Business\nleaders now have a choice whether they want to continue using their trusted firewall\nor move to a next-generation firewall delivered by appliances or as cloud\nservices to protect the outer perimeter security in branch offices.<\/p>\n\n\n\n
Troye Technical\nDirector Kurt Goodall says Citrix offers various choices, from the\nlong-established multi-site to the advanced multi-layered approach, both of\nwhich can protect users and data at the branches, data centre, and clouds from\nmulti-vector cyber threats.<\/p>\n\n\n\n
“Citrix\nSD-WAN Integrated Firewall complements your trusted firewall investment\nand strengthens overall security infrastructure,\u201d he said.<\/p>\n\n\n\n
\u201cCitrix\nprovides an integrated perimeter firewall that masks users and infrastructure\nfrom cyber surveillance,” he explains.<\/p>\n\n\n\n
This\nintegrated firewall has global policy control, supports zone-based\npolicies so that you can implement granular micro-segmentation of traffic and\nenforce uniform policy consistently. Citrix SD-WAN can also intelligently track\nthe fast-changing open ports from SaaS and IaaS apps as trusted traffic and\ndirectly breakout the traffic to the internet, enhancing application\nperformance.<\/p>\n\n\n\n
It marks\nall other traffic, such as web browsing, as untrusted and forwards it to the\nfull security stack, typically located at the HQ or a private data centre.\nCitrix SD-WAN also takes extra precautions by encrypting all branch-to-branch\negress traffic, even when it is transported over a private MPLS line.<\/p>\n\n\n\n
Goodall\nsays Citrix SD-WAN automates connectivity to cloud security. <\/p>\n\n\n\n
“With\nmost enterprises embarking on some form of cloud transformation, Citrix\nrecommends extending perimeter security to the cloud, where apps and workloads\nreside,\u201d he said.<\/p>\n\n\n\n
Citrix\nhas partnered with industry leaders like Palo Alto Networks, Zscaler,\nand Symantec to deliver joint solutions that enable our SD-WAN to be\na transparent gateway for Secure Web Gateway (SWG) service.\nCloud-based SWG is a popular option for branch offices due to its simple and\nyet effective multi-layer protection.<\/p>\n\n\n\n
Citrix\nSD-WAN management platform is the key component in this joint solution,\nproviding on-boarding automation and a direct subscription link to Palo\nAlto Global Protect (aka Prisma) and Zscaler Secure Internet Gateway\nservices. Through API automation, Citrix SD-WAN also secures the\nconnectivity (via IPsec) from the branch to the Palo Alto, Zscaler and Symantec\nclouds.<\/p>\n\n\n\n
The\nbenefits of automation become more significant as more branch sites are\ninvolved, directly translating into time savings and reduction in configuration\nerrors. Last but not least, Citrix provides this automated on-boarding\ncapability free of charge.<\/p>\n\n\n\n
In\naddition, cloud-based security also enables a new service-consumption model. It\nprovides an option to shift to opex spending, which can be easily aligned with\nyour business growth. There is no need to deploy security appliances at every\nbranch. It also removes the need to build an in-house resource to manage the\nsecurity infrastructure.<\/p>\n","protected":false},"excerpt":{"rendered":"
Business leaders now have a choice whether they want to continue using their trusted firewall or move to a next-generation firewall delivered by appliances or as cloud services to protect the outer perimeter security in branch offices. Troye Technical Director Kurt Goodall says Citrix offers various choices, from the long-established multi-site to the advanced multi-layered […]<\/p>\n","protected":false},"author":25,"featured_media":23021,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[4950,182,5,6,10675,13],"tags":[11971,4157,6063,11967,118,11972,6065,7669,11968,11969,4095,5664,11970],"class_list":["post-30764","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-analysis","category-cloud","category-enterprise-security","category-insights","category-thought-leadership","category-top-stories","tag-api-automation","tag-citrix","tag-citrix-sd-wan","tag-citrix-sd-wan-integrated-firewall","tag-firewall","tag-ipsec","tag-kurt-goodall","tag-next-generation-firewall","tag-palo-alto-global-protect","tag-prisma","tag-symantec","tag-troye","tag-zscaler-secure-internet-gateway"],"acf":[],"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30764","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/comments?post=30764"}],"version-history":[{"count":1,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30764\/revisions"}],"predecessor-version":[{"id":30771,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/posts\/30764\/revisions\/30771"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media\/23021"}],"wp:attachment":[{"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/media?parent=30764"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/categories?post=30764"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intelligentcio.com\/africa\/wp-json\/wp\/v2\/tags?post=30764"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}