fully managed sase for better tco
TRANSCRIPT
Copyright 2021 Aryaka Networks, Inc.2
Darling Ingredients Inc. develops, produces, and sells natural
ingredients from edible and inedible bio-nutrients. The
company operates through three segments: Feed
Ingredients, Food Ingredients, and Fuel Ingredients.
Alex LaiNetwork Manager
Darling Ingredients Inc.
• Headquartered in Irving, Texas
• $3.4B Revenue
• Founded in 1962
• 10,000+ employees globally
• 200 processing locations across 5
continents
Copyright 2021 Aryaka Networks, Inc.
100% High
Availability
24x7x365
Support
for Lean
IT Team
1 Single
Network
Stable
Connectivity to
China
3
Challenges Before Aryaka
• Business outgrew MPLS T1 and NxT1 bandwidth
• Managing multiple MPLS providers globally
• Locations in China had poor WAN performance
• Lean IT team
Advantages of Aryaka’s Managed SD-WAN for Darling
• An end-to-end solution + “one throat to choke”: Fully managed global SD-WAN,
including internet provisioning, FW management & ISP management
• Consistent, reliable connectivity: Reliable user experience at all global locations,
including China
• Constant innovation + integration of customer feedback: Always thinking of
ways to provide more value
4©2021 Check Point Software Technologies Ltd.
ENTERPRISE CONNECTIVITY AND SECURITY NEEDS ARE EVOLVING
Direct Internet breakout becoming the norm with SD-WAN
Remote user access is the new normal
Applications are distributed everywhere
INTERNET
CLOUD
DATA
CENTER
CORPORATE NETWORK
OFFICES
OFFICES
SD-WAN
REMOTE USERS
5©2021 Check Point Software Technologies Ltd.
THE RESULT: COMPLEXITY IN MANAGING, SECURING AND ENSURING CONNECTIVITY
Remote user access is the new normal
Direct Internet Breakout with SD-WANRemote user access is the new normalApplications are distributed
everywhere
Inconsistent policy enforcement
and application experience
Challenge with scalability and
global coverage
Expanded attack surface and
increased overhead
6©2021 Check Point Software Technologies Ltd.
DATA CENTERCORPORATE
NETWORKINTERNETIaaS SaaS
WHY ENTEPRPRISES OF ALL SIZES ARE MOVING TO SASE
REMOTE USERS OFFICES
• Protect remote users and offices
• Ensure seamless connectivity anywhere
• Secure enterprise applications
• Consume networking and security as a
single cloud-based service
SASE
7©2021 Check Point Software Technologies Ltd.
WHAT DOES A SUCCESSFUL SASE IMPLEMENTATION LOOK LIKE?
Reduced administration
overhead and TCO
Uncompromised security for
users, branches and apps, built to
prevent
Seamless user experience
and networking performanceSuccessful
SASE Implementation
9©2021 Check Point Software Technologies Ltd.
CHECK POINT AND ARYAKABEST OF BREED SASE SOLUTION
BE
ST
OF
NE
TW
OR
KIN
G
BE
ST
OF
SE
CU
RIT
Y
Next Gen FWaaS
Secure Web Gateway
Data Loss Prevention
Threat Prevention
NGFW VNF
Sandboxing & CDR
SD-WAN & Routing
Private Access for
remote users
Global Hi-performance
Backbone
WAN Optimization
NaaS
SINGLE SERVICE
FROM CLOUD
SASE
Managed offering inc last
mile services
11©2021 Check Point Software Technologies Ltd.
SECURE FROM THE CLOUD OR ON-PREMISES
ON-PREMISES VIRTUAL NETWORK FUNCTION
ON-PREMISES BRANCH SECURITY GATEWAYS
• Secures incoming and outgoing
connections,
• Integrated with on-prem SD-
WAN
• High performance
• Latest security
• Integrated wireless, LTE/4G or
VDSL
CLOUD NETWORK SECURITY AS A SERVICE
• Easily deployed
• Consistent security across
thousands of branches
SD-WAN
13©2021 Check Point Software Technologies Ltd.
SECURE BRANCH OFFICES FROM THE CLOUD
CLOUD NETWORK SECURITY AS A
SERVICE
Consistent security across 1000s of branches
Deployed in less than 5 mins
SD-WAN advancedIntegration and automation
14©2021 Check Point Software Technologies Ltd.
• 100s of PoPs around the globe
• Dual tunnels for 99.999% uptime SLA
• Less than 50 ms latency
• High Performance 1 Gbps per tunnel CO-LOCATED WITH
FAST LOCAL CONNECTION, ANYWHERE
15©2021 Check Point Software Technologies Ltd.
