FULLY MANAGED SASE FOR BETTER TCO

1©2021 Check Point Software Technologies Ltd.

FULLY MANAGED SASE FOR

BETTER TCO

Copyright 2021 Aryaka Networks, Inc.2

Darling Ingredients Inc. develops, produces, and sells natural

ingredients from edible and inedible bio-nutrients. The

company operates through three segments: Feed

Ingredients, Food Ingredients, and Fuel Ingredients.

Alex LaiNetwork Manager

Darling Ingredients Inc.

• Headquartered in Irving, Texas

• $3.4B Revenue

• Founded in 1962

• 10,000+ employees globally

• 200 processing locations across 5

continents

Copyright 2021 Aryaka Networks, Inc.

100% High

Availability

24x7x365

Support

for Lean

IT Team

1 Single

Network

Stable

Connectivity to

China

3

Challenges Before Aryaka

• Business outgrew MPLS T1 and NxT1 bandwidth

• Managing multiple MPLS providers globally

• Locations in China had poor WAN performance

• Lean IT team

Advantages of Aryaka’s Managed SD-WAN for Darling

• An end-to-end solution + “one throat to choke”: Fully managed global SD-WAN,

including internet provisioning, FW management & ISP management

• Consistent, reliable connectivity: Reliable user experience at all global locations,

including China

• Constant innovation + integration of customer feedback: Always thinking of

ways to provide more value


ENTERPRISE CONNECTIVITY AND SECURITY NEEDS ARE EVOLVING

Direct Internet breakout becoming the norm with SD-WAN

Remote user access is the new normal

Applications are distributed everywhere

INTERNET

CLOUD

DATA

CENTER

CORPORATE NETWORK

OFFICES

OFFICES

SD-WAN

REMOTE USERS


THE RESULT: COMPLEXITY IN MANAGING, SECURING AND ENSURING CONNECTIVITY

Remote user access is the new normal

Direct Internet Breakout with SD-WANRemote user access is the new normalApplications are distributed

everywhere

Inconsistent policy enforcement

and application experience

Challenge with scalability and

global coverage

Expanded attack surface and

increased overhead


DATA CENTERCORPORATE

NETWORKINTERNETIaaS SaaS

WHY ENTEPRPRISES OF ALL SIZES ARE MOVING TO SASE

REMOTE USERS OFFICES

• Protect remote users and offices

• Ensure seamless connectivity anywhere

• Secure enterprise applications

• Consume networking and security as a

single cloud-based service

SASE


WHAT DOES A SUCCESSFUL SASE IMPLEMENTATION LOOK LIKE?

Reduced administration

overhead and TCO

Uncompromised security for

users, branches and apps, built to

prevent

Seamless user experience

and networking performanceSuccessful

SASE Implementation


HOW CAN ARYAKA

AND CHECK POINT

HELP?


CHECK POINT AND ARYAKABEST OF BREED SASE SOLUTION

BE

ST

OF

NE

TW

OR

KIN

G

BE

ST

OF

SE

CU

RIT

Y

Next Gen FWaaS

Secure Web Gateway

Data Loss Prevention

Threat Prevention

NGFW VNF

Sandboxing & CDR

SD-WAN & Routing

Private Access for

remote users

Global Hi-performance

Backbone

WAN Optimization

NaaS

SINGLE SERVICE

FROM CLOUD

SASE

Managed offering inc last

mile services


SECURE ACCESS

FROM THE CLOUD OR

ON PREM


SECURE FROM THE CLOUD OR ON-PREMISES

ON-PREMISES VIRTUAL NETWORK FUNCTION

ON-PREMISES BRANCH SECURITY GATEWAYS

• Secures incoming and outgoing

connections,

• Integrated with on-prem SD-

WAN

• High performance

• Latest security

• Integrated wireless, LTE/4G or

VDSL

CLOUD NETWORK SECURITY AS A SERVICE

• Easily deployed

• Consistent security across

thousands of branches

SD-WAN


SECURE ACCESS FROM THE CLOUD


SECURE BRANCH OFFICES FROM THE CLOUD

CLOUD NETWORK SECURITY AS A

SERVICE

Consistent security across 1000s of branches

Deployed in less than 5 mins

SD-WAN advancedIntegration and automation


• 100s of PoPs around the globe

• Dual tunnels for 99.999% uptime SLA

• Less than 50 ms latency

• High Performance 1 Gbps per tunnel CO-LOCATED WITH

FAST LOCAL CONNECTION, ANYWHERE


CONSOLIDATES CORE SECURITY SERVICES

Next

Generation

Firewall

Zero-Trust Network

Access (SDP)

