KEY PRODUCT FEATURES

• • Security features include Firewall, DLP, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Threat Extraction and Threat Emulation for zero-day attacks.
  • Threat Extraction removes exploitable content, and promptly delivers sanitized content to users.
  • Threat Emulation prevents infections from new malware and targeted attacks, using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques.
  • SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
  • Unified Security Management provides consistent security policy management, enforcement, and reporting for public, private, hybrid-clouds and on-prem networks in a single pane-of-glass.
  • Seamless cloud-native integration with Azure, AWS, Google Cloud, Oracle Cloud, Alibaba Cloud, Huawei Cloud, Tencent Cloud, IBM Cloud, Cisco ACI, VMware ESXi/NSX, Nutanix AHV, KVM and OpenStack.

Stop cloud breaches with CrowdStrike
CrowdStrike Falcon® Cloud Security is the cloud-native application protection platform (CNAPP) that stops cloud breaches. Built for today’s hybrid and multi-cloud environments, Falcon Cloud Security protects the entire cloud attack surface — from code to runtime — by combining continuous proactive security with real-time detection and response:

• • Cloud Runtime Protection: CrowdStrike takes an adversary-first approach to cloud defense, delivering a truly comprehensive hybrid runtime strategy. With a single sensor, augmented by rich agentless telemetry, Falcon Cloud Security delivers industry-leading cloud workload protection (CWP) and real-time cloud detection and response (CDR) to defend against active attacks across hybrid cloud environments. With battle-tested, real-time cloud indicators of attack (IOAs), automated response from the workload to the cloud control plane, and native integrations with identity and endpoint context, defenders are equipped to stop cloud breaches.
  • Proactive Security: To reduce risk before attacks occur, Falcon Cloud Security delivers agentless-driven posture management that proactively shrinks the cloud attack surface. Unlike typical solutions, CrowdStrike enriches cloud risk detections with adversary intelligence and graph- based context, enabling security teams to prioritize exploitable exposures and prevent breaches before they happen.

CrowdStrike offers both proactive and protective security as a managed service (MDR) through CrowdStrike Falcon® Adversary OverWatch™ cross-domain threat hunting and CrowdStrike Falcon® Complete managed detection and response (MDR), powered by integrated threat intelligence to protect the cloud control plane, host OS, and data plane.

Key capabilities

Proactive Security

• • Agentless Discovery: Instantly identify and assess cloud assets, misconfigurations, vulnerabilities, and security gaps without disruption to operations.
  • Graph-Based Context: Correlate assets, identities, configurations, and activity to reveal hidden relationships, attack paths, and risk exposure, backed by graph database technology.
  • Unified Security Posture: Continuously monitor cloud risks across cloud security posture management (CSPM), application security posture management (ASPM), data security posture management (DSPM), AI security posture management (AI-SPM), and cloud infrastructure entitlement management (CIEM) to provide full-stack security insights.
  • Adversary Risk Intelligence: Automatically map cloud risks to real-world adversary groups and their tactics, techniques, and procedures (TTPs), and score vulnerabilities beyond CVSS and EPSS using CrowdStrike ExPRT.AI to prioritize exposures based on CrowdStrike’s leading intelligence.
  • Vulnerability Reachability: Identify reachable vulnerabilities using code-level runtime analysis to prioritize remediation based on exploitability. Adversary Attack Paths: Map cross-domain attack paths spanning endpoint, identity, and cloud to expose and eliminate potential breach routes.
  • Timeline Explorer: Connect related cloud changes in a visual timeline to reveal the root cause of risk and replace manual investigation.
  • Remediation Steps: Provide accurate business-context-driven, code-level remediation guidance to accelerate risk mitigation.
  • DevSecOps Workflows: Integrate security into development pipelines with seamless support for ServiceNow, Jira, Azure DevOps, and GitHub.

Cloud Runtime Protection

• • Adversary Threat Intelligence: Detect and stop threats from groups like SCATTERED SPIDER and LABYRINTH CHOLLIMA with real-time intelligence.
  • Cloud Asset Inventory: Continuously discover cloud accounts, services, identities, and workloads to give SOC teams a complete, current view of what they are defending.
  • Battle-Tested, Real-Time Cloud IOAs: Get real-time visibility into malicious events on the cloud control plane.
  • Industry-Leading Sensor: Get real-time visibility and detections on cloud workloads with a single, lightweight sensor.
  • Falcon Next-Gen SIEM Unified Cases: Enable seamless cross-domain investigations and workflow creation using natively unified cloud telemetry and detections with identity and endpoint context in CrowdStrike Falcon® Next-Gen SIEM.
  • Real-Time Response: Help to stop cloud breaches with immediate agent-based and agentless containment of active attacks through CrowdStrike Falcon® Fusion SOAR.

Real-Time Protection
Effective cloud security depends on stopping attacks before they succeed. Cortex Cloud delivers real-time cloud defense through continuous detection and response across the entire cloud stack. Protection happens at execution, enabling security teams to intervene as attacks unfold and maintain control in highly dynamic cloud environments.

Code-to-Cloud-to-SOC Continuity
Attackers don’t distinguish between cloud and enterprise environments, and neither should you. Cortex Cloud connects application security, cloud runtime, and SOC operations through a shared data and response layer—one platform, zero silos. Security context is unified across development, deployment, and response, enabling action without manual handoffs or fractured workflows.

Automation with Guardrails
You need a speed-of-AI solution to overcome a speed-of-AI problem. Cortex Cloud applies agentic automation to security operations with enterprise-grade permissions, access controls, and approval paths. AI agents  prioritize and remediate risk according to defined boundaries, allowing organizations to scale automation safely and progress toward greater
autonomy at their own pace.

Key Features and Benefits

• • Scale managed devices on demand up to 1,500 gateways in a single domain or Security Management Server and up to 10,000 Gateways in a single appliance using Multi-Domain configuration.
  • Accelerated log rate to quickly address threats with real-time event analysis, compliance checks, and reporting.
  • Faster system response and load times with up to 70 TB of NVMe storage, offering high-speed data access and reduced latency.

Key Features

Management

• • Device groups, hierarchies, and tags for organizing policies.
  • Template stacks for reusable network configuration.
  • Administrator-specific commits to avoid accidental changes.
  • Easy software updates and upgrades.
  • SD-WAN connectivity for branch offices.
  • Zero Touch Provisioning (ZTP) to simplify onboarding and provisioning of firewalls at remote sites.

Visibility

• • Centralized visibility across the infrastructure.
  • Correlated insights that can be acted upon.
  • Health profiling for improved understanding of device usage.

Security

• • Easy transformation of legacy rules into application-based rules using intelligence gathered by
  • PAN-OS®.
  • Rule usage analysis to reduce the attack surface and improve security posture.
  • Centralized deployment of the latest security content updates.

Automation

• • Log filtering and automated actions on third-party systems.
  • Automated policy deployments for dynamic environments.
  • XML- and JSON-based REST APIs for easy integration.

Oversee Your Security Architecture with Strata Cloud Manager
Strata Cloud Manager is the industry’s first AI-powered unified solution for managing and operating the entire network security infrastructure. It transforms how organizations oversee their next-generation firewalls (NGFWs) and SASE deployments, aggregating telemetry from every enforcement point to deliver actionable insights. By combining AI-driven intelligence, automated operations, and integrated threat intelligence, it helps security teams stay ahead of emerging risks, maintain optimal performance, and reduce operational costs.

Gain Complete Visibility Across Your Network Security Estate
Achieve real-time, comprehensive visibility of your entire network security landscape including all users, applications, devices, and the most critical threats that need attention through a unified interface.

Enable Simple and Consistent Network Security Lifecycle Management
Streamline configuration and policy management across all enforcement points from a single interface. Apply consistent security policies across NGFWs and Prisma® Access with hierarchical folders and reusable snippets to simplify configurations. Improve operational efficiency with automated onboarding, policy deployment, and device refresh for seamless network security management.

Strengthen Your Security Posture in Real Time
Use AI-powered analysis to detect, resolve, and optimize policy anomalies like shadow and redundant policies and overly permissive or unused rules. Improve your security posture with integrated best practice recommendations and maintain compliance with industry and InfoSec standards.

Proactively Resolve Network Disruptions and Enhance User Experience
Predict, diagnose, and resolve network health issues—such as user experience problems, capacity bottlenecks, CVE vulnerabilities, service connection issues, and 130 other categories of issues—up to 90 days in advance to ensure smooth operations.

Instant Knowledge at Your Fingertips to Resolve Issues Fast
With Strata Copilot™, our AI-powered assistant featuring a natural language interface, quickly find, understand, and address security and operational challenges before they escalate. Its streamlined case creation capabilities ensure rapid support when you need it most.

Key Features
With TippingPoint TPS TXE Series, you can enable network security visibility along with IPS enforcement capabilities. Our inline network detection and response (NDR) takes a unique approach, isolating and reserving solution resources for NDR visibility without compromising inline reliability.
This enables you to:

• • Discover your attack surface. Find unknown assets with your network telemetry and correlate with Microsoft Entra ID data, vulnerability scans, and endpoint context.
  • Identify risky activities and track suspicious behavior beyond IPS filters. This includes large, unexpected file transfers and suspicious login attempts. Our AI/machine learning-driven approach allows you to analyze context from your network to integrations to your endpoints.
  • Prioritize your riskiest assets. Continuously assessed risk offers insights into suspicious network behaviors and known threats.
  • Act with prioritized recommendations. Leverage the power of your inline IPS with Trend Vision One workflows to remediate threats by blocking IPs, FQDNs, and URLs, or by deploying virtual patching recommendations tailored to your environment.
  • Visualize incidents for fast, comprehensive remediation. Network telemetry is archived and accessible so you can visualize incidents, displaying network-connected resources and communications over time.
  • Reduce security blind spots. Sophisticated and targeted attacks increasingly use encryption to evade detection. TippingPoint TPS helps you encrypt traffic with on-box secure sockets layer (SSL) inspection.

Simplify multicloud complexity
Organizations are often forced to reroute traffic, redesign infrastructure, or adopt cloud-only enforcement models to achieve consistent protection. With AI-powered protections and threat intelligence to help organizations stay ahead of emerging threats, F5 takes a different approach by bringing security and application services to applications, wherever they run.

• Security that follows the application – Protect applications across cloud, on-premises, Kubernetes, edge, and third-party environments with a consistent security model that adapts to your architecture—not the other way around.
• Front door for the entire application estate – Establish a unified entry point for applications wherever they run—from legacy and internal applications to cloud-native services and third-party platforms.
• A common fabric across every environment – Connect applications, services, and security consistently across cloud, on-premises, Kubernetes, edge, and third-party environments.

Industry-leading application delivery and security services
Applications are your business’s most valuable assets—keep them secure, available and performant with BIG-IP, a core component of the F5 Application Delivery and Security Platform (ADSP).

Leading today and shaping tomorrow
Recognized as the worldwide leader for application security and delivery, BIG-IP provides a comprehensive suite of highly programmable and automatable application services for hybrid and multicloud workloads.

With over 25 years of application services innovation and expertise, F5 BIG-IP not only meets today’s workload demands – it keeps you ahead of evolving application requirements to keep your apps protected and your users satisfied.

BIG-IP’s extensive app services suite
From load balancing and DNS services to application security and access controls, BIG-IP TMOS offers the most comprehensive suite of application services currently available within a single solution. Now, BIG-IP Next is following suit by developing a suite of products that will support the same core use cases and capabilities as its predecessor.

• • Load balancing and traffic management – Ensure apps are consistently fast and available by directing traffic based on dynamic and pre-defined policies.
  • App and API security – Protect apps and APIs from threats including zero-day vulnerabilities, L7 DoS attacks, threat campaigns, and malicious bot attacks.
  • Secure app access controls – Secure and simplify user access to apps and data with identity- and context-based access controls, regardless of app type or location.
  • Network and DDoS protection – Defend your network against incoming threats, including massive and complex DDoS attacks.
  • Encrypted traffic visibility and orchestration – Maximize infrastructure and security investments with dynamic, policy-based decryption, encryption, and traffic steering through security inspection devices.
  • DNS security and scale – Hyperscale and protect your DNS infrastructure during high query volumes and DDoS attacks, ensuring apps are highly available.
  • Traffic Programmability – Programmatically control application traffic with F5 iRules to optimize application performance and security.