CONSOLIDATES CORE SECURITY SERVICES
Next
Generation
Firewall
Zero-Trust Network
Access (SDP)
Threat
Emulation
(Sandboxing)
Data Loss
Prevention
Secure Web
Gateway
Threat Extraction
(CDR)
16©2021 Check Point Software Technologies Ltd.
POWERED BY THE WORLD’S MOST EXTENSIVE THREAT INTELLIGENCE NETWORK
The industry’s best catch rate Protecting against 25 out of NSA’s Top 25
Vulnerabilities in the Wild
PR
OC
ESSED D
AILY
13 Million Emulations
2,000Zero-Day Files
3 Billion Queries
ALWAYS UP-TO-DATE ZERO-DAY PROTECTION
17©2021 Check Point Software Technologies Ltd.
HOW DO YOU SECURE REMOTE BROWSING?
• URL filtering
• Advanced Sandboxing
• Threat Extraction (CDR) for downloaded files
• Malware and phishing prevention
• Fast access anywhere
• Integrated with Aryaka Private Access client for remote users
REMOTE USERS
INTERNET
18©2021 Check Point Software Technologies Ltd. Copyright 2020 Aryaka, Inc.
SECURE BRANCH OFFICES AT THE EDGE
19©2021 Check Point Software Technologies Ltd.
VIRTUAL NETWORK FUNCTION
• Secures incoming and outgoing connections• Integrated with on-prem SD-WAN
Flexible
Management
Automated
Deployment
SD-WAN
Integration
20©2021 Check Point Software Technologies Ltd.
• Maximum privacy with integrated on premise SD-WAN Edge security
• Internal and external connections security
• 500 Mbps (average) threat prevention
QUANTUM EDGE
Latest security
IPSAnti-BotSandboxingAnti Phishing
Lightweight VM
1Core
1GBRAM
1GBDisk
Integrated with SD-WAN
SD-WAN
21©2021 Check Point Software Technologies Ltd.
CHECK POINT AND ARYAKABEST OF BREED SASE SOLUTION
BE
ST
OF
NE
TW
OR
KIN
G
BE
ST
OF
SE
CU
RIT
Y
Next Gen FWaaS
Secure Web Gateway
Data Loss Prevention
Threat Prevention
NGFW VNF
Sandboxing & CDR
SD-WAN & Routing
Private Access for
remote users
Global Hi-performance
Backbone
WAN Optimization
NaaS
SINGLE SERVICE
FROM CLOUD
SASE
Managed offering inc last
mile services
23©2021 Check Point Software Technologies Ltd.
Traditional
SD-WAN
Vendors
Lack a global
network or
managed offerings
Traditional
MSPs
Stitch together
technology
offerings
Global NetworkAs-a-Service
SD-WAN
Technology
TRADITIONAL SD-WAN APPROACHES ARE EITHER/ORAN INTEGRATED APPROACH DELIVERS THE POWER OF AND
24©2021 Check Point Software Technologies Ltd.
AWS Google Azure OracleAlibabaA ryaka P O P s
Seoul
Hong Kong
Chennai
Sydney
Seattle
San Jose
Los Angeles
Chicago
Dallas
Miami
Sao Paulo Johannesburg
Dubai
Singapore
SydneyPerth
Hong Kong
Seoul
Beijing
Delhi
Mumbai
San Jose
Ho Chi Minh City
Ashburn
Newark
Toronto
London Amsterdam
Frankfurt
Moscow*
Dublin
Paris*
Tel Aviv
Shenzhen
Shanghai
Taipei
Tokyo
BangaloreChennai
* Available in 2021, while dates are subject to change: Moscow in Q3, Paris in Q4, Auckland in Q4.
▪ Turn up sites in hours vs. MPLS
▪ Coverage to 95% of Knowledge Workers
(within 30ms)
▪ Fast access to major IaaS, SaaS, PaaS
resources
▪ Flexibility to move sites and resources
quickly
ARYAKA’S GLOBAL CLOUD FOOTPRINT FOR A CONSISTENT MULTI-CLOUD EXPERIENCE
Auckland*
25©2021 Check Point Software Technologies Ltd.
Traditional Box
Vendor
Aryaka
Managed SD-WAN
Traditional
MSPs
Fully Managed Service with 24/7
support and Global NOCs
Managed Last-mile connectivity with
procurement and monitoring
Multi-Cloud Architecture with
Direct connectivity
Guaranteed Application Performance with
built-in WAN optimization
Global L2 Points-of-Presence reaching 95%
of world’s knowledge workers
Consistent Global SLAs with single
point of contact (SPOC)
Secure Transport, Edge and
Managed Firewall as-a-service
65ARYAKA NPS SCORE
ARYAKA CLOUD FIRST WAN VS. TRADITIONAL SDWAN APPROACHES
26©2021 Check Point Software Technologies Ltd.
