Many Silver Peak SD-WAN prospects have adopted Palo Alto Prisma Entry cloud-delivered safety providers. You could be questioning how one can make Silver Peak and Palo Alto work collectively to benefit from safe native Web breakout out of your department or remotes websites to take care of each the efficiency and safety of what you are promoting functions.
The Silver Peak Unity EdgeConnect™ SD-WAN edge platform integration with Palo Alto Networks’ Prisma Entry cloud-delivered safety permits enterprises to shift to a safe entry service edge (SASE) answer. The joint answer could be deployed by way of two completely different integration strategies, each centrally managed inside the Silver Peak Unity Orchestrator™ administration console. I’ll use the analogy of the pink or blue tablet from the film The Matrix: “Would you like the pink tablet or the blue tablet?” The selection is yours, both will work, however every is supposed to allow a unique sort of deployment. On this weblog, I’ll talk about each integration strategies, how they work and when to decide on every possibility. I’ll additionally present a hyperlink to a technical video that demonstrates each deployment strategies.
Silver Peak just lately printed an in depth information that describes how one can service chain EdgeConnect to a Palo Alto firewall, and Palo Alto Networks has additionally printed an identical Silver Peak SD-WAN Answer Information that paperwork how one can configure pass-through tunnels from the Orchestrator console. Each guides describe the pink tablet – the primary technique. The blue tablet – or second technique – is to make use of a YAML file with the Orchestrator pre-configuration wizard. The second technique shouldn’t be but coated within the configuration information, so I’ll describe it right here and supply a hyperlink to a video demonstration.
When adopting SaaS functions akin to Workplace365, Salesforce, Field, Atlassian and others, it’s essential that customers join on to the closest level of presence for the SaaS supplier. This delivers the very best high quality of expertise to utility customers. It’s additionally essential to make sure the appliance visitors directed to the web from the department location(s) is safe. To attain this, you’ll have to reply two questions.
Each questions are essential, and if we don’t configure insurance policies accurately, customers will expertise sub-optimal utility efficiency and high quality of expertise. Why? as a result of if visitors traverses an extended route to achieve the SaaS level of presence utility response will likely be sluggish and fewer attentive to the top consumer. With conventional router-centric networks, utility efficiency suffers when visitors is backhauled to the information middle firewall for safety inspection previous to being directed to the general public cloud, generally known as the trombone impact. This added delay negatively impacts efficiency and the standard of expertise for the top consumer. And an incorrect safety coverage can expose the enterprise to safety breach.
Silver PeakThe mixing of the Silver Peak EdgeConnect platform with the Palo Alto Prisma Entry cloud-delivered safety service permits safe native web breakout from department or distant places and eliminates the necessity to backhaul cloud-destined visitors to the information middle. An occasion of Palo Alto Prisma Entry positioned as near the consumer as attainable inspects and secures utility visitors earlier than forwarding it on to the SaaS supplier.
With Silver Peak, enterprises can robotically steer visitors in accordance with safety coverage and enterprise intent. A pattern safety coverage would possibly look one thing like this: To get began, we first should configure Prisma Entry. Utilizing Palo Alto Panorama, we’ll configure the distant networks which could be achieved following these directions: Configure Prisma Entry for Networks. The workflow will push the coverage configuration to the cloud service and robotically onboard every distant website onto the community. As soon as the coverage is utilized visitors will likely be despatched from the distant websites by means of the first and secondary IPsec tunnels created to Prisma Entry. Subsequent, we configure the distant community between the Silver Peak SD-WAN and Prisma Entry by configuring the distant community tunnels. From Orchestrator, we configure the passthrough tunnels from the “Tunnels” configuration menu to the Palo Alto Prisma cloud safety service.
Silver PeakGoing again to The Matrix analogy, the pink tablet is a single website configuration, and deployment is easy utilizing normal community administration practices. This technique permits community directors to be selective with the configuration. It will also be employed to create distinctive configurations for particular places as desired. That is helpful for small numbers of places that have to be introduced on-line, however don’t require bodily firewall {hardware} and are to be secured by a cloud-delivered safety service.
Silver PeakDetermine 3. Tunnel Passthrough configuration settings
The second technique – the blue tablet – is for big deployments from 100s to 1000s of web sites. The tactic employs a pre-configuration file utilizing the Silver Peak deployment Configuration Wizard. In a matter of minutes, a pair of safe IPsec tunnels to Prisma Entry enforcement factors are created utilizing a pre-configured YAML file. The blue tablet delivers an automatic configuration, enabling the seamless configuration of Prisma Entry cloud-delivered safety providers. By utilizing the pre-configuration information, dozens or 1000’s of web sites could be rapidly and constantly configured. The tactic is usually used for big scale deployments the place many of web sites will all be configured identically. As an alternative of configuring one website at a time as described within the earlier “pink tablet” technique, IT can rapidly generate a pre-configuration file and deploy it with just a few mouse clicks to a whole bunch or 1000’s of web sites. If there’s requirement for a number of completely different safety coverage profiles, it’s also attainable to create a number of pre-configuration information with completely different settings for every and deploy them selectively to department places.
Silver PeakDetermine 4. Pattern Pre-Configuration file to connect with our Major West Prisma cloud safety
So, which tablet is finest on your answer? You may’t go unsuitable with both one. By choosing the appropriate SD-WAN platform, you may obtain the total transformational promise of the cloud, cloud-delivered safety and SD-WAN.
The Silver Peak integration with Palo Alto Prisma Entry simplifies the deployment course of for a contemporary cloud-delivered safety service, considerably lowering the time and sources required to configure the tunnels. To be taught extra, watch the video how EdgeConnect SD-WAN integrates with the Palo Alto Prisma Entry cloud safety service utilizing both configuration technique.
For the third consecutive 12 months, Silver Peak has been acknowledged as a Chief within the 2020 Gartner Magic Quadrant for WAN Edge Infrastructure. Get the total report.
Copyright © 2020 IDG Communications, Inc.
Leave a Reply