Secure WAN Acceleration Michael Favinsky Senior Systems Engineer

WAN Acceleration Technology helps…  Improve Performance of Business Applications  Optimize Response Times for Critical Applications  Reduce Bandwidth Consumption  Reduce associated Bandwidth Costs … Make the network faster! 2 CONFIDENTIAL All Rights Reserved

Analyst on the Need for WAN Acceleration “ Applications, such as Microsoft SharePoint, that make extensive use of dynamic content can swamp WAN links while delivering poor end-user response times” “ Repeated transmission of the same, or similar, files, objects or data patterns can create opportunities for data compression” “As resources are increasingly centralized, minimizing the effect of latency on application response times is becoming a critical requirement” “Global centralization of branch office servers and data centers can expose latency-sensitive protocols, again leading to slow response times” Peak Performance

The Need for WAN Acceleration 4 Outpaced by Growing Bandwidth RequirementsTraditional QoS IneffectiveApplication LatencyRedundant Traffic Consuming Bandwidth CONFIDENTIAL All Rights Reserved

Do you need WAN Acceleration? 1. Are you using Site-to-site VPN or dedicated WAN Links (MPLS)?  How much bandwidth exists between your offices? 2. Would you like your internal applications to be faster? 3. Are your inter-island or island to mainland communications slow due to limited bandwidth or high latency?  600ms latency between Oahu and Guam  What is your ping round trip time to the mainland? CONFIDENTIAL All Rights Reserved 5

Before WAN Acceleration  Problem: Connections from remote offices to home office too slow. Takes forever to transfer files or retrieve . People can’t work.  Solution #1: Virtually place remote office users in corporate HQ.  Citrix  MS Terminal Server  Costly  Slow and unusable if latency is high  Solution #2: Replicate corporate HQ to remote offices.  Separate file server and mail server in each remote office.  Cost skyrockets as number of offices go up.  Does an office with less than 10 people warrant its own file and servers?  Sync issues between remote offices and HQ. CONFIDENTIAL All Rights Reserved 6

Next Generation Firewalls and WAN Acceleration Traffic Shaping Ensure “Good Traffic” Composition Block Unwanted Traffic Utilize Bandwidth Effectively Traffic Acceleration Traffic De-duplication Windows File Services (WFS) Caching Protocol Optimization/Compression CONFIDENTIAL All Rights Reserved 7

Traffic Shaping – Get “Good Traffic” WAN Acceleration Step 1 Bandwidth manage and control applications  Identify non-business related applications  Prioritize important traffic  Block or restrict unimportant traffic  application signatures 8 Goal: “Allow Good Traffic” at the gateway with Application Intelligence & Control CONFIDENTIAL All Rights Reserved

“Good Traffic” Acceleration WAN Acceleration Step 2 Extremely Effective on:  , PowerPoint, Excel spreadsheets, Word docs, PDF  Internal Web apps, Database apps  Files between 20Kb-100’s of MB+  Small Localized Changes Benefits (For Good Traffic)  Eliminate redundant traffic  Increase responsiveness  Improve user experience 9 CONFIDENTIAL All Rights Reserved

WFS Acceleration Benefit: Improves response times and transfer speeds when copying files between remote locations CONFIDENTIAL All Rights Reserved 10  Acceleration for Windows File Copy protocols  CIFS & SMB: Protocol names for file transfer  File caching/de-duplication  Metadata caching (File directory information)  Active Directory Integration  All machines including the WAN Accelerator are required to become part of the domain

WFS Protocol Optimization 11  Optimizes communications of inefficient, chatty WFS. With: WAN AccelerationBefore: WAN Acceleration Benefit: Significantly reduces file transfer / file open / file access times. Often by orders of magnitude. CONFIDENTIAL All Rights Reserved

Demonstrating and Quantifying the Benefits of WAN Acceleration Visualize the benefits of using WAN Acceleration CONFIDENTIAL All Rights Reserved 12

Bandwidth Savings for Web Apps Results: 90% traffic reduction for Internal Web traffic 13 CONFIDENTIAL All Rights Reserved

Bandwidth Savings for Windows File Sharing (WFS) Results: 80+% traffic reduction for Windows File Sharing 14 CONFIDENTIAL All Rights Reserved

Results – Another Live Customer CONFIDENTIAL All Rights Reserved 15

Multi-Site VPN Deployment Multiple Remote Offices connecting back to a Central Office 16 Results: Traffic between the sites is optimized with minimal configuration CONFIDENTIAL All Rights Reserved

Using Dedicated WAN Links Leveraging dedicated WAN links between offices 17 Results: Traffic between the sites is optimized with minimal configuration CONFIDENTIAL All Rights Reserved

NGFW with Insecure WAN Optimization CONFIDENTIAL All Rights Reserved 18 Insecure WAN Opt device PC sends virus. WAN Opt encodes virus within de-dupe protocol, which DPI cannot recognize Virus sent to HQ The customer investment in NGFW Has been wasted, and communication between the sites is insecure. Application Visualization Gateway Anti-Virus Firewall DPI

Secure NGFW with WAN Acceleration Secure Solution  Sits inside of the security boundary  Provides comprehensive scanning for intrusions and malware  Leverages IPS/AV/AS/App Intelligence  Allows traffic shaping and policy enforcement on WAN. Traditional Solution  Sits behind or outside of the security boundary  Data coming out of the WAN Acceleration device can’t be inspected by the security device  Potential for malware propagation, policy violation. 19 WXA NSA Ingress/Egress traffic Firewall WAN Acceleration Ingress/Egress traffic CONFIDENTIAL All Rights Reserved

Active Directory Integration  Secure  Integrates directly with AD.  Becomes a member of the domain.  Uses Kerberos authentication  Insecure  Does not integrate with AD.  Uses NTLM.  Forces you to lower your file server’s security posture. CONFIDENTIAL All Rights Reserved 20

Secure WAN Acceleration Benefits  Reduce the amount of data sent between remote and branch offices  Improve user experience at remote offices  Reduce infrastructure cost  Easily block undesirable applications on the network  Bandwidth manage applications such as P2P and streaming audio/video  Increase security through DPI scanning of all traffic  Identify network inefficiencies through real-time traffic visualization  Consolidated management interface  App Intelligence, DPI security, WAN Acceleration, VPN, etc. SonicWALL CONFIDENTIAL All Rights Reserved 21

Summary – Secure WAN Acceleration  Leverage the security of your NGFW  AV / IPS / App Intelligence  You don’t have to trade off NGFW features in order to gain the benefits of WAN acceleration.  Maintain authentication best practices with Windows File Servers  No compromise on using Kerberos  NTLM is more convenient, but it’s not secure.  Secure WAN acceleration is particularly applicable to you, the Hawaiian customer. CONFIDENTIAL All Rights Reserved 22

Questions?