A CLOUD-FIRST APPROACH TO MANAGED SD-WAN
Consume Your Network As-a-Service
26
Private &
Partner
CloudSaaS Providers
Public Clouds
SmartConnect
Connectivity-as-a-service
SmartCloud
Multi-Cloud Networking as-a-
service
SmartInsights
Actionable Insights-as-a-service
SmartSecure
VPN & Security-as-a-service
SmartOptimize
Application Acceleration as-a-
service
27©2021 Check Point Software Technologies Ltd.
Bridging the Evolution to SASE
Branch Edge Security User Anywhere Security
Aryaka Private Access users
ARYAKA AND CHECKPOINT SOLUTION OVERVIEW
28©2021 Check Point Software Technologies Ltd.
Internet
ARYAKA OFFERING WITH CHECKPOINT QUANTUM PORTFOLIO
ISP Router
SW
LAN Switch
IP Addr B
IP Addr A
Aryaka Core
NGFW VM
SmartSecure
Hosted VM Firewall Service
SmartSecureManaged Firewall
Service
• Single Branch footprint for SDWAN, WAN Optimization and Security
• Best of Breed Edge Security with Checkpoint Quantum Edge
• Global reach without the need for additional truck rolls
• Full VM Life Cycle Management from the MyAryaka Services Portal
• Aryaka White Gloved Managed Firewall Service for Global deployments
• Covers for Quantum Edge(virtual) & Quantum Spark (physical) portfolio
• Opex based Monthly subscription model including CHKP licensing and managed service
29©2021 Check Point Software Technologies Ltd.
SMARTSECURE PRIVATE ACCESSDelivering on The New Hybrid Workplace with a Cloud-First WAN
Secure Internet
30©2021 Check Point Software Technologies Ltd.
SMARTSECURE PRIVATE ACCESS
FlexibilityEnable the hybrid workplace Globally with the ability to immediately adapt to rapidly changing traffic patterns
PerformanceUpto 400% performance improvement over internet by leveraging Aryaka’s Global L2 Core SmartConnect Network
Ease of DeploymentLower TCO by simplifying network operations with a fully managed deployment model and Services PoP aggregation
Delivering on The New Hybrid Workplace with a Cloud-First WAN
Managed securityHarmony Connect Next Gen Threat Prevention for Secure Internet Access & built-in Zero trust capabilities for user & context based access
31©2021 Check Point Software Technologies Ltd.
NG Firewall
ARYAKA + CHECKPOINT PAVING THE ROAD TO MANAGED SASE
Branch
BranchPOP-2
Aryaka L3/4 Stateful FW Managed Cloud Security
IaaS
SaaS
Remote
Users
Aryaka SmartSecure
Private Access with
Zero trust
On-Prem DC
32©2021 Check Point Software Technologies Ltd.
• Operations in > 30 countries• 8K+ users for Aryaka SmartSecure Private Access & CheckPoint
Harmony Connect managed by Aryaka• Standardized management by Aryaka as single point of contactDigital Transformation &
MPLS migration
Multi $BillionFleet Management and
Driver Mobility Company
Security for User
anywhere
Aryaka Private
Access &
CHKP Harmony
Connect for users
anywhere
App Experience
for users
anywhere
Aryaka Private
Access &
Global SD-WAN for
Branch offices and
remote users
One stop Shop
& Managed
Service
including SD-
WAN, Security &
Last Mile
Management
33©2021 Check Point Software Technologies Ltd.
CHECK POINT AND ARYAKA’S
FULLY MANAGED SASE
CORPORATE
CORPORATE
NETWORKDATA CENTER IaaS
BRANCH
OFFICES
• FWaaS• Firewall VNF
INTERNET
INTERNET
• Secure Web Gateway
• DLP• Sandbox & CDR
• High performance global connectivity to multi-cloud applications for sites & remote users
NETWORK & VPN AS A SERVICE
• WAN Optimization, SDWAN, Routing, CDN, High Performance Global Backbone, Private Access
24x7
Managed
Service
34©2021 Check Point Software Technologies Ltd.
Q&ASubmit Your Questions
SCHEDULE A DEMO
For a demo of Check Point and Aryaka’s solution, go to:
https://pages.checkpoint.com/aryaka-sdwan-demo.html
FREE TRIAL
For a free trial of Check Point and your Aryaka solution, go to:
https://portal.checkpoint.com/create-account/cloudguardconnect
35©2021 Check Point Software Technologies Ltd.
TOLL-FREE:
888-TOCADRE
WEBSITE:
WWW.CADRE.NET
EMAIL: