H3C SD-WAN security solution builds an integrated security assurance system for enterprise WAN

On September 26-27, the "2022 China Cloud Network Intelligent Connection Conference" with the theme of "Cloud Network Intelligent Connection Builds the Foundation of Digital Economy" was held in Beijing. During the two-day event, industry experts and scholars exchanged views on popular cutting-edge technologies such as cloud-network integration, SD-WAN/SASE, computing power network, and deterministic network. New H3C Group, a subsidiary of Tsinghua Unigroup, was invited to attend the conference and shared how to enable SD-WAN security advancement with cloud-network security integration and help enterprises build WAN security.

Network digital transformation: Enterprise WAN construction enters a new stage

In recent years, the digital transformation of enterprises has driven the evolution of network infrastructure towards cloud-network-end integration, which has led to the emergence of new characteristics of digital enterprises, including multi-cloud business deployment, diversified business development, marginalized business scenarios, and globalized business scope. The birth of SD-WAN has brought open and cloud-based connectivity capabilities to the interconnection of enterprise branches and data centers, and has played an important role in reducing enterprise cost investment and simplifying network deployment.

However, with the widespread application of SD-WAN technology, the network boundaries of enterprises have extended from local terminals and local area networks to remote devices and cloud platforms within the WAN range, providing more opportunities for worms, Trojans, ransomware and other malware. Under the requirements of the National Cybersecurity Law and Level Protection 2.0, the security construction of enterprise WANs has entered a new stage, and the security requirements of edge nodes have reached a new level. The entire network needs to have unified equipment deployment, policy management, threat protection and visualization. In this context, secure SD-WAN with network and security integration capabilities has become the best practice for effectively responding to WAN challenges.

H3C SD-WAN Security Solution Systematically Builds Security Capabilities

As a leader in digital solutions, H3C Group fully shared the new architecture of SD-WAN security solutions at this conference based on enterprises' deeper security needs for the next-generation network system. Relying on the four core capabilities of network security integration, it builds an integrated and comprehensive security protection system for enterprises.

Vice President of R&D, Security Product Line, H3C Group

Chief Architect Fu Zhiqiang delivered a keynote speech

● Unified security management center, eight unifications of “network + security” operation and maintenance: In response to the demand for unified network and security operation and maintenance, H3C Group has achieved the unification of eight major functions including assets, alarms, configuration, services, operation and maintenance management and identity authentication, operational views and architecture deployment, which greatly simplifies the operation and maintenance difficulty of security personnel and improves the overall security protection capabilities and security disposal efficiency.

● "Network + Security" business integration to achieve full-process automatic orchestration: From branches to headquarters to the cloud, full-process automated security protection capabilities, end-to-end full-network automated security protection ensures link security, data security, and business security, improves security operation and maintenance efficiency, and reduces security operation and maintenance costs.

● Intelligent Security Gateway, the cornerstone of “SD-WAN+Security” integration: Based on the SDN architecture, the Intelligent Security Gateway can help users save WAN line costs while better improving network resource utilization, optimizing user data access experience and ensuring user network security. It has the core values ​​of branch security, fine control, and cloud-edge collaboration.

● Independent cloud security resource pool, flexible empowerment of enterprise WAN security: H3C cloud security resource pool integrates firewall, IPS, LB, anti-virus and other security capabilities. The independent cloud security resource pool can be flexibly connected to private cloud and hybrid cloud scenarios, providing plug-and-play pooled security service orchestration capabilities for the WAN, while meeting SRv6 scenario-based deployment requirements, and comprehensively improving enterprise WAN security.

From branches and aggregation to central equipment, H3C Group's SD-WAN security solution provides one-stop service capabilities for network and security integration, with comprehensive advantages such as low cloud costs, extremely simple operation and maintenance, multi-terminal access in all scenarios, and integrated integration of cloud, network and security. In the future, adhering to the "Cloud Intelligence Native" strategy, H3C will continue to output network security products and services with technology-driven as the core, empower network security construction under the trend of "cloud-network integration", and escort the safe development of the digital economy.