Secure SD-WAN: Security vendors and their SD-WAN offerings

This is usually not the case for a network provider. Some SD-WAN vendors add certain packet filters and call it security.

At the inception of SD-WAN technology, we had the first users and pure SD-WAN suppliers. It soon became apparent that something was missing and that the missing component was “protection.” But security vendors have emphasised the importance of security from the start.

Today, the market seems to be moving in the direction that security vendors are focusing on providing comprehensive security features for SD-WAN. The WAN Edge infrastructure magical quadrant made a big prediction. It states: ‘By 2024, 50% of new firewall purchases in distributed businesses will use SD-WAN features, with cloud services gaining in popularity compared to less than 20% today. ”

Today, we have security vendors like Forcepoint, SonicWall and Barracuda, which follow the Fortinet model. Vendors offer a built-in WAN architecture security package for distributed enterprise use.

Introducing the secure SD-WAN

Of course, secure SD-WAN includes best-in-class next-generation firewall protection,advanced routing, and WAN optimization to provide a security-based WAN edge. It combines SD-WAN with security features.

The secure SD-WAN solution can be fully deployed on a branch and used in the cloud. For those who do not want to put everything in the clouds, a hybrid approach could be more promising.

It is quite interesting to see how analysts are getting questions and how customers are paying attention to this area. Notably, Gartner estimates that Fortinet has more than 21,000 WAN customers. It has a considerable user base and there are times when the basic requirements are strong and built-in security capabilities.

Adding security to the network

It is certainly easier for a security company to add new network features than it is for an SD-WAN company to add 20 years of advanced security features. We can safely assume that no SD-WAN vendor will become a security vendor.

As the market progressed, some functions had to be renamed at some point: application identification, encryption, path monitoring, routing protocols, and load balancing for WAN connections. Virtually all of these enhanced routing features are not new and specific to SD-WAN. It is not an overnight success and was on the market even before the market existed.

However, in some scenarios, you may need to implement a proprietary routing protocol throughout the WAN. In that case, yes, of course, you need a new device. But for the most part, a full firewall edge will suffice.

Firewall in SD-WAN technology

Firewalls turn into network security platforms and offer SD-WAN capabilities. The magic quadrant of network firewalls says that the SMB Multifunction Firewall Market in 2018 It grew by 10.1% and SD-WAN adoption was a strong engine.

”When you think about it, you realize that the firewall has been acting as a router for along time. In principle, a firewall can provide all routing protocols to facilitate private WAN, Internet, and internal routing. This feature is usually provided by the base unit, which simply does the routing. But now we see how they have been replaced by an edge device with firewalls.

Firewall networks have been around for decades. Their role was not limited to creating a firewall, but also participating in directed networks. Again and again, they provided a directed WAN edge device.

Want to learn how to integrate security into SD-WAN? Download our free e-book “SD-WAN for dummies” .