Aryaka Takes Multi-Layer, Multi-Vendor Approach to SD-WAN Security

March 12, 2018

By Paula Bernier, Executive Editor, TMC

SD-WAN has become a hot topic in recent years. And, increasingly, security is becoming a key part of that conversation. In just the latest indicator of this trend, Aryaka (News - Alert) today unveiled its PASSPORT security platform and ecosystem.

Aryaka says its approach here is unique because it provides three additional layers of SD-WAN security. Security is a component of the Aryaka global private network as the company delivers advanced DDoS protection through its partnership with Radware (News - Alert). And Aryaka now offers an Early Warning Visibility Portal.

Additionally, Aryaka has partnered with best-of-breed security specialists, Palo Alto (News - Alert) Networks and Zscaler. Palo Alto provides Layer 1 network edge security for Aryaka. That includes firewall, intrusion prevention, and more. (Aryaka also has its own offerings in this realm.) And both Palo Alto and Zscaler offer cloud security in the focus of antivirus, intrusion protection, and more.

In last week’s interview with us, Aryaka CMO Gary Sevounts shared large enterprise customers need multi-layer security and want to employ various vendors to enable that. Using a combination of security suppliers, he adds, also limits vulnerability. That’s because if there’s a security hole in one vendor solution, a multi-vendor security environment prevents it from permeating throughout the entire stack.

“At the end of the day you have to have layers,” Sevounts says. “The question is: Where are those layers coming from?”

There are two kinds of SD-WAN, adds Sevounts. One runs over the internet, opening itself to many attack vectors, he says. The other exists on a private, controlled network and each company has its own dedicated bandwidth and channels. That second model is what Aryaka delivers, he says, adding that’s significantly more secure than the internet-based model.

As for the Early Warning Visibility Portal, that's an interface through which Aryaka customers can identify nefarious activity. It shows anomalies like odd traffic spikes or multiple connections from an unexpected part of the network.

“IT for the first time can view 100 percent of traffic,” says Sevounts of TMC SD-WAN Leadership Award Winner Aryaka.

So, for example, if there are hundreds of 1-kilobit connections in one region, the portal can highlight that, as it can be an indicator that a DDoS attack is starting to brew.

Edited by Mandi Nowitz