Features
Cisco Firewall device manager (local management): ESXi, KVM and Openstack: Version 7.0 and above; Azure: Version 6.5 and above; AWS: 6.6 and above, Cisco Hyperflex: Version 7.0 and above; Nutanix AHV: Version 7.0 and above

Centralized management: Centralized configuration, logging, monitoring, and reporting are performed by the Cisco Firewall Management Center (all platforms including on-premises and in AWS, Azure, GCP and OCI(6.7 and above)) or alternatively in the cloud with Cisco Defense Orchestrator (ESXi and KVM; Azure: Version 6.5 and above, Cisco Hyperflex: Version 7.0 and above; Nutanix AHV: Version 7.0 and above)

Application Visibility and Control (AVC): Supporting more than 4000 applications, as well as geolocations, users, and websites. OpenAppID support for custom, open-source, application detectors.

Cisco Security Intelligence: Standard with IP, URL, and DNS threat intelligence

IPS license for Cisco Secure Firewall: Snort 3 IPS can passively detect endpoints and infrastructure for threat correlation and Indicators of Compromise (IoC)

Malware Defense license for Cisco Secure Firewall: Enables detection, blocking, tracking, analysis, and containment of targeted and persistent malware, addressing the attack continuum both during and after attacks. Integrated threat correlation with Cisco Secure Endpoint is also optionally available.

Cisco Secure Malware Analytics sandboxing URL filtering: Support more than 80 categories and 280 million of URLs categorized.

Automated threat feed and IPS signature updates: Third-party and open-source ecosystem: Open API for integrations with third-party products; Snort and OpenAppID community resources for new and specific threats

High availability and clustering: Active/standby (ESXi and KVM only) Deployment modes: Routed, transparent (inline set IPS-only), and passive; AWS, Azure, GCP and OCI: routed mode only

Advanced quality of experience (QoE) analytics

• • Monitor end-to-end health of web applications at-a-glance across the LAN, WAN, and application server
  • Machine-learned smart application thresholds autonomously apply to identify true anomalies based on past behavioral patterns
  • Monitor the health of all MX WAN links, including cellular, across your entire organization
  • Get detailed hop-by-hop VoIP performance analysis across all uplinks

Agile on-premises and cloud security capabilities informed by Cisco Talos

• • Next-gen layer 7 firewall for identity-based security policies and application management
  • Advanced Malware Protection with sandboxing; file reputation-based protection engine powered by Cisco AMP
  • Intrusion prevention: PCI-compliant IPS sensor using industry-leading SNORT® signature database from Cisco
  • Granular and automatically updated category-based content filtering
  • Other capabilities: SSL decryption/inspection, data loss prevention (DLP), cloud access security broker (CASB), SaaS tenant restrictions, granular app control, file type control.

Branch gateway services

• • Built-in DHCP, NAT, QoS, and VLAN management services
  • Web caching: accelerates frequently accessed content
  • Load balancing: combines multiple WAN links into a single high-speed interface, with policies for QoS, traffic shaping, and failover
  • art connection monitoring provides automatic detection of layer 2 and layer 3 outages and fast failover, including the option of integrated LTE Advanced or 3G/4G modems

Industry-leading cloud management

• • Unified firewall, switching, wireless LAN, and mobile device management through an intuitive web-based dashboard
  • Template-based settings scale easily from small deployments to tens of thousands of devices
  • Role-based administration, configurable email alerts for a variety of important events, and easily auditable change logs
  • Summary reports with user, device, and application usage details archived in the cloud.

