About the Author
Gabriel Gomane has more than 15 years of experience in product marketing and product management, focusing primarily on networking, security and digital transformation. He has broad international experience,...
全文
With the COVID crisis, professional services firms such as architects, accountants, engineers, and attorneys have accelerated the digitization of their services, and at perhaps an even faster pace than ohter industries. The virtually overnight cancellation of in-person human interactions has indeed forced the sector to rethink the way they work to ensure resilience and business continuity. In this sector, hybrid working has also become the new norm since most work can be now performed online.
有了这些趋势，许多专业服务公司都将其应用程序转移到云上。有些是现成的应用程序，例如Microsoft 365，有些是特定于域的应用程序，例如合同生命周期管理和CAD应用程序。专业服务公司还利用这种迁移来重构其中一些迁移到云本地应用程序中。此外，专业服务通常是地理分布的，并且随着越来越远的劳动力，专业服务正在发展为超级分布的边缘环境。专业服务还处理高度敏感的文档，并且更容易受到网络安全风险。这需要为云和数据中心中托管的应用程序，服务，数据提供安全的连接。
An advanced SD-WAN solution helps professional services achieve this transformation and tackle five use cases to streamline digital transformation efforts and reduce cybersecurity risks.
Use case #1: Support cloud-first strategy
Professional services organizations often rely on legacy MPLS lines and a network architecture that routes all the traffic to the data center. With this architecture, the traffic is backhauled to the data center for security reasons, adding latency. It impacts application performance – and hence, customer experience - since most applications are now hosted in the cloud.
An advanced SD-WAN helps support a cloud-first strategy. Application traffic is identified on the first packet and intelligently steered to the cloud based on security requirements for the application and the performance of the underlying WAN services. If the traffic is from a trusted application such as Microsoft 365, it is sent directly to the cloud without requiring additional examination.
Additionally, virtual instances of SD-WAN can be seamlessly deployed in public cloud providers offering edge-to-cloud connectivity. The solution also accelerates trusted SAAS traffic by routing SaaS services directly to their closest point of presence using the best path based on advanced, real-time network health and performance measurements as well as local DNS resolution.
Use case #2: Implement SASE and mitigate cybersecurity risks
In the distributed environments of professional services firms, on-campus employees and remote workers need dynamic secure access. Additionally, many of them, such as attorneys, deal with sensitive documents that put them at significant risk of data breaches.
With a high turnover and employees connecting from anywhere, professional services firms also need to implement cybersecurity strategies that accommodate a mobile workforce. Legacy networks, mostly managed manually, are inefficient and create security vulnerabilities. By implementing SASE, professional services firms can continuously monitor the network for malicious activity and enable their employees to securely connect from distributed locations and from any device.
Sasestands for "Secure Access Service Edge" and combines SD-WAN capabilities with Gartner's newly defined approach called SSE (Secure Service Edge). SSE includes core features such as SWG (Secure Web Gateway), CASB (Cloud Access Security Broker), ZTNA (Zero Trust Network Access), Data Loss Prevention (DLP) and Firewall-as-a-Service (FWaaS), all delivered in the cloud.
高级SD-WAN解决方案与SSE功能本质地集成，使专业服务公司能够构建强大的SASE体系结构。这些解决方案提供了无缝的配置和管理，使IT和网络经理无法管理复杂和非安全体系结构。
Aruba EdgeConnect SD-WAN还包括动态分割，以超越SASE并构建一个Zero Trustarchitecture that segregates users, devices, and network traffic based on identity, role, and security posture.
用例# 3:确保高质量的语音和视频communications
Many professional services firms experience low quality of service regarding voice and video communications. This is due to packet loss, jitter and latency across the network. Additionally, as these organizations rely on a single link of communication to connect, these links are often prone to brownouts and outages.
Through network virtualization,SD-WAN能够结合多个链接，以确保更高的服务质量。例如，它可以链接两个不同的Internet提供商，也可以使用与Internet连接结合使用的MPLS线路。此外，先进的SD-WAN解决方案包括克服网络效率低下的路径调理能力。使用路径条件，丢失的数据包将在目的地自动重建，而无需通过定期发送奇偶校验数据包来重新安排它们。它还可以从不同链接中的不同链接中重新排序数据包，从而在其目的地提高网络性能。
根据服务质量和业务needs, the parity packet ratio is automatically set. For real-time applications requiring the highest performance and availability such as VOIP or video conferencing, the ratio can be set to 1:1 so that when a packet is sent, a parity packet is also transmitted, providing the highest availability. For less demanding applications such as ERP applications, the parity packet ratio is automatically and adaptively set to a ratio depending on measured packet loss, but no greater than 1:5.
When using UCaaS applications (Unified Communications as a Service) such as RingCentral, an advanced SD-WAN can automatically break out the traffic to the UCaaS provider without the need to backhaul the traffic to the data center, significantly improving quality of communications compared to a traditional network architecture.
用例4：快速部署新办公室
随着业务的增长，专业服务公司开设了新办公室，但是提供新的MPLS系列可能需要60到120天。此外，对更大带宽和连通速度的需求日益增长，通常会使MPLS电路对于新的办公室部署而言太昂贵了。相比之下，宽带互联网可以在几天内安装并提供比MPL更高的速度。但是，互联网连接通常会遭受数据包丢失和抖动的困扰。
为了克服互联网质量的挑战，高级SD-WAN包括前面讨论的路径调理能力。使用零接触式配置，设置是无缝的，并且不需要本地经验丰富的IT员工。在分支机构中，工作人员只需要将SD-WAN解决方案连接到网络和配置以及安全策略即可自动检索。
此外，Aruba EdgeConnect Enterprise之类的高级SD-WAN解决方案集成了各种功能，例如防火墙，路由器和WAN优化，允许本地办公室消除某些网络设备，从而简化了安装。
Use case #5: Transmit large files and accelerate backups
专业服务公司与大型文件合作，无论它们是CAD文件，蓝图，法律文件等。由于专业服务公司在地理上分散，因此这些站点之间的距离会增加延迟，从而产生较长的数据传输时间。此外，这些企业将其文件备份到远程位置以进行灾难恢复目的并不少见。这些备份站点可能相距甚远，潜伏期会影响备份时间。
TheAruba EdgeConnect Enterprise SD-WAN platformsupports optional WAN optimization capabilities that allow professional services companies to accelerate file transfer. WAN optimization uses several techniques to accomplish this acceleration. One of them is TCP acceleration which reduces delays caused by window scaling and acknowledgment procedures. The second technique is the use of data deduplication and compression. Duplicate data is removed and replaced with a fingerprint and pointer so that only the necessary data is transmitted over the WAN. Data compression reduces the amount of data transmitted through a compression algorithm.
用统一的Aruba Edgeconnect SD-WAN面料交付边缘到云的连通性和安全性
在后期的时代，专业服务组织已经加快了其数字化转型计划，以提供更好的客户体验并满足混合工作的需求。专业服务公司现在必须解决向云托管应用程序和超级分布环境的转变，在这些环境中，员工和客户从任何地方连接，从而导致绩效和安全问题。Aruba EdgeConnect是一种高级的SD-WAN解决方案，它可以作为边缘和混合云之间的主链启用边缘到云架构。Aruba EdgeConnect SD-WAN明智地突破并根据应用程序类型加速了Internet流量。它与领先的云安全供应商紧密集成，以便专业服务公司可以加速其遵守SASE框架。
To learn more, download ourSD-WAN解决方案概述专业服务。
Other Resources:
