SD-WAN & SASE Carrier-grade Enterprise Networking

All components can be deployed in any public cloud, support subscription and elasticity

All architectural components support multi-tenancy, VRF complete isolated. supports more than 100 tenants.

Monitor backbone quality in realtime, freely slice traffic, based on tenant, Qos, Saase Optimization, dalictin Distribution of Core Network resource.

Supports static routing, BFD, VRRP, VRF/Multi-VRF, OSPF, BGP, MP-BGP, ECMP Route Distribution

Based on source, destination, Zone, Region, Traffic, IP-Flag, DSCP, IEEE802, IP etc critiria.

Support tenant level policy, control plan protection, traffic categorization, rate limiting, traffic engineering, shaping, HQoS: PIR and CIR

Any NAT between sites, support STUN and TURN-RELAY mode

Provide gateway between old non-SD-WAN network and new SD-WAN network. To achieve MPLS and SD-WAN coexistence and intercommunication

Automatically identify 3000+ Applications and protocols, application based routing, traffic engineering, categorization, filtering, visualization and LOG.

Desktop CPE provides 4G/Wifi function, enable customer flexible and agile way to access network.

Support wide area layer 2 networking, EVPN over SD-WAN.

Support multiple transports, MPLS, Internet, LTE, 5G, PPPoE, T1/E1.

Provides protection against virus, vulnerabilities related to file types and blocks potentially risky file transfers, applications, file with specific size, protocols, and traffic direction.

High-performance 3rd-party VNF management platform.

All components support IPV6, including all the network security functions and headend components.

Decouple SW & HW, support DELL, Advantech, Nexcom white-box vendors.

Big data analytics for traffic DPI data and security logs.

Support both hardware at branch office or remote access with client applications.

Ensure customer use intranet DNS, access intranet with intranet DNS.

Employs multiple optimization strategy, including SaaS Optimization, Route optimization, TCP Optimization, FEC, Packet cloning etc.

All components support HA and DR, can help customer implement cross region HA and DR.

Automatic Signature update with network/stream based protection. Support more than 35 file types, multiple protocol and decompression.

Customer can define URL Category and/or reputation based policy, can define captive portal and response type.

Prevent known and unknown network and application layer vulnerabilities, to avoid damage & destructioncorporate information resources.

Provides protection against virus, vulnerabilities related to file types and blocks potentially risky file transfers, applications, file with specific size, protocols, and traffic direction.

Integrate with AD through LDAP and Kerberos to obtain user & group info, and apply security and access permisisons.

Identify and provide protection against L3& L4 floods, spoofing, scanning and packet anomaly detection.

Monitor path SLA in real-time, select best path to improve throughput.

Through APP ID, link SLA monitor, create Smart TE policy to achieve guaranteed performance.

Monitor SLA in realtime, optimize TCP protocol, achieve continuous and stable transmission experience.

Clone traffic on multiple links, SLA quality won't degrade even one link has high packet loss ratio.

Divide traffic into 2 or more paths to achieve link bundling.

Monitor SLA in realtime, optimize TCP protocol, achieve continuous and stable transmission experience.

FEC on any link to fight low packet loss.

Use MOS score to evaluate end user experience, and design policy for optimization.

Monitor major SaaS User Experience, and execute policy to enhance O365, Skype, Salesforce.