Intelligent site-to-site VPN with Cisco SD-WAN powered by Meraki

• • Auto VPN allows automatic VPN route generation using IKE/IKEv2/IPsec setup; runs on physical MX appliances and as a virtual instance in public and private clouds
  • SD-WAN with active/active VPN, policy-based routing, dynamic VPN path selection, and support for application-layer performance profiles to ensure prioritization of applications types that matter
  • Interoperates with all IPsec VPN devices and services
  • Automated MPLS to VPN failover within seconds of a connection failure
  • Layer2 TP IPsec remote client VPN included at no extra cost with support for native Windows, Mac OS X, iPad, and Android clients
  • Support for Cisco AnyConnect remote client VPN (AnyConnect license required)

The ML-Powered NGFW is available in hardware (PA-Series), software (VM-Series and CN-Series), and cloud-delivered (Prisma Access) form factors.

Sangfor Network Secure Advantages Advanced Threat Detection
Sangfor Network Secure leverages artificial intelligence, machine learning, and real-time threat intelligence to deliver a superior malware detection rate of 99.76%, keeping the vast majority of security threats outside the network perimeter. Cloud Deception
Sangfor Network Secure is the first NGFW with built-in deception technology. The cloud deception feature sets up decoy systems in the cloud to help administrators locate and stop malicious actors and lateral movement.Next-Gen WAF Sangfor Network Secure is the first NGFW integrated with NG-WAF. The groundbreaking WISE Engine utilizes semantic analysis and machine learning techniques to empower NG-WAF to stop known and unknown web attacks.

SOC Lite
SOC (Security Operations Center) Lite is a lifesaver for security administrators of small to mid-size enterprises. Network Secure provides intuitive security visibility with response guidance that allows administrators to quickly determine the threat level of users, servers, and ransomware events.

Anti-Ransomware
Sangfor Network Secure integrates with Sangfor Endpoint Secure (Endpoint Detection and Response – EDR) and Cyber Command (Network Detection and Response – NDR) as part of Sangfor’s Anti-Ransomware solution.
Forensic threat intelligence data, collected from the network and endpoints, visualizes the hidden ransomware process through the GUI and provides “one-click quarantine” to eradicate the encryption-controlling application from all infected hosts.

Security Integration
Sangfor Network Secure integrates seamlessly with endpoint and network security products to create a truly holistic solution. Each product works in tandem to close the gaps between their spheres of influence to deliver a foolproof security system.

DNS-layer security: Simple to deploy, easy to manage DNS is at the heart of every internet connection request. Securing the DNS layer means blocking malicious domains, IP addresses, and cloud applications before a connection is ever established. Join the more than 26,000 organizations that use Umbrella to deliver a fast, safe, and reliable internet experience.

SSE: Converged security protects users anywhere and everywhere. Cybersecurity is evolving. SSE, or Security Service Edge, consolidates formerly disparate features like secure web gateway, data loss prevention, CASB, ZTNA, and DNS security into one cloud-delivered architecture, so organizations can streamline and improve their security resilience.As a leading provider of recursive DNS services, we’ve helped businesses of all sizes and industries connect to the internet with confidence. We’ve built a reputation on easy deployment and powerful protection anywhere users work. To help organizations embrace direct internet access, in addition to DNS-layer security and interactive threat intelligence, Cisco Umbrella now includes secure web gateway, firewall, and cloud access security broker (CASB) functionality, plus integration with Cisco SD-WAN, delivered from a single cloud security service.

Prisma® Access is the security service edge (SSE) component of the Prisma SASE platform. It delivers best-in-class protection to secure the way your organization works now and how it will work in the future. The definitive solution for achieving true zero trust security, it provides a unified, cloud-delivered security platform that protects all users, applications, devices, and data, regardless of location.

Secure All Users, Apps, Devices, and Data
While achieving true zero trust requires access control, it also demands continuous, deep inspection of all traffic. Prisma Access delivers a comprehensive, defense-in-depth posture by converging all core Cloud-Delivered Security Services (CDSS) into a single platform, with protection driven by Precision AI. This unified approach ensures access is right-sized for your specific organization’s needs and every connection is verified and continuously inspected through the end of the transaction.

Zero Trust Network Access
We go beyond simple connection and access. Prisma Access implements a zero trust model that ensures dynamic and adaptive access by using contextual insights, including user identity and behavior, roles and permissions, as well as application and device posture.

