In a以前的博客文章, we detailed the networking and security challenges financial services institutions face in the digital era. These challenges included digitization and cloud migration, working from home, poor network infrastructure, cybersecurity risks and regulatory compliance.
在这篇博客文章中，我们将解释如何SD-WAN是解决金融服务行业中五个用例以克服这些挑战，加速业务增长并完全接受数字化转型的关键促进者。
1.简化网络基础架构，同时降低成本
With SD-WAN, financial institutions can securely leverage internet broadband and 5G/LTE connections at a lower cost and get the same benefits as private dedicated lines. SD-WAN indeed combines MPLS, broadband internet and 5G/LTE in a single logical link and routes the traffic based on business-driven policies. An advanced SD-WAN, such as the Aruba EdgeConnect SD-WAN edge platform optimizes data transmission in internet and 5G links using techniques such as正向误差校正重建会传输丢失的包装，并数据包订单校正that helps re-order data at destination.本地互联网突破是另一个功能，可根据安全风险直接将云应用程序流量发送到Internet，从而避免将所有流量进行回程到公司数据中心，从而释放了混乱且昂贵的专用MPLS行并降低成本。
此外，Aruba EdgeConnect通过统一路由器，防火墙和WAN优化网络在单个平台中的功能来帮助减少设备的蔓延。它还不断监视网络条件，并自动调整流量处理，以克服WAN Transport Service BrownT或任何其他网络中断的影响。
Aruba EdgeConnect enables financial institutions to move from a complex architecture to a simple, cost-effective network infrastructure
2.快速旋转新的分支机构并在家中工作
It can take two to four months to connect a new branch location or a new ATM location with MPLS. Not only can Aruba EdgeConnect SD-WAN deliver private line-like performance over broadband internet services, with its zero-touch provisioning approach, a new branch can be deployed in few days (or less) through centralized orchestration of configuration settings and security policies.
随着远程工作正在成为新的正常工作，金融服务的员工应在其家中享受相同水平的数字服务。通过使用Internet宽带，并随着5G的出现，Aruba Microbranch通过以一种简单且灵活的方式将家居办公室连接到总部，从而使家里成为现实。Micro Branch部署可自动化IPSEC隧道在远程站点的访问点之间与Parent WLAN网络的网关群集之间的自动化。它通过提供SD-WAN功能（包括编排和安全的Internet突破，在易于使用又功能强大的Wi-Fi访问点设备中，保护远程工人和小型远程分支位置。
与Aruba Microbranch SD-WAN牢固地连接
3.加速备份并改善灾难恢复计划
Data are often backed up in remote disaster recovery sites that can be hundreds or even thousands of miles away from the main headquarters data center. This distance results in latency that slows down data transfers. Data may also be not fully backed up, putting the financial institution at risk as it may lose important customer data in case of a disaster. And in the event a disaster recovery operation must be performed, it must be completed as quickly as possible to keep business running.
Optional Aruba Boost WAN optimization software, fully unified with Aruba EdgeConnect, uses TCP protocol acceleration techniques to achieve better throughput. It also employs sophisticated data deduplication and data compression algorithms. Duplicate data is fingerprinted and a pointer is created to reduce transmission of repetitive data across the WAN. Data compression leverages an LZ (Lempel-Ziv) compression algorithm that is applied both on the IP header and the payload.
随着Aruba Boost，随着要存储的数据量不断增加，金融机构确保在远程灾难恢复位置正确备份数据。
4.安全访问和保护客户数据
随着流动性的兴起，安全周边正在解散。金融机构的客户和员工从任何地方连接到金融服务应用程序。不再有可能确保有限的，定义明确的周长并在互联网流量中进行互联网流量，以便在公司数据中心进行安全检查，以增加应用程序响应时间并降低性能。安全现在应该基于零值的方法来标识用户和设备，并假定默认情况下不应信任它们。
SASE(Secure Access Service Edge) is an architecture that implements security services in the cloud. SASE combines WAN edge network functions at the branch such as SD-WAN, routing, basic security functions, and WAN optimization capabilities with security services including Firewall as a service, ZTNA (Zero-trust network access), CASB (Cloud Access Security Broker), SWG (Secure Web Gateway), and more delivered from a cloud-delivered security service.
Aruba EdgeConnect provides the foundation for a full SASE approach by incorporating role-based firewall capabilities. It natively integrates with third party cloud security vendors to provide fully automated orchestration capabilities. This allows financial organizations to select a best-of-breed SD-WAN provider and best-of-breed cloud security provider(s), depending on their needs, while easily transitioning from a traditional architecture to a SASE architecture.
Automate security orchestration based on application type and threat with Aruba EdgeConnect
5. Meet PCI DSS compliance mandates
财务本月itutions are required to comply with many kinds of regulations. An SD-WAN solution can help comply with these regulations. One example is the PCI DSS standard (Payment Card Industry Data Security Standard) that sets data security standards and guidelines for the payment card industry. PCIDSS indeed specifies twelve requirements to achieve compliance that can be met thanks to Aruba EdgeConnect. For example, one requirement specifies encrypting transmission of cardholder data over public networks, and another requirement specifies installing and maintaining a firewall configuration to protect cardholder data. These two requirements are easily met with Aruba EdgeConnect.
TheAruba Edgeconnect SD-Wanplatform使金融机构能够通过在同一逻辑链接中结合MPL，5G和Internet宽带线来简化其网络基础架构并降低成本。Aruba EdgeConnect是精心策划的，易于部署。EdgeConnect也可以部署在小型远程位置或家庭办事处，以提供与大型分支机构相同的SD-WAN功能。它提供了高级安全功能，包括数据加密，基于区域的防火墙和零值分段。再加上最好的云网络安全提供商，它是强大而可靠的SASE解决方案的基础，它使金融服务能够完全接受数字化转型，同时减轻网络安全风险。
要了解更多信息，请下载我们的商业文件金融服务的SD-WAN.
相关资源