Threat

Emulation

(Sandboxing)

Data Loss

Prevention

Secure Web

Gateway

Threat Extraction

(CDR)


POWERED BY THE WORLD’S MOST EXTENSIVE THREAT INTELLIGENCE NETWORK

The industry’s best catch rate Protecting against 25 out of NSA’s Top 25

Vulnerabilities in the Wild

PR

OC

ESSED D

AILY

13 Million Emulations

2,000Zero-Day Files

3 Billion Queries

ALWAYS UP-TO-DATE ZERO-DAY PROTECTION


HOW DO YOU SECURE REMOTE BROWSING?

• URL filtering

• Advanced Sandboxing

• Threat Extraction (CDR) for downloaded files

• Malware and phishing prevention

• Fast access anywhere

• Integrated with Aryaka Private Access client for remote users

REMOTE USERS

INTERNET

18©2021 Check Point Software Technologies Ltd. Copyright 2020 Aryaka, Inc.

SECURE BRANCH OFFICES AT THE EDGE


VIRTUAL NETWORK FUNCTION

• Secures incoming and outgoing connections• Integrated with on-prem SD-WAN

Flexible

Management

Automated

Deployment

SD-WAN

Integration


• Maximum privacy with integrated on premise SD-WAN Edge security

• Internal and external connections security

• 500 Mbps (average) threat prevention

QUANTUM EDGE

Latest security

IPSAnti-BotSandboxingAnti Phishing

Lightweight VM

1Core

1GBRAM

1GBDisk

Integrated with SD-WAN

SD-WAN


CHECK POINT AND ARYAKABEST OF BREED SASE SOLUTION

BE

ST

OF

NE

TW

OR

KIN

G

BE

ST

OF

SE

CU

RIT

Y

Next Gen FWaaS

Secure Web Gateway

Data Loss Prevention

Threat Prevention

NGFW VNF

Sandboxing & CDR

SD-WAN & Routing

Private Access for

remote users

Global Hi-performance

Backbone

WAN Optimization

NaaS

SINGLE SERVICE

FROM CLOUD

SASE

Managed offering inc last

mile services


NETWORKING &

VPN-AS-A-SERVICE


Traditional

SD-WAN

Vendors

Lack a global

network or

managed offerings

Traditional

MSPs

Stitch together

technology

offerings

Global NetworkAs-a-Service

SD-WAN

Technology

TRADITIONAL SD-WAN APPROACHES ARE EITHER/ORAN INTEGRATED APPROACH DELIVERS THE POWER OF AND


AWS Google Azure OracleAlibabaA ryaka P O P s

Seoul

Hong Kong

Chennai

Sydney

Seattle

San Jose

Los Angeles

Chicago

Dallas

Miami

Sao Paulo Johannesburg

Dubai

Singapore

SydneyPerth

Hong Kong

Seoul

Beijing

Delhi

Mumbai

San Jose

Ho Chi Minh City

Ashburn

Newark

Toronto

London Amsterdam

Frankfurt

Moscow*

Dublin

Paris*

Tel Aviv

Shenzhen

Shanghai

Taipei

Tokyo

BangaloreChennai

* Available in 2021, while dates are subject to change: Moscow in Q3, Paris in Q4, Auckland in Q4.

▪ Turn up sites in hours vs. MPLS

▪ Coverage to 95% of Knowledge Workers

(within 30ms)

▪ Fast access to major IaaS, SaaS, PaaS

resources

▪ Flexibility to move sites and resources

quickly

ARYAKA’S GLOBAL CLOUD FOOTPRINT FOR A CONSISTENT MULTI-CLOUD EXPERIENCE

Auckland*


Traditional Box

Vendor

Aryaka

Managed SD-WAN

Traditional

MSPs

Fully Managed Service with 24/7

support and Global NOCs

Managed Last-mile connectivity with

procurement and monitoring

Multi-Cloud Architecture with

Direct connectivity

Guaranteed Application Performance with

built-in WAN optimization

Global L2 Points-of-Presence reaching 95%

of world’s knowledge workers

Consistent Global SLAs with single

point of contact (SPOC)

Secure Transport, Edge and

Managed Firewall as-a-service

65ARYAKA NPS SCORE

ARYAKA CLOUD FIRST WAN VS. TRADITIONAL SDWAN APPROACHES


A CLOUD-FIRST APPROACH TO MANAGED SD-WAN

Consume Your Network As-a-Service

26

Private &

Partner

CloudSaaS Providers

Public Clouds

SmartConnect

Connectivity-as-a-service

SmartCloud

Multi-Cloud Networking as-a-

service

SmartInsights

Actionable Insights-as-a-service

SmartSecure

VPN & Security-as-a-service

SmartOptimize

Application Acceleration as-a-

service


Bridging the Evolution to SASE

Branch Edge Security User Anywhere Security

Aryaka Private Access users

ARYAKA AND CHECKPOINT SOLUTION OVERVIEW


Internet

ARYAKA OFFERING WITH CHECKPOINT QUANTUM PORTFOLIO

ISP Router

SW

LAN Switch

IP Addr B

IP Addr A

Aryaka Core

NGFW VM

SmartSecure

Hosted VM Firewall Service

SmartSecureManaged Firewall

Service

• Single Branch footprint for SDWAN, WAN Optimization and Security

• Best of Breed Edge Security with Checkpoint Quantum Edge

• Global reach without the need for additional truck rolls

• Full VM Life Cycle Management from the MyAryaka Services Portal

• Aryaka White Gloved Managed Firewall Service for Global deployments

• Covers for Quantum Edge(virtual) & Quantum Spark (physical) portfolio

• Opex based Monthly subscription model including CHKP licensing and managed service


SMARTSECURE PRIVATE ACCESSDelivering on The New Hybrid Workplace with a Cloud-First WAN

Secure Internet


SMARTSECURE PRIVATE ACCESS

FlexibilityEnable the hybrid workplace Globally with the ability to immediately adapt to rapidly changing traffic patterns

PerformanceUpto 400% performance improvement over internet by leveraging Aryaka’s Global L2 Core SmartConnect Network

Ease of DeploymentLower TCO by simplifying network operations with a fully managed deployment model and Services PoP aggregation

Delivering on The New Hybrid Workplace with a Cloud-First WAN

Managed securityHarmony Connect Next Gen Threat Prevention for Secure Internet Access & built-in Zero trust capabilities for user & context based access


NG Firewall

ARYAKA + CHECKPOINT PAVING THE ROAD TO MANAGED SASE

Branch

BranchPOP-2

Aryaka L3/4 Stateful FW Managed Cloud Security

IaaS

SaaS

Remote

Users

Aryaka SmartSecure

Private Access with

Zero trust

On-Prem DC


• Operations in > 30 countries• 8K+ users for Aryaka SmartSecure Private Access & CheckPoint

Harmony Connect managed by Aryaka• Standardized management by Aryaka as single point of contactDigital Transformation &

MPLS migration

Multi $BillionFleet Management and

Driver Mobility Company

Security for User

anywhere

Aryaka Private

Access &

CHKP Harmony

Connect for users

anywhere

App Experience

for users

anywhere

Aryaka Private

Access &

Global SD-WAN for

Branch offices and

remote users

One stop Shop

& Managed

Service

including SD-

WAN, Security &

Last Mile

Management


CHECK POINT AND ARYAKA’S

FULLY MANAGED SASE

CORPORATE

CORPORATE

NETWORKDATA CENTER IaaS

BRANCH

OFFICES

• FWaaS• Firewall VNF

INTERNET

INTERNET

• Secure Web Gateway

• DLP• Sandbox & CDR

• High performance global connectivity to multi-cloud applications for sites & remote users

NETWORK & VPN AS A SERVICE

• WAN Optimization, SDWAN, Routing, CDN, High Performance Global Backbone, Private Access

24x7

Managed

Service


Q&ASubmit Your Questions

SCHEDULE A DEMO

For a demo of Check Point and Aryaka’s solution, go to:

https://pages.checkpoint.com/aryaka-sdwan-demo.html

FREE TRIAL

For a free trial of Check Point and your Aryaka solution, go to:

https://portal.checkpoint.com/create-account/cloudguardconnect

https://pages.checkpoint.com/aryaka-sdwan-demo.html

https://portal.checkpoint.com/create-account/cloudguardconnect


TOLL-FREE:

888-TOCADRE

WEBSITE:

WWW.CADRE.NET

EMAIL:

[email protected]

Date post:	09-Dec-2021
Category:	Documents
Upload:	others
View:	2 times
Download:	0 times

FULLY MANAGED SASE FOR BETTER TCO

Documents