Firewall as a Service
Prisma Access provides proven Next-Generation Firewall (NGFW) capabilities as a firewall as a service (FWaaS) from the cloud. These capabilities include App-ID™, User-ID™, Device-ID, and other contextual insights to ensure full Layer 7 visibility and control across all ports and protocols.

Secure Web Gateway
You can ensure safe access to the web for all users with our best-in-class web security—secure web gateway (SWG). With Advanced URL Filtering and Advanced DNS Security in Prisma Access, you can protect your users from the latest and most sophisticated phishing and DNS-layered attacks. Additionally, flexible connectivity options, including PAC files, agent, agentless, and IPsec tunnel or SD-WAN, allow easy migration from legacy proxies. Remote Browser Isolation (RBI) is also supported via integration for advanced protection against web-based threats.

Remote Browser Isolation
Neutralize web-based threats by executing active web content in a secure, isolated container in the cloud. By streaming only a safe visual representation to the user’s device, RBI prevents malicious code from reaching the endpoint. It ensures seamless access to high-risk or uncategorized websites, while providing an air-gapped layer of protection against zero-day exploits and drive-by downloads.

Secure Enterprise Browser
Extend zero trust security directly to the point of productivity with the enterprise-grade Prisma Browser™. Our browser provides deep visibility and granular policy control for managed and unmanaged devices alike so users can securely access corporate applications without needing complex VPNs or agents. By governing data movement within the browser—such as copy and paste, printing, and file downloads—Prisma Browser effectively mitigates data leakage while ensuring a high-performance, native user experience.

Cloud Access Security Broker
Automatically keep pace with the explosion of SaaS apps with multimode (inline and API) functionalities to help today’s cloud-first organizations. Cloud access security broker (CASB) includes SaaS Security Posture Management (SSPM) capabilities, proactive visibility, and real-time data loss prevention.

Precision AI
Your organization can leverage Precision AI and Advanced WildFire® threat intelligence from our over 70,000 global customers to deliver inline, signatureless attack detection and zero-day exploit prevention with superior efficacy.

Industry-Leading Security Efficacy and Threat Intelligence
We deliver a defense-in-depth posture powered by the industry’s most comprehensive breadth of data and the collective intelligence of our global customers. By analyzing up to 5.4 billion new events and blocking over 30 billion threats daily, our AI-powered CDSS provides a “network effect,” where a threat identified for one customer instantly becomes a protection for all. This massive telemetry is further enriched by Unit 42®, our world-renowned threat research and incident response team, which provides expert human context to machine-speed detections. By converging this elite intelligence with Precision AI, Prisma Access stops never-before-seen zero-day exploits and evasive command-and-control (C2) attacks inline, ensuring your security evolves as fast as the modern threat landscape.

Unifying the best security with optimized internet and network connectivity

A software blade activated in Check Point Gateways, Check Point SD-WAN is deployed at the branch level and provides comprehensive prevention against zero-day, phishing, and ransomware attacks, while optimizing routing for users and over 10,000 applications.

Secure direct internet access
Catalyst SD-WAN security delivers full protection and control against all major web attacks arising from SaaS and internet access. The integrated security solutions provide the best balance of security and user experience for direct internet access.End-to-end micro segmentation and identity-based policy management, at scale Catalyst SD-WAN enables you to extend micro segmentation and identity-based policy management across Cisco Software-Defined Access (SD-Access) and non-SD-Access branches, driving consistent multidomain policy enforcement, all from a single pane of glass.

Branch security
Catalyst SD-WAN provides constant protection against all cyberthreats, from branches to multicloud SaaS environments. It also meets comprehensive data compliance requirements in every major industry sector, including highly regulated industries such as financial services, healthcare, utilities, and government.

Application performance optimization
Design a global network where critical enterprise applications always maintain the highest service-level agreements (SLAs) and optimal performance, even if problems occur in the network.

Multicloud access
Connect branches and a remote workforce to multicloud applications seamlessly with unified visibility and management.

Enforce regulatory compliance
Catalyst SD-WAN addresses compliance in a holistic way by offering a comprehensive set of security controls.

