilities for delivering SASE solutions including the following:
- Transitioning away from end-of-life hardware appliances
- Avoiding expensive security license upgrades
- Migrating away from legacy MPLS infrastructure
- Supporting a hybrid, “work from anywhere” model without backhauling traffic to existing sites
- Enabling consistent global access to SaaS applications and other cloud workloads.
There are several components to our Telco-Independent SASE solutions:
- ISP Lifecycle Management
- SD-WAN Overlay
- Link Health Optimization
- Bandwidth Aggregation
- Cloud Access Security Broker (CASB)
- Secure Web Gateway (SWG)
- Zero-Trust Network Access (ZTNA)
- Management and Analytics
ISP Lifecycle Management
A successful SD-WAN implementation starts with a strong foundation of ISP services. The optimum mix of connectivity providers at each site is essential to building a successful business case and delivering a high-performance technical solution.
To help enterprises establish a strong foundation of ISP services we provide the following capabilities at the transport layer:
- Research of ISP options at each site with no telco bias, leveraging our strong network of global partner
- Sourcing management, including negotiating agreements with ISPs and aligning rates with benchmarks
- Project management services for implementing ISP services
- Ongoing operational vendor management and commercial governance services – a single point of contact for all ISP components in the SD-WAN overlay.
SD-WAN Overlay
In our integrated SD-WAN solution, we provide an SD-WAN overlay using technology from VMware. This is an industry-leading “pure-play” SD-WAN product, that our team has extensive experience in deploying. We provide the following components:
- SD-WAN subscriptions for each location, sized to the enterprise’s requirements
- High availability and clustering options to increase availability and performane
- Virtual appliances for deployment in Amazon Web Services, Microsoft Azure, or other virtualized environments.
Link Health Optimization
Our Integrated SASE solution includes VMware’s Dynamic Multipath Optimization (DMPO) technology. This offers a groundbreaking approach to enhancing the performance of ISP circuits. By intelligently directing traffic across multiple links, DMPO ensures optimal network efficiency and reliability. This feature is particularly beneficial for enterprises relying on cloud applications and services, where consistent connectivity and speed are critical.
DMPO’s capabilities include:
- Improved Network Reliability: Automatically steers traffic away from poor-performing links to maintain consistent network performance.
- Optimal Bandwidth Utilization: Dynamically allocates bandwidth across multiple circuits, ensuring efficient use of all available resources.
- Enhanced Application Performance: Prioritizes business-critical applications and adjusts in real-time to changing network conditions for a seamless user experience.
- Real-Time Monitoring and Adaptation: Constantly monitors link quality and performance, making adjustments on the fly to ensure the best possible connectivity.
- Cost-Effective Scalability: Reduces the need for expensive dedicated circuits by maximizing the efficiency of existing ISP links.
With this link health optimization functionality, enterprises can expect a more robust and efficient network infrastructure, leading to improved overall performance and reduced operational costs.
Bandwidth Aggregation
Our solution is truly telco-independent, allowing enterprises to utilize connectivity from any telco or ISP, combining all circuits into a usable pool of bandwidth. This allows enterprises to access low-cost broadband connectivity from multiple providers, without having to focus on failover or consider primary / backup scenarios.
The solution continuously monitors the health, performance and utilization of each circuit, determining the appropriate path to use for each application and rapidly steering traffic away from outages or performance issues.
This capability works extremely well across a diverse mix of circuit types, including fixed broadband services, mobile data (4G / 5G), LEO satellite and other wireless services.
Cloud Access Security Broker (CASB)
A Cloud Access Security Broker (CASB) is an essential tool for modern enterprises, providing a critical layer of security for cloud-based services. CASB helps organizations enforce security policies, comply with regulations, and protect sensitive data in the cloud. This technology is particularly important as more companies shift to the public cloud and adopt hybrid working models. Key features and benefits of CASB include:
- Data Security: Implements various controls to protect sensitive information stored in the cloud, including encryption and tokenization
- Threat Protection: Identifies and mitigates threats in cloud services, such as malware and account takeovers
- Compliance Management: Helps organizations comply with various data privacy regulations and standards by monitoring and controlling data in the cloud
- Visibility and Control: Provides comprehensive visibility into cloud app usage and enables granular control over data access and sharing
- Risk Assessment: Evaluates the security posture of cloud services and assesses risks associated with third-party cloud apps and services
CASB is an integral part of our Telco-Independent SASE solution. It plays a pivotal role in enabling secure cloud adoption, offering organizations the tools they need to safely leverage cloud technologies while maintaining a strong security posture.
Secure Web Gateway (SWG)
Secure Web Gateway (SWG) functionality, as part of our Telco-Independent SASE solution, offers advanced protection for users accessing the web and cloud services. This technology plays a crucial role in safeguarding against web-based threats while ensuring fast, secure access to the internet and cloud applications. Key features and benefits include:
- Advanced Threat Protection: Utilizes sophisticated techniques such as sandboxing and content inspection to detect and block malware, phishing, and advanced persistent threats (APTs)
- URL Filtering: Blocks access to malicious or inappropriate websites based on predefined policies, enhancing overall web security
- Cloud Application Visibility and Control: Offers insights into cloud application use and allows for granular control over cloud-based services
- SSL / TLS Inspection: Decrypts and inspects encrypted traffic for hidden threats, ensuring comprehensive protection without compromising privacy
This SWG functionality is vital for organizations seeking robust web security solutions in an increasingly cloud-centric world. It ensures secure and compliant internet access, protecting users from online threats while enabling productivity and seamless cloud connectivity.
Zero-Trust Network Access (ZTNA)
Zero Trust Network Access (ZTNA) is a modern security framework designed to provide secure access to private applications and services. This approach shifts away from traditional network-based security models to one that is identity-centric and context-aware. Key features and benefits of ZTNA include:
- Identity and Context-Based Access Control: Grants access based on user identity, device, location, and other contextual factors, ensuring only authorized users can access specific applications
- Micro-Segmentation: Limits lateral movement within a network by segmenting access at the application level, greatly reducing the attack surface
- Seamless User Experience: Offers users easy and secure access to private applications, regardless of their location or the devices they are using
- Application Layer Security: Focuses on securing applications directly, rather than securing the network, which enhances protection and simplifies access
- Reduced Visibility to Attackers: Applications are made invisible to unauthorized users, reducing the likelihood of targeted attacks
ZTNA is an essential component of our Telco-Independent SASE solution, and can benefit organizations adopting a Zero Trust security posture, ensuring secure and controlled access to applications while adapting to the modern, distributed nature of today’s workforce.
Management and Analytics
We provide a comprehensive management service that covers all components of our Integrated SASE Solution, led by the Coevolve Response Center. Our service includes:
- Proactive management of all components of the solution, with advanced tools to track availability, performance, and notable trends
- Flexible change management models, including fully managed and co-managed offerings
- Customized API-based reporting to collect data from each layer of the solution and provide consolidated views to the enterprise
- Advanced network performance reporting using technology from our partner Thousand Eyes, providing end-to-end visibility
Get SASE Ready: Technical Deep Dive
Uncover how to prepare your enterprise for SASE as we explore a readiness checklist, adoption roadmaps, and aligning people processes, and technology.
Ahead of the Cloud Episode 7 Delivering SD-WAN & SASE
Taking on a geographical focus, this episode explores the practicalities of delivering next-generation networking services in the EMEA region.
The Importance of
Telco-Independent SASE
Explore telco-independent SASE in a hybrid working world. Learn how SASE enhances flexibility, security, and cost effectiveness for remote and hybrid work.