Dual-Active VPN Uplinks: Prior to the SD-WAN release, Auto VPN tunnels would only form only over a single interface. With the SD-WAN release, it is now possible to form concurrent AutoVPN tunnels over both Internet interfaces of the WAN Appliance.
The ability to form and send traffic over VPN tunnels on both interfaces significantly increases the flexibility of traffic path and routing decisions in AutoVPN deployments. In addition to providing administrators with the ability to load balance VPN traffic across multiple links, it also allows them to leverage the additional path to the datacenter in a variety of ways using the built-in Policy-based Routing and dynamic path selection capabilities of the WAN Appliance.

Policy-Based Routing (PbR): Policy-based Routing allows an administrator to configure preferred VPN paths for different traffic flows based on their source and destination IPs and ports.

Dynamic Path Selection: Dynamic path selection allows a network administrator to configure performance criteria for different types of traffic. Path decisions are then made on a per-flow basis based on which of the available VPN tunnels meet these criteria, determined by using packet loss, latency, and jitter metrics that are automatically gathered by the WAN Appliance.

Performance Probes: Performance-based decisions rely on an accurate and consistent stream of information about current WAN conditions in order to ensure that the optimal path is used for each traffic flow. This information is collected via the use of performance probes.The performance probe is a small payload (approximately 100 bytes) of UDP data sent by spokes to hubs or by hubs to other hubs over all established AutoVPN tunnels every 1 second. WAN Appliances track the rate of successful responses and the time that elapses before receiving a response. This data allows the WAN Appliance to determine the packet loss, latency, and jitter over each AutoVPN tunnel in order to make the necessary performance-based decisions.

Unified SASE
EdgeConnect SD-WAN tightly integrates with HPE Aruba Networking SSE to form a unified SASE platform and meet the security requirements of today’s digital organizations.

Designed for cloud-first organizations
Increase SaaS application performance and enforce security policies with intelligent traffic steering to the cloud and real-time monitoring of network. Deploy EdgeConnect in leading cloud providers and exchanges such as AWS, Azure, Google Cloud, and Equinix.

Network and security simplification
EdgeConnect SD-WAN provides comprehensive security services including next-generation firewall, fine-grained segmentation, IDS/IPS as well as routing, and WAN Optimization capabilities—enabling you to consolidate branch network and security functions by eliminating legacy firewalls and routers in branches.

Highest quality of experience
Experience consistent application performance including high quality voice and video over broadband connections. Real-time monitoring, continuous adaptation, and automated response assure the highest performance and availability, whether applications reside in the data center or the cloud.

Easily add primary/backup high speed LTE Links
By using a plug-and-play HPE Aruba Networking USB LTE modem with EdgeConnect SD-WAN, enterprises can fully manage their LTE equipment through Aruba Orchestrator, while ensuring optimal connections to critical applications and resources, even if primary connections fail or become unreliable.

Harness Trend Vision One™ – Zero Trust Secure Access (ZTSA) to securely connect your users, devices, and applications no matter where they are or what they need to access. With an agile approach to access control, strengthen your protective measures with granular visibility, enhanced security, and continuous risk assessment. Safeguard your users’ journey and engagement with generative AI (GenAI) capabilities driving zero-trust architecture that support your business objectives.

Rethinking trust in your organization
In many organizations, implicit trust is the standard. However, this exposes your business to considerable risk, in which case a single compromised identity could begin to wreak havoc in your environment and move throughout your network.

Much like digital transformation, your path toward zero trust is a journey rather than a solution. There are four important steps that can be taken depending on the highest-priority risk in your organization and current security posture. While more use cases exist, which can be implemented over time as your organization moves towards zero trust architecture, these initial steps include the following:

1. SWG: Securing access to the internet with real-time insights

• • Provides agent and agentless protection for secure web browsing and unsanctioned application access
  • Presents highly contextualized data to Trend Vision One for greater visibility
  • Offers visibility into internet access and browsing to return security and policy control
  • Protects both corporate and bring-your-own (BYO) devices
  • Integrates natively within Trend Vision One
  • Powered by Trend Micro™ Web Reputation Service, Trend™ Research, and ASRM

2. CASB: Secure cloud application access and control

• • Features agent and agentless protection to sanctioned SaaS applications
  • Delivers secure access to SaaS applications, checking for policy violations and security risks
  • Reduces the risk of unauthorized access to data and critical information
  • Monitors application activity through granular cloud application action control
  • Provides continuous risk assessment, powered by ASRM
  • Leverages a simple-to-manage interface within Trend Vision One

3. ZTNA: Secure access to business-critical resources with a modern approach

• • Provides agent and agentless access with detailed control options for easy end-user access to corporate applications and resources
  • Reduces the implicit trust of virtual private networks (VPNs) for greater risk assessment
  • Delivers authenticated and secure just-in-time access to applications and resources for greater protection
  • Reduces the blast area if there is a threat by limiting access to only specific parts of the network
  • Provides continuous risk assessment, powered by ASRM
  • Controls connections to applications and resources with continuous risk assessment dynamically allowing and revoking access as risk profiles change

Instead of granting access to the entire network, as a VPN does, ZTSA provides you with a gateway to specific applications and resources, restricting access to everything within the network that is not being employed. This way, should valid user credentials be stolen, the level of access they will grant to the organization will be limited and contained, effectively reducing the “blast area” of any cyberattack.

4. ZTSA – AI Service Access: Secure the user journey to GenAI services

• • Controls AI application usage by applying continuous risk-based access rules with granular visibility
  • Inspects GenAI services’ prompt and response to help avoid potential data leakage and unpredictable responses
  • Detects prompt injection attacks to mitigate risk of potential manipulation from GenAI services
  • Avoids the private model denial of service threats
  • Delivers secure access to GenAI applications, checking for policy violations and security risks
  • Reduces the risk of unauthorized access to data and critical information

The modules available as part of Zscaler Internet Access are:

• Cloud Secure Web Gateway (SWG): Deliver a safe, fast web experience that eliminates ransomware, malware, and other advanced attacks with real-time, AI-powered analysis and URL filtering from the only leader in the 2020 Gartner MQ for SWGs.
• Cloud Access Security Broker (CASB): Secure cloud apps with integrated CASB to protect data, stop threats, and ensure compliance across your SaaS and IaaS environments.
• Cloud Data Loss Prevention (DLP): Protect data in motion with full inline inspection and advanced measures like exact data match (EDM), optical character recognition (OCR), and machine learning.
• Zscaler Firewall & cloud IPS: Extend industry- leading protection to all ports and protocols and replace edge and branch firewalls with a cloud native platform.
• Zscaler Sandbox: Stop never-before-seen and elusive malware across web and file transfer protocols with AI-driven quarantine, sharing consistent and global protection across all users in real time.
• AI-Powered Cloud Browser Isolation: Make web-based attacks obsolete and prevent data loss by creating a virtual air gap between users, the web, and SaaS.
• Digital Experience Monitoring: Reduce IT operational overhead and speed up ticket resolution with a unified view of application, cloud path, and endpoint performance metrics for analysis and troubleshooting.
• Zero Trust Branch Connectivity: Reduce risk and complexity with non-routable branch and data center connectivity for users, servers, and IOT/OT devices.
• DNS Security: Optimize DNS security and performance for all users, devices, and applications, on all ports and protocols, anywhere in the world

• Deliver a superior user experience: Connecting users directly to private apps eliminates slow, costly backhauling over legacy VPNs while continuously monitoring and proactively resolving user experience issues
• Minimize the attack surface: Applications are made invisible to the internet preventing unauthorized users and devices from discovering them. The inside-out connections between user and app ensures apps and IPs are never exposed
• Enforce least-privileged access: Application access is determined by identity and context— not an IP address—and users are never put on the network for access
• Eliminate lateral movement: Applications are segmented so that users can only access a specific app, helping limit lateral movement
• Stop cyberattacks with complete inspection: Private app traffic is inspected inline to prevent the most prevalent web attack techniques
• Prevent data loss: Integrated DLP for private apps, advanced incident response and data classification to protect crown jewel apps
• Detect compromised users and devices: Integrated decoys work to quickly identify and remove malicious users and devices